Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/29809cb8-6132-3a8b-bf2c-aaa61178a6c8.roa
File:                     29809cb8-6132-3a8b-bf2c-aaa61178a6c8.roa (raw, json)
Hash identifier:          X4/SuBf4zfNWOCk1wE7HvM2iIaL6W7NsXcKeTOSFINo=
Subject key identifier:   C5:34:9F:1D:FD:49:A7:0D:2B:48:5A:5F:AD:F1:7D:14:DA:14:3D:D1
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F43285848828096FF68D47A47A3D46E40
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/29809cb8-6132-3a8b-bf2c-aaa61178a6c8.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     6498
IP address blocks:        75.78.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:96:ff:68:d4:7a:47:a3:d4:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=7f497319-fdcf-4996-9de6-ea5902fc6a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:9b:5d:17:6b:85:9d:d8:57:6f:9f:91:24:
                    d7:ab:57:32:0e:72:29:89:f0:c3:d8:95:e3:7d:12:
                    26:94:d2:05:b2:1f:5a:a3:7e:b0:a7:02:19:1d:54:
                    c6:c4:87:e6:62:4b:c0:ce:68:90:2c:62:1b:00:3a:
                    d1:6a:c6:c8:35:f9:d8:a9:ee:58:a1:19:eb:68:ef:
                    52:a5:e8:5d:5d:00:62:6d:07:f1:19:aa:37:aa:8d:
                    c6:48:fa:04:8f:59:98:3c:11:4e:2b:58:4a:5c:1c:
                    0d:ab:f5:3c:b5:5c:48:32:d8:76:92:11:bb:91:fa:
                    02:a9:5a:64:15:c6:9d:d9:7d:60:d5:29:0a:51:1c:
                    38:4b:da:aa:d2:ae:64:83:d0:c7:33:c6:97:f4:9b:
                    5a:2a:43:bc:54:a4:86:dc:18:61:7f:74:8d:c6:32:
                    7f:76:89:3d:f1:ca:75:69:19:18:cb:75:43:75:21:
                    c6:9e:5a:3e:cd:0d:df:7d:a7:83:bf:f5:38:8e:fd:
                    d1:1d:6d:07:2e:7d:3f:36:73:dc:88:b8:1f:57:48:
                    3c:fc:04:29:bc:91:a3:d3:be:b5:40:cd:6d:6d:03:
                    fa:79:94:02:da:0d:86:8b:d1:19:8b:eb:96:21:22:
                    c0:50:24:84:35:5d:75:79:dc:4c:88:70:ec:e7:08:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:34:9F:1D:FD:49:A7:0D:2B:48:5A:5F:AD:F1:7D:14:DA:14:3D:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/29809cb8-6132-3a8b-bf2c-aaa61178a6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:23:b3:3d:50:c5:f1:28:b5:7f:bb:4a:a4:d0:e2:63:04:87:
         85:80:94:94:a2:40:74:89:ab:cf:54:99:1f:b3:fa:a7:d9:03:
         a8:33:1c:35:c6:cf:be:a1:eb:4b:06:3f:1b:2b:49:29:73:bc:
         98:5d:36:e2:c9:47:b0:de:b0:f8:f8:5f:7d:95:1f:c3:f1:41:
         80:29:ad:9d:7e:5b:ac:a4:67:4c:bd:02:08:6e:da:fd:e0:a7:
         22:85:e9:15:42:3e:48:d8:31:08:10:81:5c:ab:c6:bf:81:9d:
         84:c0:5b:53:22:0d:eb:77:ee:14:2b:0f:65:75:69:60:cf:d5:
         bf:88:99:5c:41:f4:8a:37:72:8b:d9:a3:c2:57:1e:db:73:a0:
         8d:8b:7c:5f:ba:e4:0c:85:d1:bd:92:f2:0b:6d:6e:80:b7:b7:
         dc:03:45:ba:02:1a:e5:45:ba:88:0c:65:0f:dd:a1:7e:1e:2b:
         b9:80:d3:d8:1c:e0:b1:d7:5b:95:4c:1b:5b:18:fd:2f:16:0f:
         0f:63:2a:3c:91:eb:2e:58:9a:df:c6:19:24:5c:3f:70:07:64:
         71:0f:53:b1:df:f6:ce:c8:cc:4e:7d:07:64:42:ec:27:e3:e6:
         ea:1d:bc:f7:8a:22:44:d8:71:19:49:cf:b3:09:5a:74:dd:fc:
         ac:d7:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:08 2025 by rpki-client