Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/4973c137-71d2-38e7-a41a-918c39ea9b25.roa
File:                     4973c137-71d2-38e7-a41a-918c39ea9b25.roa (raw, json)
Hash identifier:          96otGJan+vOnoqtSSdZ84SZkiYmyuYQDe2Li0FsVlKM=
Subject key identifier:   35:E4:5E:F6:8A:A1:77:A2:4E:41:CC:57:AE:BD:94:18:F8:2B:95:22
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F43285848828097C99B866A5D34024840
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/4973c137-71d2-38e7-a41a-918c39ea9b25.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     6498
IP address blocks:        75.78.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:97:c9:9b:86:6a:5d:34:02:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=57ca31cc-dde2-442f-bea8-145b657b6a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f1:be:62:8b:5d:e1:0f:ab:5c:87:94:63:a2:
                    ef:83:8e:bf:9d:c6:15:0e:ba:7c:e3:33:33:10:14:
                    d2:0c:20:33:a1:c9:f1:26:69:b5:7e:96:05:43:c5:
                    c5:8b:09:95:b1:f1:26:a7:ed:4b:7b:c6:09:84:3b:
                    a1:47:a7:9f:ca:d5:03:a3:22:79:23:3c:e3:58:f7:
                    51:7c:01:0d:5f:04:3d:d5:0c:02:e9:e5:82:0a:da:
                    38:81:c0:66:9e:6d:1e:2d:00:74:77:55:ee:fe:1b:
                    72:04:15:0c:bb:01:73:68:7d:03:89:b2:50:bc:3b:
                    df:73:c0:a3:d0:ef:01:28:16:57:d2:54:30:86:1e:
                    8d:39:6e:57:62:4a:bb:ba:57:78:00:f7:83:be:61:
                    00:83:17:f8:0f:ae:23:74:12:1c:3e:ee:9b:66:25:
                    0a:16:e1:96:cc:84:bf:99:0f:0c:a8:03:06:29:0c:
                    44:63:77:a8:c1:33:b7:fb:74:59:c0:fc:42:8e:e7:
                    31:67:8a:e3:de:2d:38:fa:14:6b:3c:07:f2:b5:da:
                    ed:99:06:c8:62:51:f5:ff:b4:ea:e7:96:19:95:ac:
                    e9:6c:59:d9:04:28:d7:a6:17:3d:46:5c:48:06:0b:
                    68:70:52:b9:94:98:7e:ad:d7:4a:e1:83:85:1d:44:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E4:5E:F6:8A:A1:77:A2:4E:41:CC:57:AE:BD:94:18:F8:2B:95:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/4973c137-71d2-38e7-a41a-918c39ea9b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:04:e7:fd:66:0c:00:20:70:75:51:18:fa:ac:40:58:9c:7f:
         4c:d7:ba:81:37:e9:4a:0a:fc:5b:23:3e:6f:12:80:38:80:f4:
         52:1c:c0:a2:01:f2:43:97:a6:c7:39:fe:b4:dd:56:4e:60:80:
         34:4f:ad:18:36:88:70:6c:52:0b:f0:b9:c0:44:97:57:63:d4:
         4c:4a:a1:5c:8a:71:02:af:5c:79:64:d3:8c:30:2f:9e:60:07:
         f0:30:c9:0b:a5:c1:bb:15:ab:3d:72:25:59:73:a1:60:9f:09:
         8e:08:b3:8c:3e:29:49:d5:e5:f2:08:a2:5a:8a:a7:bd:fd:f3:
         48:71:3c:b0:c2:34:6a:41:08:55:d5:05:7d:ec:83:32:e1:cc:
         a7:ae:3f:62:38:7f:b8:18:01:00:38:b8:3c:ec:fb:b4:16:c8:
         10:4a:95:20:f3:1f:41:ae:3e:df:4c:c4:bb:34:54:1d:4f:e4:
         e8:c6:0d:4f:a1:b9:f6:a3:42:8c:d3:c5:cd:97:70:1f:a5:1a:
         8c:36:91:33:4e:9b:f4:ec:dc:2c:9b:2d:3c:66:62:32:b4:ae:
         e2:2a:21:ce:f2:2a:7d:f6:f7:1a:06:22:2f:03:12:4f:4b:cc:
         b1:12:dc:5d:d9:8a:61:27:e0:9a:84:2c:b7:13:8e:ee:2d:be:
         90:56:d8:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJfJm4ZqXTQCSEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk
NjkwMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NTdjYTMxY2MtZGRlMi00NDJmLWJlYTgtMTQ1YjY1N2I2YTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifG+Yotd4Q+rXIeUY6Lvg46/ncYVDrp84zMz
EBTSDCAzocnxJmm1fpYFQ8XFiwmVsfEmp+1Le8YJhDuhR6efytUDoyJ5IzzjWPdR
fAENXwQ91QwC6eWCCto4gcBmnm0eLQB0d1Xu/htyBBUMuwFzaH0DibJQvDvfc8Cj
0O8BKBZX0lQwhh6NOW5XYkq7uld4APeDvmEAgxf4D64jdBIcPu6bZiUKFuGWzIS/
mQ8MqAMGKQxEY3eowTO3+3RZwPxCjucxZ4rj3i04+hRrPAfytdrtmQbIYlH1/7Tq
55YZlazpbFnZBCjXphc9RlxIBgtocFK5lJh+rddK4YOFHUSZBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDXkXvaKoXeiTkHMV669lBj4K5UiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1
MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvNDk3M2MxMzctNzFkMi0z
OGU3LWE0MWEtOTE4YzM5ZWE5YjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky
ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx
ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy
NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS06zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMEE5/1mDAAgcHVRGPqsQFicf0zXuoE36UoK/FsjPm8SgDiA9FIcwKIB
8kOXpsc5/rTdVk5ggDRPrRg2iHBsUgvwucBEl1dj1ExKoVyKcQKvXHlk04wwL55g
B/AwyQulwbsVqz1yJVlzoWCfCY4Is4w+KUnV5fIIolqKp73980hxPLDCNGpBCFXV
BX3sgzLhzKeuP2I4f7gYAQA4uDzs+7QWyBBKlSDzH0GuPt9MxLs0VB1P5OjGDU+h
ufajQozTxc2XcB+lGow2kTNOm/Ts3CybLTxmYjK0ruIqIc7yKn329xoGIi8DEk9L
zLES3F3ZimEn4JqELLcTju4tvpBW2N8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:03 2025 by rpki-client