Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/34296b70-7f5f-3845-8c9c-6cf2b9cb1e22.roa
File:                     34296b70-7f5f-3845-8c9c-6cf2b9cb1e22.roa (raw, json)
Hash identifier:          EUmpFyp196apD5IBQl4fdFDlW8Tjn0Gst+5y1DrhJA8=
Subject key identifier:   90:A9:99:82:90:68:A1:A9:13:2B:A4:76:4E:60:55:13:E5:6B:C5:AC
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584BA932513CDC135254B7D95140
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/34296b70-7f5f-3845-8c9c-6cf2b9cb1e22.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     6498
IP address blocks:        75.78.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:51:3c:dc:13:52:54:b7:d9:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=83f82dc9-bbd5-450c-b7a9-b39455ab1245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7c:52:d9:98:2d:09:ae:26:b9:94:65:db:d3:
                    5f:ef:6d:f5:81:e7:65:d8:bc:eb:ea:ef:16:77:a3:
                    84:2e:c3:bb:84:76:17:3e:ea:37:35:35:70:d3:c1:
                    05:b9:ee:87:56:1e:8b:b1:1e:98:de:77:1c:10:e3:
                    40:0a:a4:54:7b:89:5d:c5:a4:98:06:5d:fb:e0:ea:
                    65:8f:c4:74:f8:b1:e7:92:16:95:cf:59:8d:62:01:
                    f0:e3:ed:8c:96:cf:da:71:94:33:c8:6e:06:5f:6c:
                    82:24:cf:96:69:32:24:c8:e1:7c:2c:ad:1a:86:13:
                    76:3b:a9:5d:fb:fa:65:f5:65:b8:4a:09:01:ea:67:
                    78:d0:df:7a:f3:59:f5:46:e0:2b:a7:ee:dc:cc:68:
                    8f:4c:9e:3c:02:d7:ae:af:b2:6f:f0:38:11:68:1a:
                    8c:eb:36:c0:e9:95:7c:4b:89:da:7d:4f:a3:5c:a6:
                    88:26:de:e6:de:fa:64:d9:29:2c:3c:1b:3a:85:95:
                    7c:7d:9c:16:91:6a:60:12:ca:00:0d:1d:06:75:2e:
                    94:61:14:00:3e:09:1c:76:7c:0f:61:6b:1f:44:56:
                    19:93:9b:fc:66:89:69:84:66:bd:59:3e:58:8b:8c:
                    ed:c9:46:40:35:31:e7:00:c7:48:60:e5:01:eb:75:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A9:99:82:90:68:A1:A9:13:2B:A4:76:4E:60:55:13:E5:6B:C5:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/34296b70-7f5f-3845-8c9c-6cf2b9cb1e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:3b:93:4c:89:e2:37:8b:b2:a5:f2:35:64:85:39:43:48:
         e3:4b:59:a5:42:36:0c:59:30:8e:f4:bc:77:6c:ab:4c:cc:01:
         e1:d8:35:98:03:f4:04:9c:6c:6e:12:d7:75:27:ea:d1:c8:78:
         4a:a7:97:64:78:49:f2:f7:e5:43:0e:c9:14:bf:37:71:a3:29:
         4c:f2:48:2c:63:98:c1:c3:25:0f:3c:0f:22:32:8e:6c:b6:99:
         c9:6e:99:b2:e5:29:be:d9:b8:dd:77:33:58:2c:99:db:bf:ff:
         e6:0f:d1:6d:98:6d:3d:14:7b:3c:99:4f:7f:b1:d7:ad:2c:f4:
         ad:e2:01:73:8a:0e:63:85:82:45:bf:be:a0:ab:79:65:cb:ea:
         ce:5c:45:46:6f:ce:3c:1f:d3:b5:b5:33:7b:1d:cc:4e:15:a7:
         07:1a:2c:bd:5e:cc:9a:4d:10:68:30:cc:eb:d4:09:71:bf:28:
         6a:ba:5f:b9:aa:c7:aa:1d:36:44:ec:70:09:22:cd:66:e7:ca:
         19:6e:57:3c:41:83:ef:84:32:e9:f3:4a:89:98:2c:f5:ee:89:
         31:64:70:f7:c4:46:2b:8d:9f:dc:30:da:dc:c7:3c:8a:b3:ac:
         21:78:82:72:3b:0d:55:c4:b7:28:44:b5:9c:83:cf:55:fb:97:
         f9:e8:9a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:39:30 2025 by rpki-client