Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa
File:                     f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa (raw, json)
Hash identifier:          E378da7xVJm5z3l0l4UGiLFZIRZIkcl40DyEou0NxN4=
Subject key identifier:   33:35:AA:D7:F3:92:D6:73:0E:61:72:72:CE:B7:6A:EF:DB:28:3D:26
Certificate issuer:       /CN=2e78bb85-c387-4ef5-a2b3-647636da166a
Certificate serial:       010D0C9F432858498DCE59010ACBE746CF27B6A0
Authority key identifier: 0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa
Signing time:             Thu 17 Apr 2025 07:58:34 +0000
ROA not before:           Thu 17 Apr 2025 07:58:34 +0000
ROA not after:            Wed 16 Jul 2025 07:58:34 +0000
asID:                     57624
IP address blocks:        208.78.36.0/24 maxlen: 24
                          208.78.37.0/24 maxlen: 24
                          208.78.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8d:ce:59:01:0a:cb:e7:46:cf:27:b6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e78bb85-c387-4ef5-a2b3-647636da166a
        Validity
            Not Before: Apr 17 07:58:34 2025 GMT
            Not After : Jul 16 07:58:34 2025 GMT
        Subject: CN=7d2a3748-bedf-4deb-8277-4f2affbba51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:42:63:25:66:e4:17:a4:cb:8e:43:51:35:eb:
                    8e:ee:db:83:d3:7b:95:71:bc:fe:94:cd:24:fa:f4:
                    d0:7c:f2:65:cb:2c:80:6d:2e:56:d1:39:e1:35:01:
                    89:46:5a:5c:ce:a5:c4:d5:64:de:ab:16:35:6b:4a:
                    cc:c2:a6:a2:fe:a7:8a:c9:97:44:25:26:42:bb:86:
                    de:7b:04:d7:bc:13:96:3f:ce:be:3b:2e:9f:6b:4b:
                    46:4e:4d:4f:e1:49:6f:83:a0:b6:e1:c7:e9:7a:c3:
                    79:4e:75:98:c1:18:0a:cb:b8:67:57:c0:23:6c:93:
                    cd:ec:8b:2b:e5:c7:0e:e9:71:9a:a4:3b:ef:29:01:
                    46:3a:8d:a7:ea:8c:5d:98:3b:1e:ee:aa:d0:c8:5a:
                    34:e1:db:a2:b8:77:e8:4e:cb:7a:e9:00:d3:9f:a0:
                    bf:d9:17:eb:c1:1d:8d:76:b0:b1:f5:03:74:d5:9b:
                    b3:4c:56:d9:99:cc:a4:1c:ac:95:ec:5e:21:62:1b:
                    2c:9f:e0:79:f3:e6:38:ac:59:4a:b1:34:f4:d4:8d:
                    b2:ef:85:18:ae:92:92:09:63:be:45:eb:60:bc:9a:
                    32:8f:0d:28:da:62:ca:2c:9f:bd:1e:4d:52:4d:ef:
                    02:eb:81:63:1c:b3:fc:7d:87:92:f7:a3:5b:00:9f:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:35:AA:D7:F3:92:D6:73:0E:61:72:72:CE:B7:6A:EF:DB:28:3D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.36.0/23
                  208.78.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:71:cc:6e:a0:e6:bd:f4:d5:7b:aa:61:93:96:02:1e:85:12:
