Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/8e1c16aa-6d58-3784-978f-aad1b7b078d1.roa
File:                     8e1c16aa-6d58-3784-978f-aad1b7b078d1.roa (raw, json)
Hash identifier:          hezohAxgzzpS7oHdVQLR5HWjwQBK6XNUwKxCZStX2+o=
Subject key identifier:   86:6A:89:A4:14:A4:FA:BC:8B:7D:BD:C4:81:B8:E9:DA:53:B2:6C:87
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584913AC1C35AA08DE78B60DD940
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/8e1c16aa-6d58-3784-978f-aad1b7b078d1.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     6498
IP address blocks:        75.78.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:1c:35:aa:08:de:78:b6:0d:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=5dcdcfa9-6c53-40fa-b393-46fe6eb9244d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:89:bb:d1:07:bc:d6:1d:c4:24:f1:fc:58:55:
                    28:05:58:27:d5:83:9f:ea:b0:88:cd:0b:e4:11:97:
                    99:4f:dd:82:00:85:dd:a0:64:1a:4a:42:4a:76:82:
                    1b:0a:c1:6a:2f:46:cf:19:9a:cb:d1:b0:23:9a:8f:
                    5d:bb:1c:9f:1d:c1:bc:0f:96:b5:67:99:42:75:51:
                    cc:18:e5:78:79:ab:92:05:86:47:07:38:2b:21:4f:
                    8f:ba:4a:c9:30:22:5c:8c:5f:b5:25:8f:bc:38:36:
                    90:2d:c8:0f:8e:72:ed:6c:73:87:c9:55:4b:6a:e1:
                    58:49:dd:e7:3a:0c:10:6d:7d:12:6d:c8:60:5e:4a:
                    ed:86:d3:6e:58:92:69:7e:f3:23:74:74:60:a7:2c:
                    ce:64:f7:d6:86:24:73:3a:76:3f:da:b7:62:9b:33:
                    02:17:b1:70:76:15:50:7e:98:5a:25:b8:6e:dc:63:
                    54:fe:6e:2a:6f:d5:e0:f3:72:0b:d0:fc:b7:5d:85:
                    64:c0:1c:21:bf:f7:1d:4c:59:e7:e0:cd:f0:74:19:
                    32:87:e8:9f:5c:45:b6:32:5e:c4:46:de:e0:7f:69:
                    2b:6b:20:65:24:27:27:5c:17:69:60:02:91:79:b1:
                    58:3d:6a:10:3d:8e:c0:c7:ff:5f:d8:7e:8f:67:cb:
                    aa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6A:89:A4:14:A4:FA:BC:8B:7D:BD:C4:81:B8:E9:DA:53:B2:6C:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/8e1c16aa-6d58-3784-978f-aad1b7b078d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:2c:09:7f:15:11:4b:4b:54:18:39:0b:c7:ad:21:c5:86:88:
         9c:3c:ea:20:0f:5f:06:aa:ce:85:eb:fb:01:ee:02:34:54:b7:
         65:07:2d:7d:58:6d:1a:4a:93:4b:2d:2d:3a:ac:ca:95:96:67:
         be:f2:ab:c8:df:d3:ed:5e:94:20:3a:ed:68:4a:9a:be:89:96:
         10:51:41:79:bf:47:41:08:9a:7a:ef:d2:fb:c3:ee:3f:93:d5:
         79:63:00:84:56:ab:a6:36:9e:1d:a8:1f:b1:2e:bf:c7:2f:b9:
         07:5c:7e:a9:53:2a:47:6d:a5:78:fe:19:35:ae:0a:ad:f3:0d:
         e1:26:84:a9:33:ce:4b:fd:26:a3:75:d8:f0:58:84:b4:65:e4:
         e1:9b:c7:b8:08:a8:be:7e:bf:d1:8f:c8:0e:bc:d0:a4:1a:ac:
         98:14:79:38:e8:80:a6:7c:81:2c:d2:83:fb:1f:53:07:6a:93:
         ab:92:68:a9:d8:57:cb:f1:5c:05:84:9f:1f:ad:97:2c:ff:8a:
         8e:e9:50:c0:9d:f0:eb:5d:0a:b8:0a:8a:3a:a8:ec:02:82:f1:
         95:06:ca:59:42:e8:be:71:66:a2:b7:d6:3c:0f:60:14:c5:72:
         b4:53:8a:be:af:e2:db:b7:7a:fd:6b:dc:1b:67:58:fd:c4:44:
         46:2c:95:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:19:00 2025 by rpki-client