Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/115be855-a2e1-3686-88e2-c312f241f361.roa
File:                     115be855-a2e1-3686-88e2-c312f241f361.roa (raw, json)
Hash identifier:          FPi+ftucUs4hhKgijeGC+ckD3m8sbq5pcXsdSn9OY7A=
Subject key identifier:   72:3E:67:D2:DC:5F:8E:CA:25:60:29:97:C2:B2:C6:1A:6B:A8:1E:2B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AAC8B80F604A67460B3D38F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/115be855-a2e1-3686-88e2-c312f241f361.roa
Signing time:             Tue 29 Jul 2025 01:00:48 +0000
ROA not before:           Tue 29 Jul 2025 01:00:48 +0000
ROA not after:            Mon 27 Oct 2025 01:00:48 +0000
asID:                     16509
IP address blocks:        208.215.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:8b:80:f6:04:a6:74:60:b3:d3:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:48 2025 GMT
            Not After : Oct 27 01:00:48 2025 GMT
        Subject: CN=573a05bb-bc41-4190-aeae-19a6eeb68233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:74:29:9c:7c:ad:39:11:2f:d7:dd:11:51:
                    8d:78:e9:dd:3c:e9:1a:27:ef:2c:e0:34:ac:55:89:
                    e0:32:90:15:20:60:24:bc:7c:31:e5:c5:78:6f:83:
                    d8:64:37:7b:63:42:b9:1c:21:24:75:b8:c1:29:7f:
                    25:dd:c7:cf:80:ef:b2:24:38:d3:00:39:91:97:29:
                    84:df:28:16:75:f0:54:c0:11:01:d8:eb:53:93:c6:
                    7c:95:8e:89:62:3e:5c:53:11:ac:ce:dd:b1:13:16:
                    a7:9e:c8:da:a7:98:e4:7a:3b:d1:6f:2b:95:4b:37:
                    8d:7f:40:23:7e:71:dc:09:51:ce:be:86:77:65:73:
                    1e:23:1d:02:b0:4a:13:8f:65:dd:23:2a:99:7d:49:
                    ca:10:26:d7:a1:29:53:58:93:45:b2:53:0c:05:af:
                    1f:20:30:72:1a:ba:24:d3:fd:ea:20:23:de:41:11:
                    72:da:ed:06:9e:d5:99:5c:bc:24:ae:45:1c:6f:e0:
                    3b:79:de:c1:fd:41:9d:97:fe:8a:2d:52:0c:d2:74:
                    b2:58:f6:e6:3f:a3:82:b2:22:6f:5b:ae:ef:e6:d4:
                    52:43:36:de:f5:75:9a:01:8c:14:b5:46:28:bf:01:
                    e0:6c:df:d5:94:9e:c7:f9:55:72:c7:98:b3:be:66:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3E:67:D2:DC:5F:8E:CA:25:60:29:97:C2:B2:C6:1A:6B:A8:1E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/115be855-a2e1-3686-88e2-c312f241f361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.215.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:a0:c9:35:b9:34:35:0f:fc:2f:12:9a:0d:1a:72:fd:d2:0c:
         22:91:a5:10:99:4e:ea:ec:08:0f:31:dd:06:e4:73:3a:31:b9:
         fe:cb:90:fb:74:88:ce:a9:ea:5c:a1:b4:c4:ea:f7:4d:48:10:
         01:32:14:4c:5f:c2:d0:1c:10:0f:25:4d:e8:02:b3:01:00:ff:
         f0:29:b7:26:e5:1f:de:52:b3:84:49:3d:e7:45:ce:7f:cd:e6:
         96:fc:c9:e8:ae:77:01:6a:20:55:e4:43:56:2e:61:5e:74:ed:
         f2:d8:45:af:36:dc:1a:c1:62:fd:a0:ce:dd:9f:b8:f2:05:0a:
         9e:63:61:ce:a4:33:04:f2:54:91:12:d1:eb:e2:db:fc:40:2c:
         c4:b1:59:e4:90:cc:6f:e4:54:16:6e:62:58:df:fc:f0:6b:56:
         7d:f7:46:16:83:e5:55:9c:96:96:55:8a:59:91:ff:48:f8:57:
         ff:03:40:16:6d:04:02:4e:62:7a:ec:f2:4c:5b:e5:68:05:a0:
         bd:6c:90:0a:01:65:49:7f:fe:f0:fd:00:7d:f9:7e:50:ce:d3:
         a0:3e:6f:ee:40:ea:e9:1c:dc:b9:0a:e9:c3:d3:a2:c9:6f:3c:
         c7:16:8d:71:7f:43:fa:f9:52:34:ae:34:d3:21:33:9c:88:45:
         7a:9d:2a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:14:02 2025 by rpki-client