         e3:b3:2f:06:dc:24:34:50:ae:d3:b3:49:85:67:78:e1:9e:ca:
         0a:29:5c:63:2a:25:1f:cc:48:66:72:e7:30:17:7c:4a:fd:fe:
         02:51:ab:e0:3e:d0:79:63:8a:bd:72:50:cf:1e:cb:b9:40:22:
         47:c1:d7:6b:9b:1e:c4:dc:3b:2b:72:88:1b:16:fc:0b:9e:7d:
         36:17:6e:3a:c4:90:1e:0c:31:17:57:11:eb:e0:3b:93:58:75:
         28:05:54:bf:04:c9:14:02:b2:58:51:33:df:f1:ff:1d:99:4e:
         49:08:f8:f1:82:05:03:35:05:6c:5a:ef:37:ba:36:92:c4:e0:
         ae:d2:5e:0a:67:cf:01:60:2f:30:65:62:28:0b:07:2c:7b:1e:
         6d:29:86:51:cb:b4:c9:b8:b7:c5:c1:66:40:2d:ce:24:07:e7:
         b2:17:67:a6:8c:c5:47:73:86:54:0d:1b:48:a9:b2:a6:de:1f:
         81:c1:bd:cc:ae:46:d5:12:48:0e:b3:af:d4:a4:97:e6:07:5d:
         ce:03:15:3d:cc:a2:0c:ed:40:d5:e9:65:20:c2:01:0c:d4:45:
         47:5b:c6:1c:e9:c1:d5:d1:51:0b:6f:7c:ae:8a:e8:a1:41:a6:
         c2:3e:6d:0e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmNzlkBCsvnRs8ntqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmU3OGJiODUtYzM4Ny00ZWY1LWEyYjMtNjQ3NjM2ZGEx
NjZhMB4XDTI1MDQxNzA3NTgzNFoXDTI1MDcxNjA3NTgzNFowLzEtMCsGA1UEAxMk
N2QyYTM3NDgtYmVkZi00ZGViLTgyNzctNGYyYWZmYmJhNTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEJjJWbkF6TLjkNRNeuO7tuD03uVcbz+lM0k
+vTQfPJlyyyAbS5W0TnhNQGJRlpczqXE1WTeqxY1a0rMwqai/qeKyZdEJSZCu4be
ewTXvBOWP86+Oy6fa0tGTk1P4Ulvg6C24cfpesN5TnWYwRgKy7hnV8AjbJPN7Isr
5ccO6XGapDvvKQFGOo2n6oxdmDse7qrQyFo04duiuHfoTst66QDTn6C/2RfrwR2N
drCx9QN01ZuzTFbZmcykHKyV7F4hYhssn+B58+Y4rFlKsTT01I2y74UYrpKSCWO+
RetgvJoyjw0o2mLKLJ+9Hk1STe8C64FjHLP8fYeS96NbAJ/SHQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFDM1qtfzktZzDmFycs63au/bKD0mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZTc4
YmI4NS1jMzg3LTRlZjUtYTJiMy02NDc2MzZkYTE2NmEvZjAwMWNiMGYtZDc2MS0z
ZDBlLWJhMzEtNzRmZmIzYjg1NWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmU3OGJiODUtYzM4Ny00ZWY1LWEy
YjMtNjQ3NjM2ZGExNjZhLzJlNzhiYjg1LWMzODctNGVmNS1hMmIzLTY0NzYzNmRh
MTY2YS5jcmwwHwYDVR0jBBgwFoAUCoRC+eaSsjIunkYokOLiCMEk2mYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZTc4YmI4NS1jMzg3LTRlZjUtYTJiMy02NDc2
MzZkYTE2NmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0E4kAwQA
0E4nMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBANtxzG6g5r301XuqYZOWAh6FEuOzLwbcJDRQrtOzSYVneOGe
ygopXGMqJR/MSGZy5zAXfEr9/gJRq+A+0Hljir1yUM8ey7lAIkfB12ubHsTcOyty
iBsW/AuefTYXbjrEkB4MMRdXEevgO5NYdSgFVL8EyRQCslhRM9/x/x2ZTkkI+PGC
BQM1BWxa7ze6NpLE4K7SXgpnzwFgLzBlYigLByx7Hm0phlHLtMm4t8XBZkAtziQH
57IXZ6aMxUdzhlQNG0ipsqbeH4HBvcyuRtUSSA6zr9Skl+YHXc4DFT3MogztQNXp
ZSDCAQzURUdbxhzpwdXRUQtvfK6K6KFBpsI+bQ4=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:32 2025 by rpki-client