Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ae5c53ed-67c6-3f81-acb6-2e3e23ed4ca1.roa
File:                     ae5c53ed-67c6-3f81-acb6-2e3e23ed4ca1.roa (raw, json)
Hash identifier:          CrWlfzRz8eAHdqHbpXufALqnS9JC2t6VN7atEpxCM9s=
Subject key identifier:   68:C9:CB:2D:BC:8B:AA:FF:E3:1E:C6:16:26:02:A7:B7:6F:7F:88:DE
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F43285847A30BFED70324A235DA8E6140
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ae5c53ed-67c6-3f81-acb6-2e3e23ed4ca1.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     6498
IP address blocks:        75.78.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:fe:d7:03:24:a2:35:da:8e:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=c2b7a403-f48b-4f03-977b-d99662a0fa55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b3:b0:16:87:9e:b5:10:55:46:90:c7:3d:d0:
                    a0:5e:59:48:47:68:58:f3:0f:b3:15:a2:0a:a2:fc:
                    7d:b3:90:d9:6e:e5:ca:80:64:32:bf:d1:15:1f:36:
                    21:69:fc:81:a2:03:0f:c6:18:bc:7d:ec:11:8c:9c:
                    e6:b3:ee:66:c6:99:b4:9f:bd:a6:42:63:ec:dc:7f:
                    66:f1:71:02:5b:e6:c0:ae:76:c8:8a:f1:c8:38:d1:
                    9d:7f:5e:83:03:87:0c:02:45:3f:eb:f6:0b:7d:76:
                    c7:f2:c0:42:97:24:db:ba:c9:d4:c8:bb:07:e3:e5:
                    d9:26:c2:97:00:d0:80:fe:2b:34:43:45:06:1d:6f:
                    9a:69:6b:40:19:2d:75:2b:a4:b1:0d:70:36:27:db:
                    a9:c8:6d:65:11:29:8b:b3:dc:8a:4d:41:ee:1e:ba:
                    c1:5d:43:be:d3:a3:a6:15:5a:60:aa:4c:68:37:96:
                    e4:b4:a7:da:55:8a:90:2b:a1:73:5e:df:ae:c4:bb:
                    d0:b5:2f:fd:d4:6e:f8:4e:25:db:a8:ef:10:f6:a3:
                    81:90:3c:44:5e:b9:91:32:ec:cb:bc:42:e2:e3:61:
                    8d:44:31:04:dc:e0:4b:3f:98:99:dd:5a:c7:55:0d:
                    1f:24:1d:90:58:ed:fc:2c:ba:04:7b:14:5f:06:8b:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C9:CB:2D:BC:8B:AA:FF:E3:1E:C6:16:26:02:A7:B7:6F:7F:88:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ae5c53ed-67c6-3f81-acb6-2e3e23ed4ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:9c:c0:97:4d:1c:53:bc:16:d9:66:9a:84:54:40:b7:af:38:
         85:7f:b7:3c:3e:ae:d4:0c:d5:69:17:9d:31:a0:49:1f:83:1c:
         63:bd:7a:ec:d4:7b:08:be:b4:8c:ac:97:3c:c4:d9:3a:8e:7c:
         44:cd:3f:a8:fd:eb:82:40:15:c1:de:cd:f7:0d:ee:ee:19:aa:
         94:3b:5e:d5:7d:ef:c3:4c:7d:7f:80:9f:9c:7c:42:cc:01:d3:
         b1:d7:d1:5d:b6:f4:ab:74:d3:e1:b5:3f:0c:00:d2:c8:e1:dd:
         b8:5f:b4:15:b5:48:0f:b7:23:9f:26:97:f7:03:85:8e:86:d4:
         5e:4c:52:f8:66:e6:fc:0f:1a:26:d4:18:4c:61:e1:5e:e8:96:
         85:c3:40:d0:50:21:a1:c8:73:29:b2:10:59:8c:fb:bb:44:e5:
         53:d2:8e:18:2e:6d:01:5a:bf:a2:c9:43:8e:3b:12:7e:9d:d7:
         11:58:2a:83:c3:9e:d1:33:52:fd:25:72:ff:af:2a:92:20:f4:
         cb:80:48:b9:b7:fc:ea:4e:ee:71:f5:e0:22:aa:78:c1:f3:94:
         4d:6a:51:a8:13:0c:0c:6f:36:dd:c8:66:b9:26:ba:ac:c4:55:
         3e:a5:ce:7d:f6:77:e0:07:2a:b6:82:e1:65:21:ef:e4:11:6b:
         ba:41:0c:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejC/7XAySiNdqOYUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk
NjkwMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk
YzJiN2E0MDMtZjQ4Yi00ZjAzLTk3N2ItZDk5NjYyYTBmYTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibOwFoeetRBVRpDHPdCgXllIR2hY8w+zFaIK
ovx9s5DZbuXKgGQyv9EVHzYhafyBogMPxhi8fewRjJzms+5mxpm0n72mQmPs3H9m
8XECW+bArnbIivHIONGdf16DA4cMAkU/6/YLfXbH8sBClyTbusnUyLsH4+XZJsKX
ANCA/is0Q0UGHW+aaWtAGS11K6SxDXA2J9upyG1lESmLs9yKTUHuHrrBXUO+06Om
FVpgqkxoN5bktKfaVYqQK6FzXt+uxLvQtS/91G74TiXbqO8Q9qOBkDxEXrmRMuzL
vELi42GNRDEE3OBLP5iZ3VrHVQ0fJB2QWO38LLoEexRfBovYiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjJyy28i6r/4x7GFiYCp7dvf4jeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1
MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvYWU1YzUzZWQtNjdjNi0z
ZjgxLWFjYjYtMmUzZTIzZWQ0Y2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky
ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx
ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy
NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS05pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2cwJdNHFO8FtlmmoRUQLevOIV/tzw+rtQM1WkXnTGgSR+DHGO9euzU
ewi+tIyslzzE2TqOfETNP6j964JAFcHezfcN7u4ZqpQ7XtV978NMfX+An5x8QswB
07HX0V229Kt00+G1PwwA0sjh3bhftBW1SA+3I58ml/cDhY6G1F5MUvhm5vwPGibU
GExh4V7oloXDQNBQIaHIcymyEFmM+7tE5VPSjhgubQFav6LJQ447En6d1xFYKoPD
ntEzUv0lcv+vKpIg9MuASLm3/OpO7nH14CKqeMHzlE1qUagTDAxvNt3IZrkmuqzE
VT6lzn32d+AHKraC4WUh7+QRa7pBDBk=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:33 2024 by rpki-client on console-ams.rpki-client.org