Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/06025c03-31ca-3089-be47-afbcbc96c6f7.roa
File:                     06025c03-31ca-3089-be47-afbcbc96c6f7.roa (raw, json)
Hash identifier:          3440EuIGjelEaAp5gdRmclqqMi6ljAJ+MJ2TpS9Uo24=
Subject key identifier:   AC:61:09:5E:1A:C4:C3:A5:CF:8F:7B:E9:BB:82:D9:0D:BF:22:21:DC
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285849F71521B469486BA7B48CAB80
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/06025c03-31ca-3089-be47-afbcbc96c6f7.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     30238
IP address blocks:        207.54.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:21:b4:69:48:6b:a7:b4:8c:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=e22f339c-e4f9-4654-a8b6-5e7e66eb31d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ca:a6:75:ed:3f:bb:70:5f:7d:36:ec:ba:db:
                    41:2e:88:55:cd:2a:38:58:51:3c:b2:b1:be:5c:ff:
                    6b:b7:71:86:43:ef:e9:6f:92:78:ad:4f:ec:17:37:
                    08:36:ae:d3:94:b1:94:63:c7:3a:32:29:0e:ea:a9:
                    d6:92:d1:d5:b0:3a:5e:42:1c:67:34:ac:bd:30:59:
                    2c:a0:d5:0c:79:05:44:df:b4:bc:f8:02:7f:c0:4c:
                    e7:68:57:73:63:7b:83:b2:05:0a:b2:24:3a:7b:63:
                    74:20:1a:95:64:40:0c:cd:d3:28:e5:31:a6:ca:4d:
                    97:6d:08:82:c8:7a:89:e1:c8:45:ac:88:e1:aa:ed:
                    c5:b6:d5:e1:93:27:b2:88:81:87:1a:12:ca:29:fc:
                    32:fe:e1:88:e3:96:67:fb:69:81:ed:c8:4f:f3:56:
                    73:5a:4d:a5:c1:2b:b0:18:85:a0:b6:ca:9f:2f:8d:
                    d4:26:e9:78:83:64:ae:09:68:6b:14:1e:74:ab:00:
                    01:fd:b5:1f:12:a0:07:7a:9a:d0:16:e7:1c:25:ff:
                    b5:72:2b:8a:09:74:d1:c5:a2:2c:b7:ee:28:7f:cc:
                    3e:76:e1:5a:fb:6a:30:39:29:c1:a5:9c:71:a8:26:
                    6c:14:5c:0f:5a:e2:ee:aa:6e:8a:21:be:2c:18:a3:
                    3d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:61:09:5E:1A:C4:C3:A5:CF:8F:7B:E9:BB:82:D9:0D:BF:22:21:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/06025c03-31ca-3089-be47-afbcbc96c6f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:30:eb:45:35:2e:02:6b:02:8a:b3:20:62:a1:8b:14:43:f2:
         56:82:cb:fe:1b:7f:a5:e9:96:46:a7:87:76:2a:89:c5:dc:9e:
         68:5d:e5:9e:95:a7:89:bb:e9:5f:81:e0:0f:6c:08:da:68:f0:
         65:5f:00:a6:12:1d:57:44:e2:cb:65:4b:d9:a5:0e:39:5c:03:
         0e:56:5b:01:40:c7:dc:3c:f3:a8:f0:a1:9b:17:2e:09:42:53:
         ee:6f:aa:3d:7d:1f:29:05:97:e7:78:f4:76:05:64:34:00:1f:
         48:ef:50:cc:1a:05:ff:92:1e:74:ac:bb:be:d2:4a:4b:00:30:
         e4:f3:a2:08:22:f0:d3:dd:22:b8:27:cb:23:1e:71:27:0b:4f:
         c0:1b:4d:4e:a2:a3:f8:d5:18:62:f1:a6:00:ab:ac:05:13:28:
         d3:75:a7:4b:76:d4:c0:7a:e1:56:09:e0:05:c1:ba:73:cb:96:
         3c:0f:b5:2c:53:a7:0a:5e:8b:70:92:3a:64:81:43:e5:65:1e:
         73:e6:e2:c0:d7:8b:eb:ab:b6:47:39:23:0d:a8:a0:9e:76:49:
         46:a0:25:1e:d3:47:08:2e:91:95:f6:ed:7c:c6:7e:d4:20:1b:
         d3:5f:13:f7:e4:54:12:c7:14:57:bf:2f:7b:d5:31:e2:88:88:
         a4:f6:b7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:03 2025 by rpki-client