Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/67b53564-eaea-3ec3-bc7d-cdbb9ff95413.roa
File:                     67b53564-eaea-3ec3-bc7d-cdbb9ff95413.roa (raw, json)
Hash identifier:          480LvC6JVykuMwooeYUeZxI7yt+kpGt64C7PX2vh7Io=
Subject key identifier:   C4:31:DB:9E:DC:6A:8C:BA:E3:02:98:58:F6:E7:47:C4:75:55:C6:74
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584A0D6A85EBD13F5AB6DE904DC0
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/67b53564-eaea-3ec3-bc7d-cdbb9ff95413.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     3356
IP address blocks:        75.78.212.0/22 maxlen: 24
                          75.78.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:85:eb:d1:3f:5a:b6:de:90:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=fa35eb92-0840-456b-8bf4-497b6c214ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:62:da:54:01:09:2c:08:a8:a1:f3:f7:f7:25:
                    a5:fc:a9:a6:90:5d:96:2b:68:db:f8:23:94:24:26:
                    be:ae:63:8e:2c:94:78:91:07:da:5a:57:cf:91:c4:
                    6c:ce:2c:fc:5f:4f:0f:e6:08:6b:1f:6a:dd:04:5d:
                    1b:68:9d:36:13:44:6a:94:17:73:f8:37:9a:39:5e:
                    70:56:4a:45:74:64:6c:db:1e:f7:3a:b1:4e:ef:63:
                    d1:fa:82:26:4e:23:ff:dc:b7:60:7f:3a:c3:d5:31:
                    40:0c:11:af:35:ea:61:ad:9e:55:6b:ea:0a:ae:cb:
                    bb:e4:d6:ca:43:1a:d6:b2:02:ea:12:0b:9c:5d:95:
                    18:ac:68:f7:be:2f:0a:b7:f5:cd:f6:2a:d3:cb:67:
                    19:e1:2b:8a:dd:65:7b:d1:a9:25:1e:73:e1:45:b4:
                    2c:0f:21:18:fe:ce:cb:a2:b8:c7:f9:36:6b:5a:c6:
                    b8:07:d3:d0:75:17:d3:ae:7f:11:d7:6f:ab:12:df:
                    00:1a:d5:2e:96:f7:df:a9:7a:5a:c4:9b:e8:8f:16:
                    cb:11:29:84:1e:9e:4b:d9:9e:82:89:e5:28:eb:12:
                    74:af:e7:f3:83:64:84:4f:de:3a:5b:3f:62:3a:0d:
                    77:42:be:bc:ff:07:11:80:f3:e8:ae:cd:23:5c:53:
                    6b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:31:DB:9E:DC:6A:8C:BA:E3:02:98:58:F6:E7:47:C4:75:55:C6:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/67b53564-eaea-3ec3-bc7d-cdbb9ff95413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.212.0-75.78.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:f6:7e:07:4f:12:de:2d:3d:4d:84:70:e7:2e:92:7b:6f:1a:
         32:8f:2c:5d:0f:3e:3d:f1:1f:57:3e:39:99:6c:8f:20:a2:37:
         4c:f4:b1:c3:d3:65:d7:d9:9e:38:38:67:7c:64:78:b0:9a:75:
         f2:a0:35:eb:6a:86:89:4e:26:c3:fa:2e:f1:0e:21:43:e9:4d:
         ca:9a:13:25:e4:23:94:2e:75:40:fb:c1:c3:1d:d7:f2:e5:5f:
         e8:53:7a:2d:73:60:17:56:61:3a:dd:bb:5e:bd:20:7e:1d:82:
         58:19:b3:f3:3c:40:69:17:c8:d4:56:01:68:76:fe:37:4f:b5:
         84:85:f7:bb:57:bb:c3:ad:c2:9c:81:d7:3a:55:64:17:62:ac:
         42:12:3f:8d:f1:cc:77:53:9d:64:30:82:58:0b:6a:32:fa:49:
         1c:e8:a9:3c:cc:97:ba:6b:f9:5d:4f:b4:46:da:62:92:b1:d8:
         32:5c:c6:c2:a3:05:4e:ee:1a:0e:33:d5:9b:2a:70:83:a9:8c:
         a6:27:c6:0b:09:e8:bc:e6:05:4b:90:06:e3:44:c3:42:93:62:
         ac:0f:9b:45:c9:e3:54:d5:80:8b:b4:a4:c2:d2:fe:6e:c4:95:
         30:92:b3:39:8c:72:65:c3:98:78:f9:c8:6a:94:49:21:69:99:
         e0:01:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:42:56 2025 by rpki-client