Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/89aa5d99-a10e-3961-a429-da0c9e3a590c.roa
File:                     89aa5d99-a10e-3961-a429-da0c9e3a590c.roa (raw, json)
Hash identifier:          X8GarUZVo2X7u16QtDEbxBkvucinzVW28NQGFKvr0Zk=
Subject key identifier:   A3:BD:33:2A:22:94:CB:14:DC:CA:AF:7A:B4:E0:3C:0F:5D:98:2E:41
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F43285847A30BFEE7CF3A35E9F50D10A0
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/89aa5d99-a10e-3961-a429-da0c9e3a590c.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     6498
IP address blocks:        75.78.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:fe:e7:cf:3a:35:e9:f5:0d:10:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=3bd39c8c-6ecb-4f37-8eec-1539d88d7039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:da:93:51:3c:22:c4:62:27:85:89:15:bf:0b:
                    7c:53:2b:46:88:21:24:e3:71:01:9a:da:26:2d:b5:
                    fb:10:a8:e3:7b:e0:22:09:b7:aa:03:b2:ae:67:d7:
                    3f:41:33:c9:7e:9e:82:2d:0d:2a:e1:5e:95:26:9a:
                    fc:85:c6:7e:0c:f6:b6:10:ae:99:fa:26:56:c4:2a:
                    c3:d0:bf:02:f0:a8:b8:e9:c1:d4:40:08:58:f8:f3:
                    a9:f2:68:01:bd:36:06:8b:e9:79:f5:e0:c6:fd:6a:
                    df:b1:24:e8:7c:74:90:f9:98:ca:8d:c6:db:8b:ea:
                    35:e1:b4:1b:77:24:3a:12:76:19:37:3f:6a:02:35:
                    35:56:34:fb:78:14:af:b9:8b:52:7e:93:f6:85:3c:
                    58:07:de:09:52:af:61:45:ca:15:4e:e1:3a:7b:c1:
                    dd:f8:87:1a:d6:c1:c3:5a:ea:44:75:dd:ee:77:e4:
                    ea:f9:d9:2f:8a:93:25:15:de:1c:31:bd:e6:0c:a7:
                    1e:a3:72:c4:75:c8:8f:5f:95:39:f5:ef:cc:86:f3:
                    15:8f:46:32:38:93:4d:0f:92:42:e2:1d:9a:04:ff:
                    3d:8d:d8:a1:12:29:4a:d7:8f:3a:1f:fb:58:1f:e7:
                    ad:06:78:d8:7b:1d:37:66:bd:63:30:3f:d7:ee:1d:
                    81:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BD:33:2A:22:94:CB:14:DC:CA:AF:7A:B4:E0:3C:0F:5D:98:2E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/89aa5d99-a10e-3961-a429-da0c9e3a590c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:78:35:b1:ad:7a:84:a4:95:19:51:d8:ca:81:76:39:75:9a:
         27:1c:3e:f6:ef:49:ab:d0:b0:af:1e:27:23:ea:7d:8f:e0:36:
         97:b5:2e:e4:13:42:66:89:90:0b:5d:5d:88:07:fb:6b:c9:fd:
         c2:fa:2a:2f:9d:3c:0d:05:a9:a9:ae:3c:8b:37:d5:f2:89:d7:
         fe:80:f5:c1:43:fa:aa:55:65:73:f5:93:24:47:13:ed:5b:a5:
         21:65:0e:60:91:4b:59:2e:d6:ff:90:b3:80:46:a9:e3:09:9c:
         29:35:11:8f:7d:32:2e:c0:f7:1e:3b:f2:1e:86:7f:2a:66:5f:
         7b:72:42:0e:23:df:04:63:a3:f2:e7:04:63:b6:bf:50:4a:11:
         38:d5:a4:34:32:fb:75:3b:d8:d0:9a:ca:87:33:89:10:8e:d3:
         8b:21:31:d9:0e:0f:3f:56:a9:e2:4c:13:ae:7a:3b:89:e4:4c:
         50:d2:c1:f9:d2:33:20:f3:6b:e3:6b:3b:20:6f:ec:bb:e8:4f:
         1a:c8:5f:c4:0d:33:07:67:58:63:f0:20:c1:68:06:07:be:11:
         e3:c8:c2:9d:06:46:d3:25:b1:81:04:cd:03:f8:6a:35:0d:56:
         a7:44:ff:27:70:b3:49:d7:4e:f2:05:77:d6:0d:4f:82:c4:7f:
         ac:b7:c7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:48 2024 by rpki-client on console-ams.rpki-client.org