Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/e1ae2cd3-9c16-37b8-823c-99383c09356c.roa
File:                     e1ae2cd3-9c16-37b8-823c-99383c09356c.roa (raw, json)
Hash identifier:          UxAVtDRitJQ337bdxowzSdy8RNPsNnpbW8RFd9JBzBA=
Subject key identifier:   AB:70:1E:DF:01:94:46:B7:DA:F1:21:0D:28:25:98:77:36:27:AC:A8
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584961B99DC097F18C9FDBD1F4C0
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/e1ae2cd3-9c16-37b8-823c-99383c09356c.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     6498
IP address blocks:        75.78.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:9d:c0:97:f1:8c:9f:db:d1:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=45c1a756-e062-41e4-a814-2cdc45b3000c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8d:da:19:6b:ec:e3:dc:0f:25:b3:b8:6d:6b:
                    78:20:f0:4c:3b:b7:88:eb:4a:f3:77:ac:92:7b:6c:
                    61:c4:df:ab:8b:c0:f4:24:c5:25:2f:90:8e:b6:79:
                    74:8b:37:e9:1c:b3:80:1f:5e:a3:d2:36:af:fe:bc:
                    e0:c2:06:10:eb:81:a7:7c:00:59:b4:51:c7:45:81:
                    6d:be:a3:be:cf:3a:0d:d7:91:dc:4d:22:45:65:50:
                    d1:1f:9b:e9:95:f0:91:db:03:9b:db:52:1c:f7:22:
                    e1:52:18:dc:0a:89:c6:0e:90:26:d7:6f:10:ab:0e:
                    e3:41:30:71:8d:0f:3c:a8:6f:4c:f4:36:f4:4a:01:
                    83:bd:9b:55:cc:8c:87:34:a8:18:00:c7:4b:79:9a:
                    b0:ed:47:e1:61:b1:c4:16:2b:9f:c3:b2:a4:ef:d0:
                    25:6b:c2:6d:f5:a9:6a:8c:94:7b:8d:33:18:a6:bb:
                    30:3c:b5:77:27:75:0b:d7:af:e4:0f:f4:c3:ce:b0:
                    00:c9:8e:25:c9:a6:96:cd:50:2e:aa:b7:e6:b6:84:
                    4e:0e:77:71:e8:10:e9:8a:61:7a:92:60:77:c8:64:
                    e0:96:3f:b7:ba:29:be:27:d0:f8:9d:83:f7:84:2d:
                    da:59:bd:b3:33:dd:61:ed:90:86:c5:94:36:6a:06:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:70:1E:DF:01:94:46:B7:DA:F1:21:0D:28:25:98:77:36:27:AC:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/e1ae2cd3-9c16-37b8-823c-99383c09356c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:37:c8:0c:a2:9e:d7:25:cb:f1:07:42:c0:9e:f5:bc:b3:59:
         6e:70:c5:99:aa:c0:a1:10:bb:f6:01:23:bc:05:76:ac:21:d3:
         83:a1:57:96:81:09:8b:78:89:40:48:29:5e:2a:22:f7:8d:9e:
         0d:f5:30:19:aa:42:e5:f5:52:6f:aa:c3:7e:66:1f:4e:be:e8:
         a1:74:33:6a:b3:e2:ab:ea:36:0b:eb:86:ce:0d:77:53:ce:b4:
         2c:a2:67:d8:cb:22:dc:b7:bd:12:b3:d6:ac:b6:f0:91:b8:e3:
         b3:aa:24:4f:73:43:24:6f:81:6b:39:34:80:3c:7d:0e:cf:9e:
         b4:a3:86:88:dc:fe:27:8a:2b:65:87:54:b6:b0:5b:28:93:90:
         a2:36:6f:05:69:90:0b:d5:96:14:87:7f:3b:83:a4:9e:9a:a9:
         a6:fa:49:11:77:09:b2:10:eb:41:f8:93:46:ff:22:b6:3f:6c:
         25:17:b6:4b:e6:85:a0:da:58:8a:27:55:10:d7:c9:c9:77:e6:
         50:52:ca:01:69:b9:d0:fd:b2:50:a0:9b:dc:94:a5:46:c5:2d:
         6b:af:72:cd:6c:8d:90:e0:8d:9c:4b:10:9e:83:4c:12:ee:3a:
         d0:44:93:c8:4c:ba:1a:0f:e4:cf:36:5a:f2:07:72:c7:9b:3f:
         56:32:33:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:08:01 2025 by rpki-client