Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/1b3b2bfe-ed2d-3028-a16b-f321d16c9ccd.roa
File:                     1b3b2bfe-ed2d-3028-a16b-f321d16c9ccd.roa (raw, json)
Hash identifier:          abEtwCY4riZTTwJanlRXup/dvnZ8HLuVcynFxNkKnII=
Subject key identifier:   96:43:37:52:5E:B2:F0:7C:86:35:68:A5:33:5B:CA:1D:6B:1E:57:59
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584961B99E082F0EC01038E5D200
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/1b3b2bfe-ed2d-3028-a16b-f321d16c9ccd.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     6498
IP address blocks:        75.78.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:9e:08:2f:0e:c0:10:38:e5:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=76c90ea2-9545-41ac-bfb2-db7017eb93d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:c7:f3:3b:a9:b8:54:94:87:a2:24:41:e2:
                    92:44:b3:cc:10:57:5a:50:6a:45:b7:6c:4f:a2:99:
                    5d:62:cc:ac:06:b1:ef:7e:af:1c:2b:12:2e:31:d6:
                    e3:04:9c:32:1b:12:6e:bc:5d:08:d1:32:ec:1f:af:
                    6a:82:30:7a:8a:6c:74:cb:87:55:4b:9c:4b:95:89:
                    14:b9:ad:b1:c8:33:93:8d:0b:24:26:ab:1e:d6:bb:
                    e9:cf:e3:40:47:97:97:95:db:f2:ee:83:c2:29:b4:
                    10:7a:4b:73:31:fc:60:d9:03:6c:d6:25:36:08:fe:
                    35:17:1f:ca:ac:0e:ad:c7:b5:09:5a:fe:e8:c9:e7:
                    7d:92:7f:2c:ab:b0:6d:ac:63:25:69:f3:18:6d:e2:
                    4c:b7:c7:1c:52:58:ef:57:ea:1f:09:40:e5:cf:e8:
                    28:a1:3a:c4:54:3c:94:f9:68:02:16:b1:01:87:88:
                    e8:71:6b:3d:56:11:66:d3:cc:80:e6:95:b1:c3:89:
                    49:67:a1:45:0c:38:e7:58:18:b1:5c:22:c1:5e:c2:
                    af:5c:19:19:4f:9c:07:6f:42:5c:8a:44:44:26:b6:
                    58:67:8d:8d:e8:34:1b:bb:3d:1a:8b:25:20:8e:d6:
                    64:5b:6b:33:b7:11:ec:4f:e5:06:24:2d:22:61:49:
                    5d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:43:37:52:5E:B2:F0:7C:86:35:68:A5:33:5B:CA:1D:6B:1E:57:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/1b3b2bfe-ed2d-3028-a16b-f321d16c9ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:77:c5:2b:dd:81:48:bf:b5:c5:25:80:30:29:df:57:ce:5b:
         eb:c8:6e:0a:6f:6e:ee:8f:0e:79:05:0b:2b:da:68:b9:1b:fb:
         00:07:d4:86:93:41:a3:06:7e:f9:27:92:b9:65:09:be:05:90:
         6a:c4:ea:58:25:7c:c0:fe:43:3a:ee:f1:00:ad:e3:89:7b:c4:
         3e:1d:6a:b5:9b:e7:95:99:32:11:4f:31:2e:e5:19:c3:98:83:
         d9:ee:6e:47:8e:77:7a:78:19:4f:07:8a:99:89:6b:22:c2:21:
         4a:a6:a2:ad:2a:fe:dd:a7:95:a6:53:e3:28:fa:4b:14:59:fe:
         c4:da:69:17:7e:f9:e8:37:c2:03:58:3b:27:b7:cb:44:50:60:
         29:a3:00:be:dc:56:be:9f:ef:f3:47:f2:2f:96:0c:ef:38:81:
         0e:f6:d7:c5:6c:a9:3d:5d:84:a6:44:c9:8b:9e:39:f6:43:71:
         c6:af:aa:b9:42:14:e4:d2:0a:cf:b2:b4:ce:69:bb:8c:4f:d8:
         3f:12:b3:15:7d:30:fc:71:1b:37:e8:aa:07:2f:d9:59:74:8d:
         23:17:cc:f6:d0:35:88:3b:74:b3:0e:b3:3e:d0:be:2e:a5:e0:
         99:fb:06:a9:45:9e:1b:20:f5:6c:ad:2b:2c:47:74:73:7c:a7:
         ac:2b:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:26:01 2025 by rpki-client