Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/e1ae2cd3-9c16-37b8-823c-99383c09356c.roa
File:                     e1ae2cd3-9c16-37b8-823c-99383c09356c.roa (raw, json)
Hash identifier:          odmw0Wp4b7hBIyVEp9z6TLaD+XvhiGdzYHvc8N6qjE8=
Subject key identifier:   D4:15:85:0D:D6:51:5B:04:D4:5A:97:B4:B4:3F:1A:EB:8B:B8:36:46
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584B21CC2BB1EB585C7D23243440
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/e1ae2cd3-9c16-37b8-823c-99383c09356c.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     6498
IP address blocks:        75.78.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:2b:b1:eb:58:5c:7d:23:24:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=b0cc858e-153f-4fdc-86f9-1679e00b8535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1e:af:0b:ad:b6:b4:76:eb:d5:dc:6c:57:16:
                    ec:6d:01:6a:bd:ee:1b:a6:9a:00:59:34:36:68:03:
                    f9:4f:e8:b1:40:35:c2:3c:76:5f:87:8a:ce:a5:c1:
                    9a:40:fa:71:a3:34:28:c9:85:9e:e2:6c:b0:1a:2a:
                    43:12:4c:cb:cf:ca:d8:38:8b:a0:59:9f:8f:2f:7c:
                    59:ff:ac:ea:36:90:ff:b8:70:d9:a8:a3:d7:62:f4:
                    e0:7d:5a:75:ba:01:11:a9:98:4d:9e:0c:53:f0:43:
                    60:55:c9:66:fa:69:b6:f8:03:9f:5e:91:39:4a:93:
                    56:0f:2f:a6:2b:5e:33:05:ba:2e:94:22:b4:2f:1d:
                    44:0e:53:cd:48:e0:90:26:b9:ba:af:fa:22:d9:a2:
                    bb:f0:a0:b1:48:c3:9b:35:72:06:54:89:d2:33:ab:
                    3c:c4:e8:ff:fc:b8:26:cd:01:3e:3d:e4:e6:96:12:
                    76:0d:e8:3e:cd:ef:8c:2c:c7:08:02:ef:c9:83:ba:
                    48:6f:83:38:8e:8b:2f:7c:4d:6a:cd:77:ee:8a:72:
                    07:bb:e3:bb:a0:29:d1:a2:14:dc:a2:24:2a:e3:c8:
                    9f:b3:6e:c5:e5:b7:6f:5f:ef:97:ad:87:b7:0e:5a:
                    e4:47:3d:b1:41:7e:09:b7:7c:2c:c0:88:75:0a:0f:
                    1f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:15:85:0D:D6:51:5B:04:D4:5A:97:B4:B4:3F:1A:EB:8B:B8:36:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/e1ae2cd3-9c16-37b8-823c-99383c09356c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:84:11:5e:9a:e7:12:35:64:6f:08:1a:e4:c5:24:d0:03:15:
         8d:f2:b3:7f:5b:9a:1c:e4:45:5f:70:16:cd:5b:3c:f4:94:86:
         3a:5f:27:6b:5b:d3:c2:56:f5:0d:4f:57:72:f8:43:51:c1:62:
         4f:49:7e:33:b8:26:f4:0c:8b:5f:da:30:64:37:6e:a3:61:41:
         4a:e8:f8:19:83:bf:87:f6:c2:c5:dc:93:28:cc:a3:22:88:c8:
         ef:2d:7b:65:d5:43:fc:fc:47:a3:71:77:f4:c8:f8:d4:74:ce:
         8d:e6:60:e8:c4:1b:c8:40:ba:b7:cb:d3:3a:8b:d4:5c:f1:a2:
         e1:d3:c7:f5:19:df:7d:18:c0:82:52:2e:a2:88:6f:68:1d:e8:
         71:2b:b9:0d:0b:81:05:d0:cd:de:06:06:ee:ee:c5:b3:2a:76:
         89:4f:a7:26:c6:e8:fd:e1:c2:e0:d5:df:6c:24:01:30:fb:85:
         27:a5:99:1c:7a:14:8c:e0:b4:73:e5:fb:8b:1d:98:2b:62:b7:
         d8:86:1d:03:69:01:3b:3d:00:55:e0:99:8a:aa:e2:7f:99:e4:
         a1:13:1e:70:7d:13:a5:38:23:76:4b:17:2f:11:8e:a0:9a:79:
         9b:37:44:12:64:37:4c:06:06:c3:1f:7b:b9:35:7c:49:6c:9e:
         23:fd:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:50:40 2025 by rpki-client