Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/a5bf80fb-5023-3598-b46e-d39a869da85e.roa
File:                     a5bf80fb-5023-3598-b46e-d39a869da85e.roa (raw, json)
Hash identifier:          mTHcbGt6cYh/Ou+WWc3Jyls7UkqoolU44rb5Cgy6dtc=
Subject key identifier:   F9:7B:A0:9D:5E:F2:F3:F1:FD:25:5A:3E:40:E2:20:C4:28:73:B0:F2
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584AC8763E997F0BAFEE4EADC000
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/a5bf80fb-5023-3598-b46e-d39a869da85e.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     11429
IP address blocks:        75.78.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:3e:99:7f:0b:af:ee:4e:ad:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=3af200c5-f0c7-4abd-a2a8-ba762a69fe9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:29:92:32:26:f3:b7:50:c4:1b:5a:a9:f9:
                    6a:6b:fe:42:a9:0b:a3:fb:30:b1:15:39:f3:4c:77:
                    00:b6:5d:f0:f5:0b:73:3b:01:b0:17:c0:e5:f0:fd:
                    3e:ba:ff:e3:d3:73:c3:84:23:f2:6c:16:a7:2e:b3:
                    5d:22:80:2c:01:0b:d8:4e:0d:2e:43:af:ae:0f:c4:
                    a7:59:67:50:01:55:f5:44:4e:5a:07:52:77:ff:f5:
                    2e:de:06:7b:22:b4:ef:e0:81:5e:cd:10:f8:d7:92:
                    b7:37:75:57:18:76:af:53:71:eb:22:b3:d5:65:ad:
                    2b:22:a4:2a:b6:26:b0:0e:d6:ae:8f:f8:60:ba:ee:
                    cc:a2:88:5d:76:68:5b:39:90:01:25:9e:d9:20:f6:
                    db:9e:4a:35:24:19:2e:e9:c8:bf:f3:69:27:13:f4:
                    82:1c:4a:59:57:8b:94:4e:ea:47:08:0a:96:32:d8:
                    bd:b0:7b:6b:f8:5c:bc:2a:9c:51:f3:78:bc:37:d4:
                    80:38:b5:f7:98:d1:f3:91:d0:bf:7f:e2:ce:d3:77:
                    8f:d4:27:30:9a:97:8f:6c:2a:1f:09:28:17:3c:71:
                    0f:5e:a7:5c:a9:4b:59:a4:9c:5d:4f:ac:f4:65:71:
                    a9:d0:e2:7c:ec:4c:cb:07:9f:30:7c:86:8a:de:3b:
                    b1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7B:A0:9D:5E:F2:F3:F1:FD:25:5A:3E:40:E2:20:C4:28:73:B0:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/a5bf80fb-5023-3598-b46e-d39a869da85e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e6:2a:9a:22:60:5d:dd:a4:32:56:d6:76:32:55:f2:60:d2:
         1f:c8:fe:60:9b:fc:e5:e1:8f:ad:79:e5:e7:54:96:09:84:8d:
         15:d8:fe:36:d1:05:be:fc:8d:f9:70:39:5b:8c:6f:5b:3c:cd:
         6c:d6:a9:ee:fa:56:c4:44:64:69:c9:4c:e9:e5:ed:72:68:22:
         db:f0:ef:dc:45:0b:4f:d3:4a:db:30:01:eb:b7:0c:27:41:fa:
         fa:f3:2f:3b:72:2c:c5:8b:f3:80:dd:12:5f:15:dd:a3:24:99:
         f1:3f:5f:57:73:de:ce:a6:26:f6:13:01:05:8e:e5:db:6c:e4:
         64:04:34:29:20:13:df:ae:22:40:19:40:ac:c3:a1:ad:18:eb:
         18:71:fc:52:3e:96:4c:99:ef:2c:be:01:5e:68:ef:f8:17:5b:
         af:26:40:64:9b:cf:69:0f:14:fc:27:70:4e:d4:55:ea:7a:20:
         e3:dc:22:87:78:c7:70:99:32:87:f8:15:f9:cf:dc:44:52:1d:
         ef:7d:9d:40:fd:ca:f3:be:cd:49:5d:7a:40:45:4d:6a:06:9b:
         02:ac:52:cc:55:e4:c7:54:53:57:46:94:90:fc:e8:7d:e9:a9:
         2b:fe:03:54:0c:65:10:03:fa:1c:d4:76:9b:81:56:95:56:e8:
         3a:8a:c6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:50:25 2025 by rpki-client