Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/9587dfc2-f2e7-3539-9635-6fc4edf7e212.roa
File:                     9587dfc2-f2e7-3539-9635-6fc4edf7e212.roa (raw, json)
Hash identifier:          ADe3KBlxrsmnKtS+xMG7xwU1s/IPLfoEY9EEohFtg98=
Subject key identifier:   A6:60:76:90:B4:51:EA:10:9C:A0:00:4D:40:EE:77:F5:09:DE:8C:EA
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584871C06F384BB64E377F512680
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/9587dfc2-f2e7-3539-9635-6fc4edf7e212.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     11429
IP address blocks:        75.78.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:6f:38:4b:b6:4e:37:7f:51:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=0497e8f5-6c7e-452b-ba55-ff2e69f24e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bb:9b:e5:b7:41:60:9b:af:9d:8d:10:68:c9:
                    3c:17:9f:a2:8d:2d:b2:04:bb:c2:e5:44:ed:f2:7d:
                    50:91:39:e2:aa:67:b9:a4:bd:ff:8a:dd:ab:d8:93:
                    ce:d7:23:56:3e:a0:f7:c5:1d:42:0e:ed:ce:fe:b6:
                    2c:38:79:08:c2:44:78:60:e1:c1:a6:84:50:96:a7:
                    bb:3a:25:a3:98:10:e7:70:1f:87:94:7a:ad:ce:08:
                    aa:ba:6c:57:87:6c:31:3f:5d:f6:1d:d0:e1:3e:8e:
                    85:0f:dc:6c:46:0d:6c:19:01:80:dc:63:65:db:bb:
                    ec:d4:1c:5f:79:ce:aa:e8:bd:f9:67:d9:bd:40:fd:
                    be:e1:dd:a3:8e:4f:58:9c:72:47:4d:a7:eb:a7:67:
                    8b:a0:db:9d:d1:b6:04:87:14:ff:db:b2:3c:e0:7f:
                    6b:e5:a3:9a:6e:93:f7:a0:b2:02:f6:c3:6d:1f:46:
                    0b:55:48:db:49:2e:e3:ab:16:12:95:e9:38:ef:76:
                    ce:4a:22:15:ec:07:43:65:35:44:b2:b5:c7:69:34:
                    a7:92:b4:58:7c:9d:a6:e3:21:ee:1f:35:b9:a3:cf:
                    3e:5b:8e:77:a9:96:12:24:3e:8c:f9:77:7c:82:18:
                    a1:86:8e:c4:8b:9a:3d:1f:f4:55:0a:3b:43:49:bb:
                    1d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:60:76:90:B4:51:EA:10:9C:A0:00:4D:40:EE:77:F5:09:DE:8C:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/9587dfc2-f2e7-3539-9635-6fc4edf7e212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:ae:8e:b5:d7:c2:57:95:bb:93:58:0f:16:83:d5:58:93:a1:
         86:f5:03:19:88:23:57:40:5b:e4:44:e8:54:19:f5:f7:0b:6b:
         6a:ff:b0:2e:c3:15:ca:b8:54:ad:a2:bf:c5:62:7a:90:64:97:
         fa:6f:bd:1b:a0:fc:b7:48:89:cd:31:4f:97:23:9d:4c:c7:94:
         a8:05:65:56:73:65:40:e6:af:69:b8:ac:83:c9:c9:1c:9a:99:
         37:3f:7a:3b:97:4a:fc:54:24:3b:4a:ce:ba:e1:12:a1:eb:8f:
         60:05:f6:ed:b3:15:96:ed:76:65:30:ba:34:90:2b:51:8e:44:
         4b:df:83:02:ea:a1:29:09:71:75:bf:ac:23:37:cf:37:5b:8d:
         73:ba:c9:ce:22:48:36:ac:39:e0:ac:c5:a4:4e:f1:17:7f:e9:
         e2:f6:8f:52:50:eb:84:c7:85:a4:37:f0:bb:8c:42:6c:8e:e4:
         92:57:36:6a:54:59:40:2a:1d:90:fb:50:ec:47:e9:60:2e:8b:
         c3:7a:d2:75:a0:6c:1e:4d:13:2d:ff:d1:5b:80:52:7d:bb:2d:
         61:41:dc:5a:ef:88:f3:a4:28:44:b7:a6:d2:d9:19:c0:42:b5:
         6a:84:33:33:b9:0d:ed:2b:77:a1:dd:6d:46:a0:b8:d3:fa:ca:
         47:02:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:01 2025 by rpki-client