Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/2762bc2c-ac3d-3570-9ff6-91a929bfab94.roa
File:                     2762bc2c-ac3d-3570-9ff6-91a929bfab94.roa (raw, json)
Hash identifier:          jkmj3gGnFZ4oLfUbqGxmK09XmcSfOt13BB5/01htjUU=
Subject key identifier:   CC:ED:4A:58:DD:46:2A:9F:4E:CB:8C:D4:69:CC:70:33:41:21:37:CF
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584961B99D2E40492F9858A65480
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/2762bc2c-ac3d-3570-9ff6-91a929bfab94.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     6498
IP address blocks:        75.78.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:9d:2e:40:49:2f:98:58:a6:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=20a211a8-9c9b-4efd-8f8b-badc0830e77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:48:93:04:b1:26:33:bc:3c:e2:34:e0:4f:
                    2a:d0:34:dd:53:75:6b:da:d0:58:1b:f8:bc:63:98:
                    3c:c3:1a:cd:65:3d:12:5a:fc:a5:db:fc:0b:e8:b3:
                    c7:a4:62:0a:24:48:e1:43:8f:50:80:3f:81:f8:1c:
                    80:54:a0:f3:2b:01:4c:62:20:4f:eb:b5:c3:3a:33:
                    69:42:9a:94:e3:31:52:1a:0c:36:f4:90:ab:26:9d:
                    7f:c4:ac:48:9f:9d:38:d4:f6:94:72:7f:9a:48:49:
                    07:36:db:ea:d9:bd:33:25:b1:76:8f:a8:3e:5e:09:
                    2d:b5:10:0e:ec:bb:c2:21:2b:95:42:ff:61:9a:b3:
                    b3:d4:46:62:51:26:0a:ad:89:3b:54:45:5b:c4:8f:
                    39:a1:08:7f:cd:10:68:9d:b2:16:1d:6c:3d:50:72:
                    09:3c:d3:ef:fd:fd:13:4c:14:a2:fc:6f:38:57:20:
                    40:9c:0d:d5:79:c2:3f:d8:20:5e:6f:9d:1a:52:13:
                    10:df:3e:10:cc:55:6b:d2:fc:03:4b:65:54:cb:8d:
                    df:b5:3a:89:51:b4:ee:40:8a:db:32:99:5c:74:82:
                    f7:2a:54:8a:04:1a:16:7e:10:ce:4a:3f:63:20:61:
                    e8:76:1e:26:83:db:b5:29:a1:30:c3:57:2a:dc:00:
                    57:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:ED:4A:58:DD:46:2A:9F:4E:CB:8C:D4:69:CC:70:33:41:21:37:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/2762bc2c-ac3d-3570-9ff6-91a929bfab94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:46:68:e3:0c:72:48:5c:eb:89:b0:29:58:be:74:9d:d8:be:
         1b:03:94:ee:11:99:40:b9:4f:4d:d0:7f:05:44:71:13:26:ae:
         4c:33:39:69:1e:ac:67:2c:cd:84:7c:7a:6b:59:25:72:b2:1b:
         53:b9:25:75:10:9b:36:f3:33:7f:83:2a:c2:a2:59:42:23:3b:
         be:36:24:17:81:88:0c:22:e7:60:e4:ec:84:0c:d6:bc:c1:7a:
         cc:41:39:3b:ba:3e:7a:5d:3c:dc:97:ea:b7:1c:2f:29:1f:f6:
         bc:28:66:60:cc:a7:64:ae:22:f4:f7:92:d9:56:46:e0:e2:de:
         ef:93:9a:e8:91:42:33:d6:b4:e8:44:b6:56:98:3b:ab:89:6f:
         3c:b3:39:cc:b1:2d:a5:e6:30:d2:20:76:39:e5:1f:a2:3b:aa:
         30:e7:8e:20:48:9a:f1:ff:e9:d6:43:26:6e:03:af:69:3b:43:
         b0:44:a9:52:21:1f:e6:75:f6:c5:bb:b7:4d:9c:45:a8:c9:52:
         dd:5f:e3:07:08:02:72:4e:17:d0:6b:dd:60:f7:d4:89:5b:1b:
         ac:4f:e7:48:e7:b5:12:ba:c8:6f:de:68:72:2e:f4:1b:4b:79:
         4e:44:90:5b:be:12:1d:8f:38:60:d1:ad:33:f1:49:1f:a5:3c:
         d1:99:39:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:09:48 2025 by rpki-client