Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/0f01aa53-42e4-357c-8fc5-7410e2aa335f.roa
File:                     0f01aa53-42e4-357c-8fc5-7410e2aa335f.roa (raw, json)
Hash identifier:          wuakrdHdQHBpGIeYJATJTn4J+v5uZagj8q62ssMh4Pc=
Subject key identifier:   94:78:04:9B:79:10:39:97:61:7B:13:4C:71:5B:F7:A2:13:4A:C4:4F
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584A1B5FFF54729DFE8D384653C0
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/0f01aa53-42e4-357c-8fc5-7410e2aa335f.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     3257
IP address blocks:        75.78.36.0/24 maxlen: 24
                          75.78.37.0/24 maxlen: 24
                          75.78.160.0/22 maxlen: 22
                          75.78.164.0/22 maxlen: 22
                          75.78.168.0/22 maxlen: 22
                          75.78.176.0/24 maxlen: 24
                          75.78.177.0/24 maxlen: 24
                          75.78.178.0/24 maxlen: 24
                          75.78.179.0/24 maxlen: 24
                          75.78.180.0/24 maxlen: 24
                          75.78.182.0/24 maxlen: 24
                          75.78.183.0/24 maxlen: 24
                          75.78.184.0/22 maxlen: 22
                          75.78.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:ff:54:72:9d:fe:8d:38:46:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=3578986c-faf0-468a-b6e1-198d5bfd3358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:53:da:99:47:20:a5:76:48:19:89:18:e1:36:
                    a6:56:68:80:50:09:be:56:98:96:2a:74:c9:53:ac:
                    5c:8e:f1:62:95:60:f3:6d:27:b8:68:82:e1:32:a8:
                    62:3b:f4:ce:2a:58:32:4c:f2:a3:8d:84:00:87:9e:
                    af:8c:11:91:33:3d:e5:25:c7:99:df:ea:ba:1c:4b:
                    60:71:33:8b:a5:e4:6b:36:2d:c6:52:2f:6c:85:a1:
                    74:9b:04:5f:0f:d8:a0:45:65:b8:4b:81:ba:5d:aa:
                    b3:3a:8f:6c:0d:a9:d2:24:8f:d1:84:11:1d:04:6a:
                    49:ba:18:4c:d4:ea:81:b2:24:e6:13:d7:f0:f6:d8:
                    79:41:d5:24:27:8e:09:52:84:54:70:a6:ee:64:85:
                    62:83:23:41:61:39:87:71:0a:75:cd:54:af:26:bb:
                    ed:fb:db:49:21:2b:31:20:61:e4:19:d7:7a:c5:f3:
                    25:dd:df:61:61:75:6f:c6:86:56:04:ee:63:c4:d3:
                    f4:4c:e5:c9:8c:39:36:74:8c:54:c9:66:9f:bd:9a:
                    c4:f5:ee:f6:b5:50:28:1c:98:2b:7e:fa:e9:d8:78:
                    f5:4a:18:86:30:27:3d:73:fc:3f:08:16:ed:20:d5:
                    59:05:c0:f8:82:fc:c4:69:ef:e4:1d:55:64:7f:c7:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:78:04:9B:79:10:39:97:61:7B:13:4C:71:5B:F7:A2:13:4A:C4:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/0f01aa53-42e4-357c-8fc5-7410e2aa335f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.36.0/23
                  75.78.160.0-75.78.171.255
                  75.78.176.0-75.78.180.255
                  75.78.182.0-75.78.187.255
                  75.78.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:39:50:76:2d:fb:28:2e:7d:35:60:1f:f9:9b:7b:f4:0c:55:
         c8:db:e6:b7:81:f4:bd:e8:69:28:f2:d5:85:4a:5b:80:04:40:
         c7:36:53:87:9a:9f:9e:bf:7d:c4:1c:45:11:27:dc:04:fa:c3:
         87:c0:d5:1f:9e:13:cd:f1:b9:3a:5c:4f:21:9a:70:44:43:b4:
         d4:75:99:d5:b3:92:25:d0:f1:e7:17:1a:11:9a:8a:ee:3f:af:
         75:20:33:c5:62:43:c1:2a:21:5f:b1:5c:fa:81:55:25:fe:51:
         79:d0:0c:f4:8c:ee:e5:29:63:42:89:80:20:c9:d1:7e:92:95:
         3b:59:24:28:1d:de:67:5c:49:8b:b3:74:3a:71:a5:1f:b9:c8:
         fa:4c:1a:34:b0:ab:2e:98:d6:00:f1:26:91:bf:bc:f1:7e:b6:
         eb:ef:88:8c:a7:b2:b0:b8:ef:55:90:66:55:3f:a4:7a:8d:8c:
         7b:4d:2b:93:4d:ee:c6:1e:0c:1b:a5:1a:f9:56:63:fa:b7:b2:
         98:77:36:52:77:cf:4e:43:ad:88:fa:ae:3a:94:a8:06:c8:a0:
         5d:f0:05:d8:91:8f:ae:7d:30:26:3c:6b:b5:9d:aa:9b:e2:6d:
         24:6b:af:9a:d9:f7:01:cf:aa:3c:03:aa:57:81:91:57:14:8e:
         b6:f1:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:47:17 2025 by rpki-client