Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/29809cb8-6132-3a8b-bf2c-aaa61178a6c8.roa
File:                     29809cb8-6132-3a8b-bf2c-aaa61178a6c8.roa (raw, json)
Hash identifier:          VqE444LsRltzwwHG3tDoh7NO2sQWORQLOweDKMaaGiw=
Subject key identifier:   D8:7D:E9:C8:54:1D:2C:61:08:D4:CE:97:41:3E:2D:06:55:C9:BC:04
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584B21CC2A96F1D47675DA50F7C0
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/29809cb8-6132-3a8b-bf2c-aaa61178a6c8.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     6498
IP address blocks:        75.78.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:2a:96:f1:d4:76:75:da:50:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=9e9f35c0-0636-4849-a6b3-4df869ed9a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:ce:d8:57:5b:b5:be:35:4f:ed:4e:fd:9a:
                    4a:6e:4b:6a:f1:d0:fe:58:9f:bf:7c:2c:7f:1e:28:
                    2d:c2:df:cc:35:cf:fe:01:eb:c0:7d:6a:84:25:84:
                    f5:8b:5b:e7:ac:d4:c4:7d:02:ac:e0:0c:e1:55:e0:
                    a8:09:ec:22:ee:89:1f:d1:1d:ce:c0:33:1d:0b:c6:
                    49:b3:9d:84:ab:4b:6f:9b:c0:24:c8:59:9b:1d:95:
                    93:79:7d:93:af:81:35:60:94:ec:ad:90:ed:79:28:
                    72:d4:28:48:b4:a6:1c:fe:58:5b:fc:88:bd:4f:49:
                    25:a3:c1:cb:ca:81:2c:5e:7e:54:8e:aa:8a:49:34:
                    7a:96:54:24:2c:5e:85:59:13:cd:0c:68:ab:15:42:
                    a5:c3:83:52:ca:2a:55:48:cf:f7:0b:69:6d:d9:e6:
                    44:18:ea:7d:cf:e1:8d:c7:13:73:f5:63:64:7a:51:
                    95:a4:7a:1e:20:59:56:d0:5b:77:04:84:a0:b1:19:
                    79:e1:88:61:3b:0e:a7:93:8a:97:45:3b:98:3b:57:
                    e2:8b:31:ff:15:e7:e0:8d:85:4e:8e:0a:c4:96:59:
                    4b:1e:34:24:5a:b5:6c:57:2d:39:69:a0:91:05:a1:
                    66:4f:d2:ca:73:dd:7b:3b:2d:de:84:e9:ee:f8:98:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7D:E9:C8:54:1D:2C:61:08:D4:CE:97:41:3E:2D:06:55:C9:BC:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/29809cb8-6132-3a8b-bf2c-aaa61178a6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:88:94:71:32:be:4d:7a:a8:62:e4:b0:d3:03:9e:19:40:c3:
         c3:9d:c0:9c:2e:4d:6a:8c:11:b7:77:e2:67:1e:1a:5b:1d:f4:
         5d:55:63:21:43:02:1c:ed:c4:d5:a9:b2:1b:90:08:3b:64:66:
         18:9b:80:86:92:56:55:6a:24:32:22:b3:fa:d4:c8:b4:85:23:
         86:e5:61:d4:02:4f:67:a9:df:00:1e:bb:1a:a2:bd:43:10:d4:
         43:df:98:89:26:ac:4c:c0:2a:5e:12:36:61:88:ab:15:d2:d2:
         f6:d5:ce:44:12:e5:70:51:0c:4d:2b:a6:57:88:34:40:6f:3f:
         ff:4a:b5:10:26:0c:6d:d3:03:1e:7f:bb:32:7d:9a:df:1c:73:
         a9:64:0f:ed:15:6a:24:b6:c5:8e:7e:a2:59:16:5d:99:80:02:
         d8:7a:11:81:76:24:95:00:0f:bb:5a:7e:fa:e2:e2:8a:52:1c:
         31:48:a1:4a:63:23:85:ae:d7:3a:73:af:4d:a1:5b:5d:dc:66:
         dd:60:7b:88:64:a2:49:cf:10:ed:11:33:39:70:06:14:f6:5b:
         db:57:cb:84:a9:56:fb:60:d6:5d:4e:fe:15:01:65:75:5e:c1:
         e2:41:b3:84:00:ef:53:5b:f6:23:59:87:31:53:ee:e0:a2:35:
         55:52:82:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:49:46 2025 by rpki-client