Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/34296b70-7f5f-3845-8c9c-6cf2b9cb1e22.roa
File:                     34296b70-7f5f-3845-8c9c-6cf2b9cb1e22.roa (raw, json)
Hash identifier:          HVc+s/OPCUXKq1LUrXe63TZflvyTTQBgPr9uNB2vDWY=
Subject key identifier:   7A:5C:B1:94:F8:3D:FC:EF:EE:E5:D5:D4:2F:7A:6F:EB:2A:D6:D6:BC
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584AC8763238EDF10716769D2700
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/34296b70-7f5f-3845-8c9c-6cf2b9cb1e22.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     6498
IP address blocks:        75.78.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:32:38:ed:f1:07:16:76:9d:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=6382773f-cdbf-45a9-aefb-221fde9812ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a9:69:15:5f:9c:15:ae:f5:df:10:1a:3d:ce:
                    43:a6:ef:91:43:8b:2e:74:a0:65:d0:80:ca:68:12:
                    b5:22:31:90:84:11:28:e4:01:88:1f:7b:1b:ab:22:
                    35:64:ff:06:31:f6:d9:b0:cf:7f:c7:c5:90:09:40:
                    af:e9:c0:1c:62:cd:38:21:d5:d8:96:0e:51:7c:ee:
                    88:57:52:c8:bb:98:9c:94:1d:57:03:1e:33:1a:44:
                    89:1f:10:83:29:61:af:96:10:75:ab:cf:b4:99:ad:
                    70:24:9a:09:be:78:eb:a3:ae:81:64:b0:09:95:a4:
                    a4:4c:e5:1b:89:d2:d6:5a:58:1e:49:81:93:0f:0f:
                    d1:59:45:9f:f7:04:1a:f6:f4:61:26:af:d7:2b:36:
                    ee:59:0a:1d:50:42:dd:0d:77:28:eb:fd:22:b6:4b:
                    7a:a1:91:cf:ee:ed:f4:61:3c:0d:69:5f:69:7e:bc:
                    d9:0a:76:33:b5:50:4d:03:7a:78:ad:7f:35:9d:0c:
                    d1:e3:bc:75:2c:1d:2c:dc:1f:38:ab:97:1d:4d:70:
                    74:7c:79:9d:fc:ad:f5:81:ae:e4:78:0d:a0:32:b0:
                    9a:f9:c8:b3:45:b1:1a:46:52:38:cf:d6:89:71:57:
                    74:59:26:34:20:9e:28:7a:76:f4:85:18:d3:fb:6f:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5C:B1:94:F8:3D:FC:EF:EE:E5:D5:D4:2F:7A:6F:EB:2A:D6:D6:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/34296b70-7f5f-3845-8c9c-6cf2b9cb1e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:3f:aa:7a:ad:50:bf:18:a2:bc:9f:d8:13:35:37:30:e6:1c:
         1d:5c:a2:43:e0:8a:79:3a:2f:67:96:fe:18:70:12:d1:a7:31:
         bf:54:6c:e8:0d:a6:d0:79:ff:b4:ca:3d:d5:b8:82:07:05:b2:
         fa:ea:90:33:34:06:40:c8:f0:ea:8c:1d:d8:a7:fc:6b:12:74:
         53:5b:8c:00:05:03:fe:d5:7b:ed:1d:3b:76:04:74:fd:70:22:
         b4:e4:86:89:41:d5:11:06:bd:c3:fc:52:6e:99:d9:9d:fc:0f:
         53:09:5b:0d:72:c1:2e:a7:81:cf:e2:12:ab:9f:bd:f9:cf:88:
         a1:0c:cb:aa:6f:6a:7b:ed:da:7c:8f:d4:fe:1f:4d:86:ab:a3:
         37:0d:59:0a:81:ae:20:a2:cb:be:f3:22:4f:f2:03:78:d7:35:
         f2:a2:30:e1:c3:db:e7:38:69:de:80:56:4d:3d:c6:69:ee:71:
         c0:ca:79:b4:65:00:1a:fc:4a:f2:6c:c7:78:44:0a:b5:13:94:
         2e:79:d6:50:17:13:c7:1f:dd:46:7b:43:75:bb:2d:6b:2f:3a:
         b7:ed:7c:bb:29:a5:51:f5:f3:f7:e2:87:12:5a:90:6d:2f:db:
         db:ce:78:14:09:29:d9:ca:75:8c:36:14:21:71:9e:17:3b:10:
         39:88:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:50:13 2025 by rpki-client