Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/78eed7d8-8055-3e11-b395-9f210dc06ea8.roa
File:                     78eed7d8-8055-3e11-b395-9f210dc06ea8.roa (raw, json)
Hash identifier:          Ea4UP+o3VLNAGXH3HaSw46C4MzRs2x5md50IkNvOp7c=
Subject key identifier:   6B:EC:00:42:54:C1:6C:31:69:39:51:8B:A0:8D:44:CD:32:A6:5B:07
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F43285849ED574DB830BD1EB7E6DB8600
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/78eed7d8-8055-3e11-b395-9f210dc06ea8.roa
Signing time:             Wed 21 May 2025 13:16:19 +0000
ROA not before:           Wed 21 May 2025 13:16:19 +0000
ROA not after:            Tue 19 Aug 2025 13:16:19 +0000
asID:                     3257
IP address blocks:        173.44.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:57:4d:b8:30:bd:1e:b7:e6:db:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May 21 13:16:19 2025 GMT
            Not After : Aug 19 13:16:19 2025 GMT
        Subject: CN=fdf4fcd8-db35-455b-8fa0-afee2cb65eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:32:60:b3:89:1b:b9:d4:d8:27:65:89:da:8a:
                    f7:4e:2b:53:2a:b1:08:44:08:3d:74:ed:dc:45:33:
                    e0:b6:ba:24:68:67:e3:d3:77:19:e9:81:06:a1:a5:
                    2d:7b:03:71:b0:03:3d:02:fc:0b:90:d7:e3:3e:ea:
                    9b:7c:8d:31:8c:ce:10:26:2f:c8:54:1e:45:be:33:
                    70:b5:f3:26:f3:b0:99:70:c8:f3:01:bb:1d:87:4a:
                    0d:90:9b:e7:24:ea:87:ca:4b:e6:73:21:b8:ed:a3:
                    fe:ad:49:d4:bd:ff:4d:77:d2:d9:d0:a9:af:b0:be:
                    d3:2f:43:98:e6:4a:30:73:fe:a7:2c:43:2b:eb:27:
                    27:90:46:07:db:4b:f2:ea:12:a9:d9:58:86:3b:2b:
                    af:b1:21:94:5f:13:de:d7:88:aa:b9:1d:a4:05:43:
                    8b:8c:bc:f7:d7:26:45:79:01:d3:64:c0:db:45:e5:
                    51:0f:02:7f:c7:e2:8d:e6:57:0b:d2:36:96:cc:cc:
                    ef:25:e8:13:98:16:3f:26:c3:d0:64:bf:a6:55:d2:
                    81:50:db:9b:6f:35:9c:d9:04:4e:6e:a4:90:84:61:
                    d7:cf:fa:c6:f5:0f:e6:b2:09:b3:70:35:29:b8:05:
                    8c:ee:70:fa:14:c7:b1:c9:74:52:47:cd:4a:f3:1c:
                    41:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EC:00:42:54:C1:6C:31:69:39:51:8B:A0:8D:44:CD:32:A6:5B:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/78eed7d8-8055-3e11-b395-9f210dc06ea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:78:11:2d:82:41:89:46:30:ea:5b:5f:bd:64:b7:8d:2d:1c:
         d9:9a:46:fc:ec:80:c7:63:cc:01:a6:ed:fe:85:f1:87:82:52:
         a5:3f:c8:95:1f:32:71:d8:0c:ee:76:ae:89:ea:b6:75:66:84:
         7b:9f:00:01:4f:38:2a:af:b3:32:1d:ac:53:19:f4:96:cb:5d:
         0b:af:7e:4f:c6:d9:44:57:1e:e7:19:b1:31:d4:9d:6e:fa:54:
         3a:ca:41:98:2c:e2:b9:f3:5c:b1:fe:65:d2:e7:e8:ab:cd:b2:
         72:7d:69:1a:b7:65:3c:9d:8b:60:30:a1:1a:38:f9:a8:b5:ab:
         04:52:0a:63:30:5f:d1:86:1c:9d:8d:2b:b9:82:f8:5b:15:b0:
         9d:9a:67:9c:a9:33:18:e0:bf:ad:af:79:56:ef:ad:90:6e:fa:
         22:0c:91:2d:ef:5c:7e:d7:f0:e7:21:9e:34:b6:5d:27:2b:51:
         73:32:86:22:63:c0:38:da:98:d6:0b:c0:74:28:39:b1:54:18:
         bd:06:58:58:0c:07:03:36:1a:8f:5f:a9:49:8a:2d:2f:c9:ad:
         95:61:07:47:a2:25:eb:cf:4c:b3:46:bf:0b:ff:bc:a0:6c:8c:
         ea:5d:69:79:50:03:58:ec:51:02:05:59:bd:af:ec:dd:75:4f:
         96:dc:fa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 06:02:34 2025 by rpki-client