Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/036f7573-d6fb-3151-90f5-5a91155a0648.roa
File:                     036f7573-d6fb-3151-90f5-5a91155a0648.roa (raw, json)
Hash identifier:          RXbVoaxj9aHkGmyr/a/GBhfD45eG9vh3JY/u0STkLrA=
Subject key identifier:   CE:D5:14:61:94:51:76:D4:E6:E3:EF:21:8C:02:4C:8C:F9:A2:AB:14
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584AB650EB74080038F2895B3B00
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/036f7573-d6fb-3151-90f5-5a91155a0648.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     3356
IP address blocks:        75.78.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:eb:74:08:00:38:f2:89:5b:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=ca68ce89-e05c-482a-af1d-4f13e72ad070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c7:9c:b0:f4:d6:a2:aa:f5:63:28:b8:0d:2d:
                    00:48:dd:60:ba:c9:a9:61:1a:69:47:a3:c4:9f:d1:
                    f0:09:b5:27:db:98:3d:4e:d9:8e:1a:f1:13:34:a7:
                    8a:2f:58:31:c6:b0:2c:c5:98:44:11:a4:20:85:7f:
                    a5:8f:a9:9a:1a:03:d2:66:a1:64:d7:f1:54:bf:aa:
                    e7:3f:00:76:db:fe:33:73:14:5e:f5:ce:82:3e:f2:
                    40:14:11:04:3e:2a:5b:4c:1e:69:fe:52:91:9a:70:
                    8d:90:83:e4:2b:b2:31:a1:90:47:87:1f:84:a7:ce:
                    d5:5f:4e:29:bc:c6:e0:e5:93:ae:95:66:ad:58:e3:
                    75:61:74:18:96:3b:82:7d:0e:a3:d0:a1:35:04:c1:
                    d8:6a:bd:80:1f:c1:f3:6e:65:c9:24:8a:cd:4b:17:
                    7d:17:1c:c6:0b:80:7a:6b:49:3d:19:25:d5:24:3a:
                    97:86:ad:4c:56:d1:fc:8f:13:89:3f:26:f0:d6:a7:
                    bb:59:ec:51:24:ef:d3:8e:a5:7c:68:b0:9b:9c:a2:
                    78:d3:a8:f6:83:ce:08:f7:af:ba:f1:d4:83:06:73:
                    c5:e7:b4:9c:b5:3e:aa:2d:33:87:e9:07:5f:dd:b6:
                    4a:0a:ff:d5:b3:a9:ce:6e:55:a8:1e:38:f9:38:f6:
                    49:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D5:14:61:94:51:76:D4:E6:E3:EF:21:8C:02:4C:8C:F9:A2:AB:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/036f7573-d6fb-3151-90f5-5a91155a0648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8e:8b:5c:d7:12:06:fd:fb:1c:d9:c7:4d:6d:5a:2c:12:4e:
         ac:c6:dd:ad:7a:f3:b0:f9:47:30:70:2e:51:74:29:ba:0f:c1:
         46:e9:3b:d8:b2:84:5a:f6:da:37:d9:9b:6c:f6:62:46:c8:a0:
         65:3a:4b:7e:b6:3d:4a:e5:b6:be:04:81:c8:01:56:df:82:f2:
         9f:4f:bd:83:35:57:8f:00:2d:98:b5:ef:8f:8f:a5:f2:38:bf:
         a8:e4:3a:84:9e:c8:91:9f:67:e8:32:ae:49:8b:6a:95:f8:1e:
         f9:b2:39:91:ac:9d:6b:06:67:7d:b2:3e:bc:16:41:ba:73:25:
         79:20:e0:4c:7c:77:0c:3b:b6:cb:96:e3:7a:4e:27:13:9d:a5:
         e2:d3:ad:c0:88:55:c3:25:09:4e:53:24:80:9c:3d:33:6a:79:
         4c:51:5f:c6:10:2c:e4:11:01:d5:67:95:aa:b3:f5:98:81:97:
         08:f2:a3:50:db:12:b6:a0:d8:90:8a:bc:fe:39:9c:34:ce:ac:
         3e:19:f6:27:10:82:2b:6e:e8:d3:b0:cb:2e:82:2e:47:91:d8:
         e8:24:64:9a:6f:86:b7:ed:e8:51:c4:59:72:8b:60:ef:94:10:
         f1:a1:86:68:e4:1f:66:62:91:dc:66:dd:c6:3c:ae:cd:8b:91:
         1a:54:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:41:42 2025 by rpki-client