Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/33b7ca7d-abb9-39b1-a944-19374ba77af4.roa
File:                     33b7ca7d-abb9-39b1-a944-19374ba77af4.roa (raw, json)
Hash identifier:          Sh1zDflzM3Mbmrgs6zsGnNibObheZE2IqIPN9sWf/tE=
Subject key identifier:   99:01:CB:01:34:5D:51:8D:3F:3E:15:D1:42:7C:31:EC:B0:CD:87:94
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584961B99DD3929B2C5E780646C0
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/33b7ca7d-abb9-39b1-a944-19374ba77af4.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     6498
IP address blocks:        75.78.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:9d:d3:92:9b:2c:5e:78:06:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=70453d40-28c3-4ba5-91aa-3e7085179d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:53:f0:33:a6:6d:35:8f:61:2a:71:52:b6:
                    77:6a:30:6b:92:8f:82:67:ae:fe:b6:6b:8e:2f:25:
                    e5:e0:bb:91:9b:98:1a:fc:22:ee:59:26:61:ae:35:
                    ef:00:fe:60:bf:1a:4e:ac:28:f0:35:77:5c:c9:ac:
                    94:6b:f9:a9:81:c2:8a:53:44:7b:cc:78:98:68:0d:
                    eb:31:68:5d:38:9b:b4:6f:17:da:6c:34:27:ea:0e:
                    db:a8:4b:7d:43:a4:68:32:52:70:fa:58:f9:de:76:
                    24:01:34:34:4f:dd:7f:c2:a4:86:b0:e5:46:62:49:
                    be:d7:9b:f4:ed:18:13:d3:f4:bf:7a:39:7f:e7:87:
                    b3:4e:84:26:c5:03:28:0f:72:da:70:93:19:af:44:
                    06:0a:fd:bc:0e:5b:10:4b:6d:a3:59:c1:1e:94:8a:
                    b2:e0:45:b1:82:30:50:19:64:e0:f9:d1:f2:c5:a4:
                    d4:ce:05:5d:fd:1c:a0:db:d8:08:8c:32:8d:61:de:
                    44:a2:8d:97:88:0a:d6:d2:68:d8:94:8e:93:89:e1:
                    71:b1:65:ce:f0:60:43:9f:2f:b0:f4:28:93:ca:78:
                    ac:11:05:18:6f:44:17:42:96:fa:bf:00:fb:e0:be:
                    bb:d8:ed:fe:6e:59:ae:c4:7b:e8:95:e8:5f:d1:4c:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:01:CB:01:34:5D:51:8D:3F:3E:15:D1:42:7C:31:EC:B0:CD:87:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/33b7ca7d-abb9-39b1-a944-19374ba77af4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:33:2f:f8:c2:ad:06:3e:68:73:a4:04:0a:1c:31:23:29:bf:
         18:83:80:8b:80:66:4d:61:56:aa:d2:11:b0:f0:12:84:07:74:
         88:f0:5e:81:18:2c:51:45:6d:7d:da:25:89:8c:db:b0:36:58:
         b4:84:ea:03:bf:2a:8f:ec:1b:1e:65:5e:44:9b:1f:5b:0e:0a:
         a4:8c:88:04:fb:59:78:8f:3e:ec:f4:f2:02:0e:2d:5c:86:b3:
         d0:4b:c8:af:54:d7:bb:c2:ca:d4:51:b6:9c:ec:0b:10:3d:14:
         94:59:2e:c1:6f:7e:9d:95:14:9a:74:69:b1:45:67:07:3e:11:
         dd:92:f7:82:e4:12:78:24:2f:2a:fe:e5:1d:84:fc:06:62:65:
         e5:2f:fe:66:9d:2f:37:38:74:b6:ff:ce:e1:ba:1e:17:cf:c6:
         31:1a:d1:9a:ac:4d:2b:35:b5:24:a7:27:8d:f8:14:14:7f:58:
         cc:7e:13:db:f0:83:3d:b6:0f:6c:54:40:8d:36:96:f2:61:99:
         d4:0c:b3:b5:b9:a7:4d:a7:e4:f3:5a:94:7a:90:0b:e6:e0:db:
         01:e9:2a:4c:3f:89:68:c9:6f:2d:8b:52:14:7f:7c:48:28:fe:
         9a:b2:72:6f:26:0b:f6:9a:d7:ff:60:41:f8:a4:ca:61:e1:70:
         25:ab:84:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZ3TkpssXngGRsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk
NjkwMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk
NzA0NTNkNDAtMjhjMy00YmE1LTkxYWEtM2U3MDg1MTc5ZDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwahT8DOmbTWPYSpxUrZ3ajBrko+CZ67+tmuO
LyXl4LuRm5ga/CLuWSZhrjXvAP5gvxpOrCjwNXdcyayUa/mpgcKKU0R7zHiYaA3r
MWhdOJu0bxfabDQn6g7bqEt9Q6RoMlJw+lj53nYkATQ0T91/wqSGsOVGYkm+15v0
7RgT0/S/ejl/54ezToQmxQMoD3LacJMZr0QGCv28DlsQS22jWcEelIqy4EWxgjBQ
GWTg+dHyxaTUzgVd/Ryg29gIjDKNYd5Eoo2XiArW0mjYlI6TieFxsWXO8GBDny+w
9CiTynisEQUYb0QXQpb6vwD74L672O3+blmuxHvolehf0Uy3DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJkBywE0XVGNPz4V0UJ8MeywzYeUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1
MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvMzNiN2NhN2QtYWJiOS0z
OWIxLWE5NDQtMTkzNzRiYTc3YWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky
ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx
ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy
NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS05uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwzL/jCrQY+aHOkBAocMSMpvxiDgIuAZk1hVqrSEbDwEoQHdIjwXoEY
LFFFbX3aJYmM27A2WLSE6gO/Ko/sGx5lXkSbH1sOCqSMiAT7WXiPPuz08gIOLVyG
s9BLyK9U17vCytRRtpzsCxA9FJRZLsFvfp2VFJp0abFFZwc+Ed2S94LkEngkLyr+
5R2E/AZiZeUv/madLzc4dLb/zuG6HhfPxjEa0ZqsTSs1tSSnJ434FBR/WMx+E9vw
gz22D2xUQI02lvJhmdQMs7W5p02n5PNalHqQC+bg2wHpKkw/iWjJby2LUhR/fEgo
/pqycm8mC/aa1/9gQfikymHhcCWrhH8=
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:32:38 2025 by rpki-client