Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/38fa7f22-5f19-326e-97e1-4e532983fea5.roa
File:                     38fa7f22-5f19-326e-97e1-4e532983fea5.roa (raw, json)
Hash identifier:          Hd14B/07OYMxkwO+Tft9zuDcNmiPUfW6jttf1CsXJlw=
Subject key identifier:   1C:81:1A:B3:E0:C4:A4:7B:6D:32:0E:12:1D:2B:25:CA:72:81:5D:EC
Certificate issuer:       /CN=7478c754-137f-4ef1-a8b5-aa954253fb79
Certificate serial:       010D0C9F43285849D594EDC77568F7D0806167E0
Authority key identifier: E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/38fa7f22-5f19-326e-97e1-4e532983fea5.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     18474
IP address blocks:        66.78.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ed:c7:75:68:f7:d0:80:61:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7478c754-137f-4ef1-a8b5-aa954253fb79
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=39883923-a3a9-4820-a456-82af984e0193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dc:d7:16:54:c9:1a:f4:38:43:2a:5a:32:e8:
                    58:c2:bd:95:0a:82:d4:4c:93:9e:25:b9:2d:21:38:
                    6d:91:18:b1:b3:d4:95:f9:e8:5e:8d:b7:c9:74:d9:
                    a3:dd:99:36:c4:ab:22:9e:a3:bf:19:8d:ce:fb:49:
                    e2:a6:6f:f9:3f:b4:1d:03:d0:91:3a:f6:ba:33:81:
                    6b:57:67:29:d8:45:91:c7:34:74:7a:6e:c3:8d:34:
                    6c:cc:34:9e:db:4b:5f:1a:af:43:42:6a:20:fe:2d:
                    7b:7e:c5:b7:f1:b1:e0:67:b8:52:4d:de:04:a6:13:
                    1e:f0:df:62:ae:84:28:b5:36:29:00:7e:c6:28:06:
                    71:a0:ad:3f:b6:70:c8:0e:f9:cc:21:7d:ac:13:d8:
                    a4:bb:a4:3f:ae:a4:b3:9b:59:f4:58:0b:9f:e6:18:
                    10:47:70:c0:27:79:c8:28:5e:47:35:3b:0c:9c:24:
                    69:87:5e:b7:b9:ad:09:78:82:be:6b:96:47:fb:48:
                    dd:34:89:b5:a4:61:08:93:18:22:65:b4:ea:3c:06:
                    67:e3:f8:dd:44:ed:f9:6b:80:5b:24:20:ec:61:90:
                    76:ff:85:ca:5a:de:d1:ae:ef:72:92:9f:d9:43:ab:
                    69:8f:4b:8d:ca:68:e7:94:b2:81:5e:36:17:01:85:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:81:1A:B3:E0:C4:A4:7B:6D:32:0E:12:1D:2B:25:CA:72:81:5D:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/38fa7f22-5f19-326e-97e1-4e532983fea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1e:82:77:7e:ef:23:f1:5d:f0:67:fe:8c:4e:24:7d:06:ae:
         42:6f:a3:f3:d5:dc:9c:fa:5f:46:93:98:0a:02:ca:51:df:9e:
         c5:7e:3d:88:81:8e:d3:bb:36:9c:27:2d:3e:53:e2:3f:3c:30:
         1b:4e:65:83:27:8a:8c:fa:22:31:6f:50:f5:83:fb:a7:48:b7:
         a7:f5:e4:53:b9:56:40:91:93:4d:10:34:af:f8:7e:ee:6f:fe:
         8b:66:de:ee:bc:e1:e3:a4:6a:bc:6e:09:be:81:77:15:3b:06:
         ec:c4:a8:c8:f3:68:89:e9:a5:fc:bc:1b:21:f4:c7:10:f9:d4:
         c8:83:bd:44:13:97:59:97:34:c2:2c:d9:18:d7:68:29:4c:bf:
         79:b9:d9:cd:18:e8:49:3f:f0:b5:8a:f3:4b:33:97:03:9c:de:
         f1:fc:97:14:39:e5:a9:05:8a:74:a2:c8:65:f8:aa:a1:0a:8a:
         da:5d:a1:fa:39:bf:48:77:9a:89:f5:e1:53:2d:0e:05:36:6d:
         df:dd:d5:e5:6a:eb:5e:c8:21:b8:17:1c:c1:40:7b:f9:36:fe:
         1b:da:f5:b9:c5:bd:1a:31:36:2a:2d:af:fe:02:49:7f:cc:be:
         02:dd:8c:4f:f0:68:14:e4:92:c8:8e:8e:ac:8f:ac:ec:9c:64:
         82:ef:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:12 2025 by rpki-client