Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ab9f3d89-4e74-3c9c-9562-b94ed6d2fb6b.roa
File:                     ab9f3d89-4e74-3c9c-9562-b94ed6d2fb6b.roa (raw, json)
Hash identifier:          EzwSB/AhHKMrHAWZlOFXC6WKn6YVrZITGlGXcV40mio=
Subject key identifier:   83:E8:66:8C:ED:3B:19:B8:A2:05:7A:5C:24:AC:1F:D7:D7:B0:0A:C2
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584B21CC2C270A7D21D75E1EE500
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ab9f3d89-4e74-3c9c-9562-b94ed6d2fb6b.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     6498
IP address blocks:        75.78.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:2c:27:0a:7d:21:d7:5e:1e:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=0d4d112b-53e5-4248-9ff9-9b57942f9378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:46:70:a9:de:a6:5a:06:aa:23:12:81:eb:5b:
                    ab:a5:82:ad:66:b7:5e:11:ba:cc:7d:b5:e4:89:b5:
                    e5:e9:fd:13:36:9e:df:88:e7:0c:e2:de:1c:56:86:
                    3c:9f:b6:cc:a2:d8:e0:5a:44:28:52:b1:a0:1d:af:
                    ad:7c:57:17:32:40:c2:42:8e:a1:47:6a:36:74:2c:
                    a8:25:10:5a:db:80:8f:8c:8e:d1:cb:e2:67:2b:97:
                    ec:0d:09:9d:70:0f:46:06:8d:85:99:af:d7:86:97:
                    42:77:89:30:f9:78:b4:ef:78:7f:ac:63:9f:82:70:
                    e9:c0:7e:cc:21:ae:2c:fa:e0:78:49:d6:80:16:a1:
                    df:b9:39:d9:39:5d:f0:06:2b:c1:48:74:9d:15:ec:
                    18:4f:cb:62:fd:ba:e7:a0:e3:f6:97:6b:2a:15:43:
                    9d:15:69:cf:b6:17:dd:f7:ed:4a:1c:19:fe:ee:7e:
                    d0:ef:3b:cb:f5:0d:9e:7e:22:6d:a9:84:39:42:3e:
                    98:9e:b1:c3:d7:13:bc:fe:44:f3:3e:31:8b:58:41:
                    5d:e3:0f:bd:d6:58:83:02:35:d1:96:66:28:99:2c:
                    67:09:4a:bf:94:01:1e:ae:bb:c8:54:ca:9f:4a:b7:
                    dc:cd:64:b7:c0:a9:db:93:ea:91:d9:6f:3e:bc:7c:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:66:8C:ED:3B:19:B8:A2:05:7A:5C:24:AC:1F:D7:D7:B0:0A:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ab9f3d89-4e74-3c9c-9562-b94ed6d2fb6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:22:9b:98:94:bc:1f:07:89:18:5d:34:97:20:8f:69:67:75:
         4e:5c:78:af:dc:02:9b:51:7f:0f:f0:61:52:27:ab:23:b3:35:
         fa:24:e2:52:76:2d:6a:ae:7f:c2:44:ec:2d:4f:94:b8:56:6e:
         94:88:ad:1e:92:38:c4:06:83:4c:1c:7f:2c:28:42:9a:fe:d5:
         1b:2d:13:27:d8:79:10:9c:5c:4e:68:d5:bd:1a:4a:ec:40:2a:
         28:cd:d0:f8:c3:18:a9:49:dd:0a:59:30:2b:38:f4:77:91:8f:
         48:e1:4e:76:93:e9:da:d2:9e:8f:07:98:12:60:d2:02:41:83:
         49:6d:99:63:05:a6:9d:51:95:c3:ac:57:c4:f0:66:0a:51:f3:
         f3:e3:e5:23:3f:36:08:b7:19:6a:e8:3d:29:8e:e0:47:b4:24:
         d1:71:49:4a:bf:b1:82:e3:1d:7e:e7:d8:01:5b:00:ae:67:a2:
         11:54:9a:4e:f5:51:66:50:b4:ba:83:40:a4:49:64:8a:e1:2c:
         6c:7a:73:ec:65:ce:3b:4e:24:f5:a3:08:9a:3a:aa:dd:f1:2c:
         28:a2:b3:00:eb:e9:0d:51:1d:23:db:c3:18:25:a0:52:06:ac:
         c4:3e:8c:ac:8a:03:dc:4d:00:10:92:24:e8:e6:e2:bd:1c:fa:
         c9:9e:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:33:03 2025 by rpki-client