Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/3c6abad8-6ed4-37cc-80e4-11482fa9b73e.roa
File:                     3c6abad8-6ed4-37cc-80e4-11482fa9b73e.roa (raw, json)
Hash identifier:          mgIP0hGMgiQXwzCoFVqA+Y6M7ZkHVhio0UcK0zJ4Cmw=
Subject key identifier:   32:C6:E2:A8:BD:06:F4:13:92:AD:20:D9:54:50:BE:83:71:F9:B4:5D
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F432858492E13B9799D08BCFC990C4880
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/3c6abad8-6ed4-37cc-80e4-11482fa9b73e.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     19905
IP address blocks:        75.78.0.0/22 maxlen: 24
                          75.78.7.0/24 maxlen: 24
                          75.78.37.0/24 maxlen: 24
                          75.78.60.0/22 maxlen: 24
                          75.78.96.0/21 maxlen: 24
                          75.78.104.0/24 maxlen: 24
                          75.78.105.0/24 maxlen: 24
                          75.78.106.0/24 maxlen: 24
                          75.78.109.0/24 maxlen: 24
                          75.78.112.0/22 maxlen: 24
                          75.78.116.0/22 maxlen: 24
                          75.78.164.0/22 maxlen: 24
                          75.78.192.0/22 maxlen: 24
                          75.78.198.0/24 maxlen: 24
                          75.78.200.0/22 maxlen: 24
                          75.78.204.0/23 maxlen: 24
                          75.78.208.0/24 maxlen: 24
                          75.78.210.0/23 maxlen: 24
                          75.78.212.0/22 maxlen: 24
                          75.78.216.0/21 maxlen: 24
                          75.78.224.0/24 maxlen: 24
                          75.78.227.0/24 maxlen: 24
                          75.78.234.0/24 maxlen: 24
                          75.78.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:b9:79:9d:08:bc:fc:99:0c:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=c6d31e8c-5b7c-4cea-923c-accce71a3283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:9b:98:d3:a7:ae:4f:be:ed:56:7c:bf:bf:
                    48:5f:2c:85:b5:b7:d7:1a:a4:56:b1:aa:87:bd:3c:
                    ff:77:8a:a0:28:c2:e5:bb:2b:55:40:fe:2e:90:a6:
                    ca:9a:49:26:9f:64:48:88:dd:f5:50:d3:c4:22:1f:
                    41:e2:8c:53:a8:91:57:05:87:ee:6d:be:5f:12:b9:
                    30:97:5d:c3:2c:47:3c:ba:89:12:74:9a:6a:a6:a7:
                    0b:c7:67:0e:c4:98:ff:ac:f3:f9:45:bc:0d:e8:8b:
                    38:e5:fe:ab:0d:6c:7f:b4:e6:0c:0c:77:5c:2d:1e:
                    c6:b4:e7:fe:69:96:00:9d:10:0a:63:db:03:10:6a:
                    80:00:71:89:17:ac:9d:f9:d5:bb:96:b3:fa:5c:6b:
                    e3:37:6b:18:1f:b4:67:63:28:95:c8:11:66:c4:f5:
                    74:96:0e:06:ec:5e:1e:a5:d2:7d:09:b6:a8:02:f0:
                    48:46:25:a2:ca:b1:6e:75:b4:9b:6b:e1:22:86:f5:
                    bd:c4:05:76:17:a0:c6:c7:0a:02:50:30:a9:a8:72:
                    d0:eb:4d:79:14:ca:ea:0b:a0:df:42:5e:c4:3d:cb:
                    46:49:f5:d9:fb:6a:68:61:8c:74:59:16:0f:0e:2a:
                    a5:74:f1:ec:22:f5:58:74:e5:51:77:65:eb:dd:51:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C6:E2:A8:BD:06:F4:13:92:AD:20:D9:54:50:BE:83:71:F9:B4:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/3c6abad8-6ed4-37cc-80e4-11482fa9b73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.0.0/22
