Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/11410da2-ba97-33be-bc51-ad43b44f2c57.roa
File:                     11410da2-ba97-33be-bc51-ad43b44f2c57.roa (raw, json)
Hash identifier:          cc2UvB7bH1lRhSbbN6lwa+kAqRV5y3WKoHvGtbgV+5Q=
Subject key identifier:   B1:94:FF:59:B3:33:64:A6:36:78:BC:4A:D5:D7:FD:4F:61:54:6E:EE
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F43285847A30BFFD773291485370AA980
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/11410da2-ba97-33be-bc51-ad43b44f2c57.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     6498
IP address blocks:        75.78.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:ff:d7:73:29:14:85:37:0a:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=197dc0af-9f79-44dc-964e-f5d90a8dd6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:22:38:88:16:3c:e9:71:ed:43:21:0c:f1:
                    81:1b:f4:46:0b:b1:aa:d4:8d:d9:2a:7f:e4:40:bf:
                    fa:2f:72:53:2e:f8:56:c1:aa:2a:ce:b9:ba:d9:55:
                    3a:50:97:c3:de:c6:21:d6:3e:73:bc:44:64:47:87:
                    13:b7:a6:1a:19:52:30:b5:e7:1e:d1:b5:b7:72:86:
                    76:bd:34:6d:b3:91:18:86:aa:d3:84:c9:e1:1e:b7:
                    71:30:ee:ed:c3:2b:5b:41:9f:72:11:e0:eb:0a:5e:
                    51:ae:56:bd:9f:4d:9a:2c:37:a0:4b:e0:ee:80:d0:
                    d8:9c:fd:5f:66:96:78:36:2b:43:df:4b:96:19:46:
                    2a:d3:af:a4:4f:7b:c4:9e:fb:d5:25:5a:45:f6:d3:
                    bb:47:41:6f:23:a6:3e:a3:a4:f3:17:2b:a7:af:52:
                    a9:cc:cf:52:f0:52:d7:d6:c6:38:e6:a3:82:65:7c:
                    13:0d:d8:6e:e5:b3:97:7c:2f:c0:f3:6f:0e:51:b0:
                    87:c3:77:30:be:c7:0e:81:8d:7c:58:5b:31:7a:f6:
                    dc:47:63:26:3a:9e:00:4d:15:63:5a:1b:40:7b:bf:
                    a3:f0:b4:8a:4c:53:cb:f6:ff:39:09:61:6e:69:d4:
                    2c:a6:68:a8:ec:39:06:65:6d:87:14:3a:b3:49:dc:
                    82:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:94:FF:59:B3:33:64:A6:36:78:BC:4A:D5:D7:FD:4F:61:54:6E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/11410da2-ba97-33be-bc51-ad43b44f2c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:20:f7:3d:50:cc:53:af:57:c4:b7:bb:90:c3:b4:ef:02:26:
         64:a0:b5:8d:7e:bf:eb:60:f0:7f:01:ae:c2:1d:5b:7f:f1:b0:
         ab:18:d8:5d:d6:50:03:c8:92:44:d5:21:52:92:de:7d:6c:fe:
         41:67:37:19:e8:18:d0:ff:2f:e4:df:3d:2a:b0:cb:c8:c7:93:
         d4:c5:cc:61:71:9b:36:8b:db:e9:b9:df:f7:d4:08:60:fe:d4:
         17:6f:d9:57:6e:bf:9e:36:10:42:92:9d:22:2c:65:32:6a:9c:
         e6:89:97:6f:24:6a:1d:92:05:4e:0d:84:6c:0f:fe:80:73:7a:
         af:d3:d5:a2:b6:11:91:fb:7b:20:08:05:89:9a:f3:3a:95:df:
         0a:d4:56:11:7a:b9:b1:ef:21:82:8e:2a:c0:58:f6:d1:f4:b6:
         4f:44:f1:65:f2:b9:15:52:99:6e:1c:e6:75:20:ab:8c:9c:63:
         ed:f0:d4:bf:8e:3a:1e:bf:00:04:2a:c7:71:8d:27:0c:55:03:
         a8:c4:a3:b1:f8:0b:9a:13:ec:eb:b3:7f:8e:a6:9c:f2:e7:49:
         66:17:9b:9a:c2:0a:25:f3:b9:cf:c2:c8:1d:b8:16:56:89:ba:
         a5:5f:10:57:25:6c:f8:16:5e:8a:a2:96:84:ab:8c:b8:84:3e:
         6c:47:84:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:09 2024 by rpki-client on console-fra.rpki-client.org