Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ef9ace7-77f4-3c3f-ba7c-34e7b7c94c72.roa
File:                     0ef9ace7-77f4-3c3f-ba7c-34e7b7c94c72.roa (raw, json)
Hash identifier:          v2whW1yhRDBLjFJdD0j0iJEIy5sezFjJ2EO/5U1YRA0=
Subject key identifier:   3C:A4:9B:7B:2C:36:27:C8:1B:55:41:5F:F0:0B:42:BD:70:A8:72:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849CD34C4917CEFA83A8AF93700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ef9ace7-77f4-3c3f-ba7c-34e7b7c94c72.roa
Signing time:             Sat 10 May 2025 01:00:47 +0000
ROA not before:           Sat 10 May 2025 01:00:47 +0000
ROA not after:            Fri 08 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        208.214.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cd:34:c4:91:7c:ef:a8:3a:8a:f9:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 01:00:47 2025 GMT
            Not After : Aug  8 01:00:47 2025 GMT
        Subject: CN=3a18ca1e-5de0-48d9-b3c5-113cbaef2fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:03:65:37:6d:aa:16:42:3f:d0:81:f2:88:
                    f9:dc:5c:53:ef:e0:96:11:09:e9:2e:93:dc:e9:3e:
                    cb:e8:ea:1d:7c:82:89:0f:67:34:9d:20:20:14:f6:
                    21:3c:e8:d9:54:ba:ff:37:19:39:56:57:5b:a3:3f:
                    8b:49:3f:94:eb:f3:7f:4d:88:0a:65:02:48:c0:24:
                    c6:57:fa:ae:e8:ff:f1:8e:5f:b8:dc:1c:79:da:ce:
                    49:47:57:f4:fe:ca:3f:dd:76:14:85:96:aa:c3:b3:
                    1f:f1:0f:d7:0b:e6:26:43:b6:8e:27:9a:2c:a1:50:
                    75:fe:d5:e6:01:03:5e:b7:a9:e8:9f:6b:1f:28:97:
                    44:64:0f:25:90:2a:88:7b:81:c3:76:f9:54:ec:16:
                    35:92:f6:60:47:5e:c4:2a:b0:d6:9c:d7:80:ef:a1:
                    68:13:33:48:ed:c0:a6:db:60:e0:6b:2b:ba:93:cd:
                    0d:3f:7f:97:1b:e2:9e:7c:ef:73:47:4c:3f:83:86:
                    7b:fa:df:f3:c6:0e:1b:84:2a:a9:5f:78:1b:32:e9:
                    96:7a:c8:9b:fd:94:76:33:77:e7:c9:ba:1a:7a:0c:
                    dc:60:b7:ec:62:d8:5c:c6:1f:23:41:80:2f:64:29:
                    e9:53:1a:11:fd:35:0d:0f:93:d6:a0:ce:45:4c:e0:
                    f3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A4:9B:7B:2C:36:27:C8:1B:55:41:5F:F0:0B:42:BD:70:A8:72:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ef9ace7-77f4-3c3f-ba7c-34e7b7c94c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.214.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:08:ba:6d:a2:eb:ef:30:59:c1:32:34:60:7f:65:54:85:ba:
         83:d4:e0:61:fc:51:25:cf:99:10:26:bd:cc:af:73:b3:d3:99:
         73:87:99:c9:1c:e6:b2:e7:5c:bb:f8:06:8e:97:32:b7:a2:1c:
         2f:dc:d6:46:47:8b:06:5a:c4:2c:68:81:b8:53:48:35:54:0f:
         0e:62:cc:c3:8d:5d:0b:98:80:b4:a2:85:23:25:2b:2d:42:af:
         a0:b5:e8:be:01:2e:f8:ba:a2:19:58:69:5b:48:70:a1:66:89:
         22:5f:d8:7c:7c:01:fb:71:16:53:c4:f4:f0:16:77:49:ba:64:
         7c:19:0c:07:00:10:a8:c9:8a:67:4c:70:39:4f:7f:77:86:81:
         b1:0f:99:3e:29:07:fb:57:3d:a2:b6:cd:a0:fa:e5:b6:ea:f2:
         ed:4a:29:81:a6:62:f2:a8:7e:06:46:c5:a0:b0:51:a6:8d:11:
         e8:af:e8:fa:b2:55:aa:1b:30:60:ee:43:85:ef:d3:d5:3b:29:
         8e:1d:d5:83:a7:a7:b2:b8:5f:ac:c1:c9:7d:ba:77:df:e4:27:
         9f:e8:5d:e4:15:07:d3:db:51:50:f9:ca:83:0b:78:6d:18:e4:
         83:ef:54:70:7d:97:d4:b8:ac:ef:ea:cb:39:2d:01:84:2a:e6:
         32:ae:b8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:44:13 2025 by rpki-client