Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/11410da2-ba97-33be-bc51-ad43b44f2c57.roa
File:                     11410da2-ba97-33be-bc51-ad43b44f2c57.roa (raw, json)
Hash identifier:          GYnlCP0MrzQVBjLLRHfz7aBpegINwfaKC1eUplE93ug=
Subject key identifier:   75:7A:51:FF:10:53:14:D4:F7:75:47:06:72:1D:05:24:CD:97:BF:5F
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584B21CC2B8B6FC358A97D449FC0
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/11410da2-ba97-33be-bc51-ad43b44f2c57.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     6498
IP address blocks:        75.78.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:2b:8b:6f:c3:58:a9:7d:44:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=a921c82e-a7b8-4a5e-b1b8-0b269791f65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:cb:65:52:e6:45:02:8d:d2:53:e9:1a:67:
                    0a:38:80:a5:07:6d:dd:0a:24:9c:41:4d:15:d6:b4:
                    a3:b3:cd:f3:af:12:52:8b:11:3a:ef:89:0f:a0:4f:
                    9b:f6:bd:e7:af:15:f5:29:2f:c8:29:75:6c:bf:45:
                    c0:8e:bf:38:15:70:fa:c8:c9:d5:35:ba:94:53:3f:
                    2c:ee:c9:81:45:e5:fb:6f:f6:25:34:d2:c8:c1:41:
                    8a:2e:4d:a2:83:be:df:25:60:4a:61:5d:a2:24:2e:
                    c6:38:b2:bf:2a:19:92:88:e8:56:9c:72:b8:e6:54:
                    7d:52:ee:f1:dd:14:9d:e3:69:20:6e:16:7d:72:fc:
                    28:b5:fe:d9:7e:69:58:2f:62:7f:66:90:7b:03:a3:
                    92:32:b1:f3:4a:42:a9:44:96:6b:21:3d:9a:c9:0c:
                    1b:1f:e8:b9:96:04:51:b1:54:cd:93:c2:1c:fe:3f:
                    98:29:0d:bc:00:89:45:46:9d:12:f4:09:7a:54:d8:
                    8a:ee:91:4e:db:79:40:3a:75:35:3b:43:e9:68:af:
                    05:ef:f7:54:16:a6:a1:d5:30:20:8e:21:9a:9b:f2:
                    b3:cb:bf:7c:87:ed:aa:fb:2c:0e:3c:3c:a2:fb:8b:
                    78:72:f8:a9:5e:c5:f8:17:5e:9e:53:ce:e7:37:b2:
                    87:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7A:51:FF:10:53:14:D4:F7:75:47:06:72:1D:05:24:CD:97:BF:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/11410da2-ba97-33be-bc51-ad43b44f2c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9f:c4:1d:02:a8:e0:ea:3a:7e:b1:4a:c1:78:f8:1f:a3:41:
         f9:01:f5:52:51:58:7e:fe:50:59:1d:ac:32:78:19:a2:ee:58:
         28:6c:84:b8:b6:91:0a:16:5f:03:72:93:8d:7a:d8:76:55:b0:
         99:b1:72:a5:23:92:fd:e6:e8:96:59:da:f3:24:02:91:8f:a4:
         e3:a5:4d:81:85:2f:4f:d5:4e:d8:ea:57:40:1e:a5:6e:eb:7b:
         b8:23:f9:50:e5:01:f5:e5:14:10:06:08:db:5e:54:9b:69:81:
         1c:e3:1a:78:08:c1:6d:51:2e:c1:49:6d:ed:86:2d:1d:08:24:
         f6:d5:37:24:fa:8a:65:22:30:7a:ff:6c:38:17:0d:4a:0d:e3:
         f5:10:26:d9:4f:b0:43:97:3c:65:f1:37:7f:2d:34:ae:5d:8f:
         45:34:da:ea:a0:fa:86:3c:93:cf:7b:fa:ef:08:da:4e:97:fd:
         fd:16:96:cd:ce:de:07:3a:b2:7b:ee:92:a5:d1:d9:8d:2d:cb:
         80:b3:ef:f4:a6:fd:b3:dd:4a:b4:5a:7c:1f:f8:1d:2a:65:cc:
         3c:41:55:f0:e0:90:e2:a3:8d:1a:7b:5f:3c:08:f2:1c:33:2b:
         d7:9b:2a:5d:62:f7:40:5b:12:17:76:57:ed:1b:90:54:03:02:
         65:61:21:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:22:26 2025 by rpki-client