Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/2cb8bb7e-1747-390b-b8f6-4d783573785c.roa
File:                     2cb8bb7e-1747-390b-b8f6-4d783573785c.roa (raw, json)
Hash identifier:          EbV5soqoKWUKLREFE2/N/SK8m4ubI8e9+yaCwsnnG7s=
Subject key identifier:   93:09:07:2A:EA:1F:1A:71:A5:D5:63:1D:8E:2C:EF:E3:75:2D:6C:CF
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584A41105C5F68AA02466503F920
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/2cb8bb7e-1747-390b-b8f6-4d783573785c.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     6498
IP address blocks:        75.78.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:5c:5f:68:aa:02:46:65:03:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=701c5751-2cf2-43b3-b1dc-f78ca1ddf108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5e:d0:a4:51:fe:e8:19:54:d0:cb:f6:5a:75:
                    5d:36:68:96:6b:e6:33:3b:92:0a:80:fd:8f:5a:12:
                    6b:7f:4b:2f:7a:50:db:6a:8e:c3:31:99:d1:c1:b3:
                    62:9d:3b:65:13:35:c8:e7:3f:d3:68:a5:43:d9:bb:
                    72:66:81:81:1f:d8:23:ed:1f:68:65:cc:8e:c9:ce:
                    c9:36:34:64:62:d8:b6:45:9a:27:9c:d3:1c:c0:81:
                    13:ad:77:5e:04:40:4d:db:64:63:37:91:0e:e3:c1:
                    f2:d3:e9:c5:d5:52:3a:14:ca:87:8c:07:e1:e2:23:
                    01:61:1c:64:a6:f9:40:f7:05:7f:b0:7e:d5:a6:04:
                    7c:f4:0c:17:59:e2:6d:65:ea:cd:80:fc:bb:62:b3:
                    39:b1:68:68:23:e9:56:a5:c7:a2:62:1b:b6:10:91:
                    41:10:db:f6:25:13:7a:92:da:6b:d3:e3:86:4a:7e:
                    62:39:eb:5d:50:d1:f7:a7:37:8a:1a:80:28:61:0a:
                    f1:10:b7:a0:61:70:d3:ba:60:9e:7d:88:34:3e:90:
                    ec:a0:6d:31:c0:00:69:fb:f5:b3:12:f7:00:59:d9:
                    b3:22:13:af:5f:51:b9:f9:38:e5:31:19:60:09:09:
                    8a:54:65:4b:0a:d7:8a:19:53:32:55:24:9d:cd:1f:
                    ed:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:09:07:2A:EA:1F:1A:71:A5:D5:63:1D:8E:2C:EF:E3:75:2D:6C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/2cb8bb7e-1747-390b-b8f6-4d783573785c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:31:06:3c:79:bf:0a:96:da:c8:bd:11:3c:ab:ce:2e:ca:1d:
         f9:1d:25:b0:76:c0:5c:b9:be:d6:88:37:5a:a2:45:ff:76:cd:
         6a:fa:da:a3:35:b8:6c:9a:41:40:eb:53:cc:92:f7:bc:41:c4:
         61:21:9a:13:ba:25:53:24:62:c9:87:62:ad:a4:5e:b6:7b:ba:
         1d:99:0a:8e:d6:28:fd:5d:95:09:8e:46:de:44:b0:53:c1:f8:
         a4:07:50:62:5d:9f:6c:2e:29:af:44:53:f3:c3:54:de:b4:d5:
         e8:89:b3:e2:21:6c:b9:8d:f3:11:44:db:05:e6:76:f0:10:bf:
         dc:39:5a:75:8f:07:9a:3b:7c:c9:59:07:bb:c3:22:4e:e3:43:
         c1:00:39:dd:df:51:6e:c8:ca:5b:3c:99:da:56:f7:21:09:22:
         d5:52:eb:8f:6f:4e:20:c8:4c:db:6b:cd:0a:c0:0a:ac:9b:ce:
         c0:f6:ee:d4:c6:e4:d3:f1:c0:54:34:24:54:2e:59:5d:cd:98:
         27:d9:72:f4:b2:3d:22:f8:5a:40:62:7d:93:89:0b:5d:f8:43:
         7a:5d:79:e8:73:80:6b:d5:f6:7a:ab:7d:92:51:87:a8:07:1e:
         91:2c:48:ee:64:44:07:37:6e:18:9e:84:d3:8d:9d:90:56:0b:
         e5:bd:23:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFxfaKoCRmUD+SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk
NjkwMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk
NzAxYzU3NTEtMmNmMi00M2IzLWIxZGMtZjc4Y2ExZGRmMTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV7QpFH+6BlU0Mv2WnVdNmiWa+YzO5IKgP2P
WhJrf0svelDbao7DMZnRwbNinTtlEzXI5z/TaKVD2btyZoGBH9gj7R9oZcyOyc7J
NjRkYti2RZonnNMcwIETrXdeBEBN22RjN5EO48Hy0+nF1VI6FMqHjAfh4iMBYRxk
pvlA9wV/sH7VpgR89AwXWeJtZerNgPy7YrM5sWhoI+lWpceiYhu2EJFBENv2JRN6
ktpr0+OGSn5iOetdUNH3pzeKGoAoYQrxELegYXDTumCefYg0PpDsoG0xwABp+/Wz
EvcAWdmzIhOvX1G5+TjlMRlgCQmKVGVLCteKGVMyVSSdzR/tJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJMJByrqHxpxpdVjHY4s7+N1LWzPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1
MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvMmNiOGJiN2UtMTc0Ny0z
OTBiLWI4ZjYtNGQ3ODM1NzM3ODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky
ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx
ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy
NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS07gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJoxBjx5vwqW2si9ETyrzi7KHfkdJbB2wFy5vtaIN1qiRf92zWr62qM1
uGyaQUDrU8yS97xBxGEhmhO6JVMkYsmHYq2kXrZ7uh2ZCo7WKP1dlQmORt5EsFPB
+KQHUGJdn2wuKa9EU/PDVN601eiJs+IhbLmN8xFE2wXmdvAQv9w5WnWPB5o7fMlZ
B7vDIk7jQ8EAOd3fUW7Iyls8mdpW9yEJItVS649vTiDITNtrzQrACqybzsD27tTG
5NPxwFQ0JFQuWV3NmCfZcvSyPSL4WkBifZOJC134Q3pdeehzgGvV9nqrfZJRh6gH
HpEsSO5kRAc3bhiehNONnZBWC+W9I8I=
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:09:32 2025 by rpki-client