                  75.78.7.0/24
                  75.78.37.0/24
                  75.78.60.0/22
                  75.78.96.0-75.78.106.255
                  75.78.109.0/24
                  75.78.112.0/21
                  75.78.164.0/22
                  75.78.192.0/22
                  75.78.198.0/24
                  75.78.200.0-75.78.205.255
                  75.78.208.0/24
                  75.78.210.0-75.78.224.255
                  75.78.227.0/24
                  75.78.234.0/24
                  75.78.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:43:5b:43:d6:9f:4b:00:f4:02:80:3d:b3:92:65:f6:00:61:
         76:47:c2:1f:89:7b:4a:c0:d9:81:b7:49:b3:d9:01:b8:5d:62:
         6e:a3:0b:a6:40:4c:e0:04:c7:ad:82:6f:66:79:d9:1a:62:b1:
         39:66:0a:fe:2c:bf:44:5a:be:3e:87:f4:a3:34:87:91:23:53:
         e5:b5:83:e2:38:56:48:0d:70:0b:42:0b:2d:40:12:7b:8a:0f:
         b5:00:01:e0:d1:b0:c9:b4:8f:92:80:69:85:bd:69:aa:fb:9b:
         bf:13:84:aa:a2:d8:22:05:9d:11:8f:d5:08:23:d5:3c:6e:3c:
         de:a7:06:62:c7:e1:c3:3e:64:95:5e:fc:44:a9:3f:3f:ee:4e:
         c7:0b:be:de:51:35:68:1d:01:b0:cb:a6:48:11:58:63:d9:49:
         fe:31:b6:0b:b5:14:ce:a1:30:79:0d:c4:cd:13:78:54:3f:44:
         1d:4d:b8:66:16:93:34:91:d2:c3:5a:35:04:b1:f6:7a:bd:46:
         47:0b:24:3f:0d:1b:ba:5b:4d:c3:4c:8d:18:f6:8a:c7:ba:ae:
         0b:aa:30:6c:a4:86:73:35:ce:b3:95:98:e4:ba:b4:88:fa:d3:
         82:68:07:b9:4b:ac:d2:d2:78:df:54:da:94:2b:53:9b:55:d7:
         35:00:6b:b4
-----BEGIN CERTIFICATE-----
MIIGuDCCBaCgAwIBAgIUAQ0Mn0MoWEkuE7l5nQi8/JkMSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk
NjkwMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk
YzZkMzFlOGMtNWI3Yy00Y2VhLTkyM2MtYWNjY2U3MWEzMjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjubmNOnrk++7VZ8v79IXyyFtbfXGqRWsaqH
vTz/d4qgKMLluytVQP4ukKbKmkkmn2RIiN31UNPEIh9B4oxTqJFXBYfubb5fErkw
l13DLEc8uokSdJpqpqcLx2cOxJj/rPP5RbwN6Is45f6rDWx/tOYMDHdcLR7GtOf+
aZYAnRAKY9sDEGqAAHGJF6yd+dW7lrP6XGvjN2sYH7RnYyiVyBFmxPV0lg4G7F4e
pdJ9CbaoAvBIRiWiyrFudbSba+EihvW9xAV2F6DGxwoCUDCpqHLQ6015FMrqC6Df
Ql7EPctGSfXZ+2poYYx0WRYPDiqldPHsIvVYdOVRd2Xr3VEMOQIDAQABo4IDyjCC
A8YwHQYDVR0OBBYEFDLG4qi9BvQTkq0g2VRQvoNx+bRdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1
MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvM2M2YWJhZDgtNmVkNC0z
N2NjLTgwZTQtMTE0ODJmYTliNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky
ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx
ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy
NmVlMWQ2OTAuY2VyMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQCS04A
AwQAS04HAwQAS04lAwQCS048MAwDBAVLTmADBABLTmoDBABLTm0DBANLTnADBAJL
TqQDBAJLTsADBABLTsYwDAMEA0tOyAMEAUtOzAMEAEtO0DAMAwQBS07SAwQAS07g
AwQAS07jAwQAS07qAwQCS07sMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABBDW0PWn0sA9AKAPbOSZfYAYXZH
wh+Je0rA2YG3SbPZAbhdYm6jC6ZATOAEx62Cb2Z52RpisTlmCv4sv0Ravj6H9KM0
h5EjU+W1g+I4VkgNcAtCCy1AEnuKD7UAAeDRsMm0j5KAaYW9aar7m78ThKqi2CIF
nRGP1Qgj1TxuPN6nBmLH4cM+ZJVe/ESpPz/uTscLvt5RNWgdAbDLpkgRWGPZSf4x
tgu1FM6hMHkNxM0TeFQ/RB1NuGYWkzSR0sNaNQSx9nq9RkcLJD8NG7pbTcNMjRj2
ise6rguqMGykhnM1zrOVmOS6tIj604JoB7lLrNLSeN9U2pQrU5tV1zUAa7Q=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:21:19 2025 by rpki-client