Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/05028105-0402-3388-9082-81e1412365e8.roa
File:                     05028105-0402-3388-9082-81e1412365e8.roa (raw, json)
Hash identifier:          M3oCePGaFHQ0hCDAvLlANroTwBH7E+oomV9MAU4HCT0=
Subject key identifier:   2C:BC:17:79:FB:FC:11:7A:FF:C9:7D:4D:81:3F:78:56:2F:E4:B5:9D
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584AA42B81C69AE758095E797F00
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/05028105-0402-3388-9082-81e1412365e8.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     6498
IP address blocks:        75.78.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:81:c6:9a:e7:58:09:5e:79:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=899ae7b9-e1f1-4d38-8835-cd343ee54f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3e:65:39:55:27:90:f4:7d:87:09:02:9c:82:
                    a1:23:c9:0f:d0:cb:ea:8d:0a:e2:df:3c:f3:31:92:
                    ca:c8:1b:a0:30:ae:21:7e:30:57:25:f2:de:c1:5d:
                    01:2d:9f:2a:a9:dd:25:ec:b0:c6:fa:4c:56:38:59:
                    31:fa:87:91:4f:ec:4b:b8:7b:e2:fe:82:c3:60:c1:
                    2e:7a:eb:73:31:f9:53:76:28:de:6c:53:df:42:a6:
                    ae:43:b5:91:da:be:46:74:61:76:9c:c9:96:d5:6e:
                    d3:25:c6:ad:b4:04:2d:e5:21:95:48:56:32:fa:f2:
                    06:a0:e7:e4:33:50:96:66:60:af:53:2b:2e:7b:37:
                    e5:b1:f4:eb:f0:69:e7:45:6b:3b:89:29:89:b0:b1:
                    b3:da:20:5d:d0:d9:8c:c7:ad:b4:66:d5:93:ab:91:
                    11:aa:a8:6b:21:66:f4:bd:66:a9:cf:fd:e0:a1:1d:
                    60:7f:72:7f:af:9e:32:9d:20:20:15:a4:b5:aa:16:
                    ed:21:b7:f2:51:90:cb:d8:81:80:ac:e2:06:47:cb:
                    f0:0a:27:4a:f7:99:6c:a0:05:72:66:01:fb:65:60:
                    b0:92:24:92:73:5e:12:b9:d4:44:04:e6:60:02:2c:
                    32:3d:70:de:ce:3a:e7:a7:f3:26:93:d9:86:7e:27:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BC:17:79:FB:FC:11:7A:FF:C9:7D:4D:81:3F:78:56:2F:E4:B5:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/05028105-0402-3388-9082-81e1412365e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:ef:3f:02:0f:94:1f:ff:9a:38:7e:f4:bb:80:90:b1:dc:33:
         3e:2f:4d:7a:30:14:19:9e:83:e4:a8:89:91:71:78:cc:3f:e7:
         b3:9e:30:db:16:2f:dd:2f:73:d8:91:72:1e:da:96:ff:b5:62:
         9c:35:a3:83:96:5c:ec:b0:a1:e0:dd:10:d2:e1:30:a7:ce:2d:
         5e:f9:90:d0:b6:ec:c5:27:38:6d:0d:8b:e5:b3:96:0c:b2:ab:
         bf:f4:c3:09:8e:23:00:56:cb:4c:f9:e9:9a:51:89:f8:28:11:
         df:16:88:44:e2:27:5e:1a:eb:da:02:8c:51:19:44:2b:6c:6a:
         41:de:03:06:78:ad:56:21:17:02:cb:9b:aa:06:5b:1f:e0:8b:
         c3:ae:26:95:c0:90:64:56:8e:aa:e4:33:e9:62:35:d1:d8:d6:
         e1:b6:dd:08:64:9e:5c:ac:60:39:00:46:58:89:35:7f:35:46:
         bf:fd:c1:50:bd:c0:33:6d:ff:44:85:12:fb:9b:40:54:12:85:
         d0:3f:80:b7:7a:ef:8b:c1:a3:df:5f:6c:62:40:8c:58:c5:a0:
         e1:93:c5:70:cd:a6:e8:4e:0d:f2:ac:1d:b2:a2:b5:6a:ea:82:
         2e:22:10:30:f5:7f:55:ac:9f:76:5b:bd:6b:8d:70:e0:a8:c3:
         d7:d5:78:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:17:25 2025 by rpki-client