Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ae5c53ed-67c6-3f81-acb6-2e3e23ed4ca1.roa
File:                     ae5c53ed-67c6-3f81-acb6-2e3e23ed4ca1.roa (raw, json)
Hash identifier:          PK6i2wVmMnBHpbPzFaAjqdFQfNhOcPEuz29BgFwtACM=
Subject key identifier:   76:4B:8D:B2:48:0B:B3:62:BE:D8:8A:2E:AA:89:CF:48:98:E8:DB:93
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584B21CC2A57006EB64AB6C44880
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ae5c53ed-67c6-3f81-acb6-2e3e23ed4ca1.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     6498
IP address blocks:        75.78.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:2a:57:00:6e:b6:4a:b6:c4:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=ab6e5740-c14f-437c-977a-5e7671e45906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:78:ca:68:f5:6d:37:e7:1d:81:98:6b:b1:84:
                    92:2e:7f:2f:2f:4e:ed:1c:95:0b:fd:16:53:0c:32:
                    d8:fb:00:6b:a7:50:97:72:c9:6e:40:97:97:05:f5:
                    d0:e4:ce:ff:4b:ca:2a:42:9f:c1:f2:87:02:b5:ff:
                    18:10:f2:67:67:2e:4d:87:74:6d:ba:e3:9d:10:a7:
                    19:0a:1a:53:35:50:a1:ab:76:79:a7:22:44:58:e9:
                    98:2f:c3:12:40:3e:ab:56:25:1c:95:fa:e1:2c:fc:
                    c9:b2:be:de:7c:ce:bf:ae:ce:7a:dd:8b:68:9e:a9:
                    54:fd:9e:be:e4:ed:d4:6c:5b:1a:fa:7b:4c:65:86:
                    0b:e6:e8:8a:29:75:1f:ed:0d:81:26:27:d3:6c:ed:
                    05:f5:93:ca:aa:17:d9:70:fb:78:91:cd:66:bf:77:
                    e0:84:40:b7:35:26:7b:8f:37:4d:4f:3e:fd:88:15:
                    ae:74:24:a9:eb:76:57:28:80:72:68:b1:a4:2d:b2:
                    00:f8:46:76:e2:60:fc:78:3d:bf:78:82:51:fd:47:
                    41:f9:1f:ea:af:ee:9d:aa:01:83:e1:e1:66:ae:93:
                    3d:06:95:84:43:56:d2:da:c6:b9:7c:25:2f:8e:ab:
                    fe:c4:cf:d1:ab:ab:ad:5e:96:67:33:1c:06:41:41:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4B:8D:B2:48:0B:B3:62:BE:D8:8A:2E:AA:89:CF:48:98:E8:DB:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ae5c53ed-67c6-3f81-acb6-2e3e23ed4ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8b:54:3a:e1:1f:19:4d:99:53:0b:ee:ea:4c:86:51:d1:60:
         6e:1a:22:3b:02:3e:70:a8:ee:76:a1:5f:c5:11:64:60:a1:bc:
         5d:94:ea:e3:ad:fc:dd:63:27:9b:fd:07:82:9c:65:b8:b6:28:
         8b:7a:33:bb:03:10:7d:92:d7:76:6d:6e:44:88:82:f7:09:07:
         fd:38:5a:f1:2a:34:e3:f3:ce:64:69:cd:37:5e:29:86:8c:d5:
         3a:60:38:33:f8:fd:82:fe:32:50:23:08:69:64:c8:a6:f9:40:
         1d:26:16:fc:b1:5a:f8:8e:34:5f:d2:cc:40:19:48:eb:16:bc:
         27:90:02:b2:04:5e:6a:f5:96:1d:43:e2:67:84:cc:76:3e:3b:
         20:0c:8c:b4:e4:c0:b6:76:45:17:70:a7:19:57:72:fe:0c:da:
         14:1c:52:88:d0:28:c7:56:3f:04:ac:ad:42:5c:db:98:09:78:
         6f:35:a6:55:ac:2c:7e:2a:9a:14:22:71:7b:27:2d:26:e5:8f:
         ad:b3:af:a8:3b:1b:a7:00:2e:aa:1e:a8:00:db:0a:62:b0:1e:
         91:55:a8:d4:17:f4:15:85:4c:fe:f8:e4:ef:a5:7e:81:b4:2b:
         af:9e:cb:ce:bc:d9:dc:03:50:65:b4:a4:17:f3:ac:b2:7d:85:
         41:4d:b6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:55:17 2025 by rpki-client