Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/8a971389-f19d-357a-84b9-ef06af64b23a.roa
File:                     8a971389-f19d-357a-84b9-ef06af64b23a.roa (raw, json)
Hash identifier:          wnLHGjUtm4YHqJN13nbRGd/FmvMhZCp64UnRM94HREY=
Subject key identifier:   95:56:C2:3F:60:88:C0:31:5D:79:59:E6:33:33:5A:48:68:65:30:D2
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584BA0D2440D1485215B81AE3480
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/8a971389-f19d-357a-84b9-ef06af64b23a.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     6498
IP address blocks:        75.78.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:44:0d:14:85:21:5b:81:ae:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=4b50bb85-97ee-4bc2-aa72-3fd9242920cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bd:21:d1:e5:8b:74:bc:c9:ec:c7:b6:74:92:
                    11:5e:e4:a8:0a:ed:8a:0b:9a:b6:3e:4c:45:3c:88:
                    e7:3d:94:d9:a9:0e:df:73:f8:5b:5a:a9:ff:ba:ef:
                    28:fa:48:92:df:07:59:c9:4e:ae:55:95:2f:0b:d8:
                    48:02:68:ca:c3:dd:f4:30:61:92:09:ec:2b:3d:24:
                    06:8b:24:57:5f:cf:8f:4b:87:05:55:25:2b:df:95:
                    54:1c:ae:da:7b:cf:cc:fc:fd:30:f0:d9:e4:2d:0d:
                    59:d6:7b:e0:6b:23:70:1e:5c:97:94:4f:2f:dd:6a:
                    6e:a2:45:98:f1:b2:76:88:7f:03:8e:d4:c3:0a:41:
                    39:35:5b:bf:b5:ca:f7:c0:bf:7a:05:d4:73:50:e5:
                    18:2a:00:c0:be:64:c3:72:62:32:23:8b:69:a8:88:
                    18:bd:f7:7a:bb:df:98:77:b6:02:1c:f9:b5:11:9b:
                    7d:94:ec:89:5a:63:d9:47:23:ad:37:79:0f:24:70:
                    cb:eb:2f:c8:0f:6d:f8:0a:b9:5e:c2:65:ff:2d:8e:
                    06:17:62:09:24:94:9e:49:b8:13:d2:52:c9:7e:b6:
                    92:d3:70:63:16:37:84:9d:6d:f1:f1:75:33:88:f1:
                    24:f1:b2:65:bd:c0:f5:c4:e2:63:56:b8:3f:dc:a7:
                    a2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:56:C2:3F:60:88:C0:31:5D:79:59:E6:33:33:5A:48:68:65:30:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/8a971389-f19d-357a-84b9-ef06af64b23a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:78:17:b7:6a:d1:d7:22:f1:af:57:15:42:fd:40:87:28:0b:
         45:7a:eb:31:9a:93:f3:55:82:0f:aa:61:03:f5:56:3f:11:31:
         21:ec:7c:07:09:8c:d2:36:39:16:9d:54:eb:eb:5a:1e:86:59:
         f6:1b:4f:4c:b4:1e:1c:2c:e8:ff:81:e7:e8:62:16:cf:dd:be:
         79:ec:8b:c7:f8:f0:7d:81:b1:55:92:5e:4c:cd:12:23:8b:f7:
         9b:1a:8a:20:e6:59:b8:dc:28:5e:56:fa:15:c3:c6:e6:f8:ad:
         95:84:6d:9c:0b:59:64:38:cc:9b:39:3b:78:06:ab:d9:05:36:
         e6:01:20:bf:97:ed:01:73:8a:b1:8b:8e:5e:f5:4c:17:2b:4b:
         1f:37:56:77:26:fa:50:26:0e:8b:35:27:5a:0f:8b:48:df:bd:
         d6:7d:3b:cb:fe:1c:a8:a6:21:47:d8:d8:82:c5:b3:ba:2f:5e:
         89:5e:8d:a2:d5:0a:8e:fd:56:e0:48:8f:4d:f9:57:aa:3d:cd:
         4a:03:67:d9:38:d9:bf:38:d7:78:b5:0e:47:c9:77:1f:41:30:
         41:c8:3b:22:1c:34:c9:cd:a0:1d:31:d3:b7:11:6f:fd:da:ee:
         42:4a:7f:c4:db:6a:16:92:4c:2b:ab:36:ca:67:dd:ba:20:6e:
         1e:09:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:24:32 2025 by rpki-client