Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ae5c53ed-67c6-3f81-acb6-2e3e23ed4ca1.roa
File:                     ae5c53ed-67c6-3f81-acb6-2e3e23ed4ca1.roa (raw, json)
Hash identifier:          AtD9QIxMj4mx8DBHvv945hj3dsawhRv+C9+tI1SMnrY=
Subject key identifier:   BA:93:AA:37:B7:49:F2:98:AE:E9:11:E7:B3:0F:92:72:C4:BB:A1:36
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584961B99C967315A110979D5640
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ae5c53ed-67c6-3f81-acb6-2e3e23ed4ca1.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     6498
IP address blocks:        75.78.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:9c:96:73:15:a1:10:97:9d:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=ac53a108-ffd7-48db-8922-0c5a87ab9aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:38:d1:78:34:ad:ee:99:58:96:0d:b5:49:9a:
                    cc:5c:fb:8f:e4:93:fc:8c:70:33:fa:bd:a5:f3:21:
                    10:fe:26:6b:ee:a0:67:50:b7:4d:28:6e:af:e8:6d:
                    8a:a2:8c:5e:0e:aa:86:5f:37:b1:65:f5:6c:cb:bf:
                    ec:89:73:f6:0c:aa:89:9a:16:0f:ae:30:7e:6a:91:
                    d8:35:3e:fb:cf:2d:2e:81:9d:16:56:d3:99:16:83:
                    a8:f3:f8:4f:6d:df:8d:7c:6c:5c:4f:f4:6a:fa:08:
                    70:af:c0:bb:89:7c:df:e0:c0:60:ce:05:bd:f5:92:
                    c7:50:20:9a:83:b7:f1:f4:b8:a9:e0:46:a9:65:da:
                    ed:65:82:b0:ec:3a:97:ee:09:6f:99:a9:34:e2:86:
                    bf:a2:30:f9:e0:9f:29:54:23:58:f2:13:c3:78:4e:
                    b4:95:90:51:84:1d:0a:6e:87:01:4b:cf:11:a9:43:
                    e1:85:6b:b1:02:8c:18:f1:1e:9c:40:0b:6b:e8:58:
                    07:75:66:da:ef:4c:fe:d8:48:1c:3c:32:68:d8:7d:
                    52:88:8d:b1:1f:8d:3e:8b:b8:8b:1f:1e:d2:62:c0:
                    fc:ea:e5:77:30:28:f7:2d:5a:c4:4f:f3:b6:6e:b3:
                    8e:9c:a9:ff:f0:5f:79:31:bc:5c:09:1f:07:9e:1c:
                    2f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:93:AA:37:B7:49:F2:98:AE:E9:11:E7:B3:0F:92:72:C4:BB:A1:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ae5c53ed-67c6-3f81-acb6-2e3e23ed4ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ed:62:79:6a:87:f8:1a:e8:b9:8f:76:8b:43:7b:67:b5:ec:
         38:4f:49:91:2f:6c:6f:b1:5e:50:de:5e:77:01:4d:72:54:81:
         3d:3d:5c:7a:87:fa:f9:54:87:eb:56:95:52:3e:aa:e5:1b:a7:
         42:1d:7a:3b:e0:41:cc:e6:f7:80:2a:08:31:5e:20:d8:09:e3:
         1c:70:ee:93:d8:14:ef:4f:63:76:cd:15:9f:3d:d8:eb:16:51:
         12:77:38:78:7e:43:41:0b:c0:31:0d:bd:b8:0a:23:5d:d9:51:
         e2:88:52:76:c4:e3:3f:b2:0a:b2:99:4c:83:28:bd:6d:3e:3d:
         ce:80:c2:e0:a8:e7:cf:c4:90:f9:86:bf:39:7c:63:30:00:cd:
         e2:af:a8:04:61:09:0f:8a:d9:53:52:37:c5:29:2e:86:f7:35:
         4f:5e:b3:b4:6b:1e:14:43:11:49:5f:f7:ef:62:0c:f6:32:06:
         4f:a9:7b:1d:93:06:74:23:bd:a1:d5:90:c0:38:6d:00:3c:1c:
         54:06:94:8a:59:3d:19:c5:e2:90:1d:06:f4:5c:b3:88:d8:01:
         45:72:e8:fc:8c:59:8a:3f:06:45:ab:f5:34:c1:cf:f7:e1:50:
         87:f2:69:6b:0d:2e:46:84:ba:95:73:0f:d5:4b:aa:be:6b:26:
         4a:0f:f4:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZyWcxWhEJedVkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk
NjkwMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk
YWM1M2ExMDgtZmZkNy00OGRiLTg5MjItMGM1YTg3YWI5YWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTjReDSt7plYlg21SZrMXPuP5JP8jHAz+r2l
8yEQ/iZr7qBnULdNKG6v6G2KooxeDqqGXzexZfVsy7/siXP2DKqJmhYPrjB+apHY
NT77zy0ugZ0WVtOZFoOo8/hPbd+NfGxcT/Rq+ghwr8C7iXzf4MBgzgW99ZLHUCCa
g7fx9Lip4EapZdrtZYKw7DqX7glvmak04oa/ojD54J8pVCNY8hPDeE60lZBRhB0K
bocBS88RqUPhhWuxAowY8R6cQAtr6FgHdWba70z+2EgcPDJo2H1SiI2xH40+i7iL
Hx7SYsD86uV3MCj3LVrET/O2brOOnKn/8F95MbxcCR8Hnhwv5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqTqje3SfKYrukR57MPknLEu6E2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1
MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvYWU1YzUzZWQtNjdjNi0z
ZjgxLWFjYjYtMmUzZTIzZWQ0Y2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky
ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx
ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy
NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS05pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE7tYnlqh/ga6LmPdotDe2e17DhPSZEvbG+xXlDeXncBTXJUgT09XHqH
+vlUh+tWlVI+quUbp0IdejvgQczm94AqCDFeINgJ4xxw7pPYFO9PY3bNFZ892OsW
URJ3OHh+Q0ELwDENvbgKI13ZUeKIUnbE4z+yCrKZTIMovW0+Pc6AwuCo58/EkPmG
vzl8YzAAzeKvqARhCQ+K2VNSN8UpLob3NU9es7RrHhRDEUlf9+9iDPYyBk+pex2T
BnQjvaHVkMA4bQA8HFQGlIpZPRnF4pAdBvRcs4jYAUVy6PyMWYo/BkWr9TTBz/fh
UIfyaWsNLkaEupVzD9VLqr5rJkoP9MA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:47:16 2025 by rpki-client