Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/89fc13cb-bea6-38d6-bda7-df846ca36618.roa
File:                     89fc13cb-bea6-38d6-bda7-df846ca36618.roa (raw, json)
Hash identifier:          bINLOJaKJ/1VS5XfbMLP2z/WxFgYlBnVzIQ6uTcoz8w=
Subject key identifier:   6F:78:3D:5A:36:12:B4:F9:28:F2:76:BD:39:09:F1:9D:D1:1B:FC:D3
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584A41105D7D19F526B2A91E85C0
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/89fc13cb-bea6-38d6-bda7-df846ca36618.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     6498
IP address blocks:        75.78.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:5d:7d:19:f5:26:b2:a9:1e:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=2c0d8aba-5a08-4f46-99cf-259748916e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:88:22:98:3c:71:91:22:94:57:99:b4:c0:
                    39:2c:78:aa:a4:65:c9:5a:05:2d:01:eb:3e:5c:73:
                    9f:4f:31:2a:f5:67:17:2a:43:b6:d3:ee:42:f8:fd:
                    a6:02:ab:4c:ba:53:e4:a8:ea:b8:92:37:dd:87:b1:
                    66:d4:d0:22:11:8e:fc:96:a2:21:54:13:75:38:00:
                    96:0a:1f:eb:6f:a8:f7:66:c8:d5:e1:3a:e0:c2:a8:
                    c3:8b:09:94:07:91:92:5f:f2:b4:9d:90:d6:4d:02:
                    74:07:38:a0:cc:96:ca:31:f6:1a:85:69:90:85:40:
                    1f:66:f6:53:eb:74:7b:65:ba:f5:7f:ba:7e:73:43:
                    d7:32:1e:44:d8:44:93:c7:48:fc:5c:d9:a5:03:cd:
                    ab:2f:4d:6f:91:06:cb:ec:8f:49:66:ef:20:eb:06:
                    c4:c5:f3:4c:98:0b:3f:79:a0:91:a8:bf:a6:67:96:
                    6f:a0:1f:a4:74:ed:62:2b:f4:42:c3:5a:c5:65:67:
                    8d:f7:bc:4d:42:eb:cd:32:43:76:39:ef:a5:25:6f:
                    91:0e:24:ae:bd:98:c4:6d:4b:65:6b:87:93:fc:c5:
                    fc:4c:88:37:a9:8f:58:8c:79:b2:99:5a:26:8a:e3:
                    fa:34:d8:61:05:00:15:8f:09:a4:2d:46:80:a6:60:
                    a5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:78:3D:5A:36:12:B4:F9:28:F2:76:BD:39:09:F1:9D:D1:1B:FC:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/89fc13cb-bea6-38d6-bda7-df846ca36618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f9:0e:60:df:83:9c:38:c2:c7:0a:da:bc:38:41:37:95:13:
         a7:52:60:9e:eb:34:7e:fa:e7:b5:18:43:bf:59:fa:23:1c:05:
         8b:00:32:a0:d2:6c:47:55:f5:37:ec:c6:c9:c5:34:10:eb:b8:
         23:3f:bb:b6:f8:19:0b:cd:a1:15:78:50:41:5f:67:21:56:71:
         89:03:17:fb:7b:6e:10:9e:02:d1:b4:94:49:cd:79:59:ad:14:
         bf:53:c9:51:4b:6f:82:82:97:5f:df:2c:fa:c0:ca:7d:9f:7b:
         68:bc:4f:a4:81:df:21:df:6a:b9:3d:ef:7c:7c:34:39:87:1b:
         c9:3b:e7:f1:e4:8f:71:3b:7f:90:11:0d:1e:44:2e:d8:0e:43:
         f6:f4:55:ee:d9:cd:6d:6d:36:88:85:49:3f:78:86:b9:6a:1c:
         3b:e3:37:25:d4:a7:51:7b:d5:31:9c:09:d0:85:47:96:1c:1b:
         b3:d3:82:86:17:07:1e:68:6c:80:b4:d2:b3:28:42:26:74:71:
         e7:a2:f0:1c:1c:59:ec:88:1f:92:0d:ee:23:82:02:03:2c:d5:
         a0:6e:5b:75:2c:b9:e7:ca:09:49:bf:9a:2a:c9:62:f2:b9:be:
         6c:06:b9:8e:5c:fe:2e:3d:03:4b:d8:d2:1e:09:93:9a:4c:e5:
         73:59:2e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:11:11 2025 by rpki-client