Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/dee7e624-d51f-3ae3-a3f9-2a8354988969.roa
File:                     dee7e624-d51f-3ae3-a3f9-2a8354988969.roa (raw, json)
Hash identifier:          qqHgxcMO0menkUj/uk51RN8s3xepd+dMsXbPYhg48RA=
Subject key identifier:   16:21:45:9C:59:0B:28:83:C8:16:96:38:7F:B5:83:9E:EF:4F:A5:D6
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F43285845AF536A2B442C157759236680
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/dee7e624-d51f-3ae3-a3f9-2a8354988969.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     3549
IP address blocks:        75.78.212.0/22 maxlen: 24
                          75.78.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:6a:2b:44:2c:15:77:59:23:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=be79d01e-c5ff-4b75-8ca0-d0220bff671f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:e6:51:9a:3e:22:d5:37:ca:95:b8:34:14:
                    d8:43:47:34:b8:ed:2c:4d:f3:4d:6f:7b:11:32:37:
                    79:a2:a1:f4:97:b5:1b:a1:24:73:1e:c0:7e:71:99:
                    f4:60:38:61:a3:f2:b0:5c:ed:e0:01:ee:57:ad:bc:
                    7a:3c:36:c8:82:84:cc:f8:0a:82:3b:02:3c:30:61:
                    cf:0b:21:82:5e:69:b1:df:43:ce:b4:4d:b9:da:55:
                    4a:92:be:f0:84:dd:e6:b3:2f:ab:d0:27:23:4e:d4:
                    10:06:10:14:0f:c4:79:ca:8c:5a:88:24:94:a8:86:
                    31:12:84:63:85:02:13:70:ff:8b:6b:3a:c0:b8:61:
                    2c:23:58:89:d1:16:be:db:02:49:06:4f:fb:a8:13:
                    21:2b:1d:27:e6:a2:22:9b:77:aa:fa:65:dd:38:da:
                    6a:fd:b5:32:a6:71:79:61:98:e3:53:2c:54:9f:19:
                    b9:bf:6e:70:cf:04:d9:dc:c5:2f:48:4a:6e:69:6b:
                    46:21:10:77:6f:e9:c4:5f:23:2b:f4:ad:71:64:33:
                    fb:1e:d4:7c:73:5f:91:23:d1:b1:c1:5b:a0:69:52:
                    e4:bd:19:eb:08:21:78:1d:40:92:5d:20:d4:fd:c6:
                    e0:0c:00:9f:0a:8f:49:ed:8e:65:14:49:bb:4b:75:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:21:45:9C:59:0B:28:83:C8:16:96:38:7F:B5:83:9E:EF:4F:A5:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/dee7e624-d51f-3ae3-a3f9-2a8354988969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.212.0-75.78.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:44:52:a0:62:b6:8d:fd:e8:7c:4f:1d:89:14:3b:03:b1:61:
         1c:75:c7:c7:47:63:b8:bc:bb:f2:fe:00:8f:4d:c2:06:1f:ba:
         29:74:f3:4b:ef:e9:37:95:f0:e3:32:3c:2d:69:54:2b:bd:b9:
         ba:58:e8:07:cc:8c:73:7c:b1:b7:41:7f:64:29:bd:da:aa:ec:
         ac:b3:ef:a3:51:0a:dd:9a:b5:b6:50:65:d6:0e:ca:bf:19:1d:
         19:6d:04:8b:00:9a:b7:75:3f:f9:be:be:e9:7f:10:20:c8:b4:
         b4:dd:b2:ff:5f:2a:05:4c:3a:7e:d4:0f:8e:a8:12:41:71:5e:
         f2:5e:6a:26:5c:98:89:74:3d:49:a5:2c:6a:ac:c8:a6:6d:b1:
         81:e0:66:d5:18:4e:1a:2e:cc:4c:91:9f:9f:63:45:25:72:c2:
         1d:c3:f1:d6:f9:b7:8f:c2:9b:70:13:98:ad:ce:c7:75:84:1c:
         f6:23:dd:22:21:e8:0f:38:6d:ca:e0:81:0c:13:3a:72:b3:06:
         a5:79:f3:86:e2:dd:b8:9b:9b:21:5e:0f:1e:5c:bb:31:30:85:
         70:1f:05:48:65:fb:2e:9d:2f:f5:e4:31:7f:5b:e6:98:46:96:
         61:79:a6:5c:2d:2b:44:21:05:49:6b:41:75:b2:61:9b:97:fd:
         f9:0f:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:24 2024 by rpki-client on console-fra.rpki-client.org