Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa
File:                     8c0cf3f7-33fa-3591-ab58-960d708c9989.roa (raw, json)
Hash identifier:          KRuNAybBYiYMY5DvOpWcEUKbO15N7+v4eQOi/SeDXx8=
Subject key identifier:   5E:AA:C3:8F:7F:5D:F4:B8:E8:E0:3A:6C:F8:3B:90:44:52:0F:BE:75
Certificate issuer:       /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial:       010D0C9F4328584AB91B8DDC3113D9CEE9CBDA40
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        209.142.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:8d:dc:31:13:d9:ce:e9:cb:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=0b4067c0-f009-4f03-a7ed-04ee1b41fb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:48:0d:bd:e1:81:79:cc:ce:15:86:54:5d:
                    e0:02:b4:8f:23:1d:71:79:7c:cc:1e:9d:07:2f:95:
                    fa:fd:49:cd:4a:74:21:4f:47:0b:0b:78:57:fb:d8:
                    98:db:ed:5d:41:e4:ba:4e:42:fc:d1:0f:f3:4d:2c:
                    99:00:f6:c9:41:29:3b:a8:98:9d:8d:89:42:a8:90:
                    ad:43:b9:4d:9d:70:5d:b0:0e:5d:66:56:14:9e:ce:
                    1a:cd:d9:4e:a9:78:8f:6b:08:af:98:c0:cb:b0:7d:
                    8a:6a:5f:74:09:56:91:66:4e:49:1f:51:99:11:32:
                    8b:15:2f:b8:b3:26:9f:cc:c8:16:d9:90:15:22:ee:
                    3f:60:dd:d9:eb:97:e1:6c:1a:49:92:a1:b8:95:58:
                    66:42:37:fd:ae:ac:14:32:c3:e7:b8:af:9d:4a:9d:
                    d2:6a:e9:d8:2f:d4:9e:29:02:af:69:1b:66:8d:00:
                    33:29:df:16:8e:1a:c7:f2:59:ef:fe:71:0e:23:79:
                    d3:84:dd:94:2c:45:c7:f4:d1:24:0c:33:6a:73:db:
                    33:a3:22:fb:da:93:d9:11:2a:91:48:00:7f:1d:c8:
                    e8:51:7e:06:22:66:67:26:20:bf:34:53:40:52:04:
                    75:cd:53:28:00:e8:50:60:56:f4:02:60:0a:21:10:
                    a7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AA:C3:8F:7F:5D:F4:B8:E8:E0:3A:6C:F8:3B:90:44:52:0F:BE:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl

            X509v3 Authority Key Identifier:
                keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:00:6f:4e:08:2f:c0:cf:76:5c:83:26:1f:61:68:28:2e:43:
         0f:11:3f:37:b2:81:36:a4:f3:82:06:5f:7a:ab:38:71:82:5f:
         fe:81:5a:54:f8:6f:a8:37:1c:ad:d3:99:3f:74:82:3f:f6:75:
         23:96:46:c0:92:0d:1c:00:06:56:55:b8:28:32:bd:11:06:47:
         88:28:19:11:7d:06:15:55:50:a8:92:85:42:76:09:3f:33:d1:
         7c:94:35:38:6c:7e:ef:4a:e8:cc:67:32:98:8b:be:ee:72:15:
         8d:04:ec:c6:78:f2:1f:aa:d8:23:2d:a0:c8:b8:5c:26:3d:6d:
         df:a0:80:08:2d:aa:b8:12:84:b5:a3:a6:01:8d:f8:d0:bc:9b:
         7c:34:e1:4c:f5:b8:74:7f:9d:b9:1b:57:f9:73:ea:aa:fd:dc:
         9e:dd:a7:43:29:95:2f:e0:f2:41:ee:c1:eb:2d:bf:89:fa:25:
         e4:3e:ab:0d:6c:6d:f8:18:a8:9a:e2:ca:f5:45:80:0d:a1:67:
         c4:9b:f0:aa:05:39:89:8b:b5:a8:59:e4:c2:dd:6d:43:e7:78:
         cc:fd:7d:9d:d7:ad:62:ce:b2:f2:12:7d:b3:d6:1a:39:ab:a5:
         8f:a0:85:72:e3:49:07:c8:e3:f9:58:3c:5f:7f:bb:22:08:65:
         e5:23:1e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:15 2025 by rpki-client