Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b694c80-6d3f-3d00-be84-82497d04a39a.roa
File:                     3b694c80-6d3f-3d00-be84-82497d04a39a.roa (raw, json)
Hash identifier:          6cHXHJIwvldm3ZeYoFkXZ2T8fRPAztabmhbK1T/Y1TE=
Subject key identifier:   EF:7F:F6:46:35:EF:9C:F0:3F:B1:82:28:2A:4E:F0:D0:A0:76:EB:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849898672D2499756998A1B0500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b694c80-6d3f-3d00-be84-82497d04a39a.roa
Signing time:             Tue 15 Apr 2025 19:10:28 +0000
ROA not before:           Tue 15 Apr 2025 19:10:28 +0000
ROA not after:            Mon 14 Jul 2025 19:10:28 +0000
asID:                     17119
IP address blocks:        208.218.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:89:86:72:d2:49:97:56:99:8a:1b:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 19:10:28 2025 GMT
            Not After : Jul 14 19:10:28 2025 GMT
        Subject: CN=8198d3ce-d751-4ea5-9d16-d4be24cfa07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:b2:cc:ca:4e:b6:1f:e4:ca:67:ac:c6:b4:
                    61:a5:97:71:2a:fd:2f:c6:42:69:8f:a1:62:0e:2a:
                    7c:0a:e3:cf:4f:e8:0a:64:80:3a:f7:46:e4:dc:57:
                    40:00:c8:fa:bc:25:64:1e:3e:ea:d4:4f:76:0e:17:
                    90:5e:95:0c:88:ab:7b:a7:27:01:0f:e0:70:32:28:
                    03:52:9c:d8:28:43:10:7f:a5:b3:b6:bc:bd:dc:c2:
                    2c:15:8e:dc:c4:6c:6f:dc:3d:31:32:ab:27:44:ed:
                    ef:51:20:71:13:51:c8:9d:78:2a:be:46:87:1d:df:
                    17:4d:a7:3e:48:b6:d6:e4:7f:c0:20:f5:25:77:6a:
                    39:2d:bc:00:3f:4f:a3:a3:1a:ba:2b:e1:4f:f9:54:
                    e0:b9:a5:69:e7:53:84:c6:bd:2c:48:c5:5d:cc:71:
                    d6:97:16:ec:b1:d7:ad:e0:81:f0:7c:ee:02:b8:e0:
                    32:ac:97:20:4f:e4:b7:ab:50:e4:8d:85:b3:c0:67:
                    74:7a:e1:bb:8c:67:24:1b:ce:5f:18:41:fb:6b:77:
                    1e:1e:d9:c7:60:ce:51:5a:89:a6:af:fb:9a:e0:49:
                    b4:5d:40:c3:37:cb:75:db:e9:6d:bf:eb:aa:8f:5b:
                    1d:c9:35:f6:cb:68:f2:84:ef:f4:2d:f3:ed:4d:8e:
                    f0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7F:F6:46:35:EF:9C:F0:3F:B1:82:28:2A:4E:F0:D0:A0:76:EB:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b694c80-6d3f-3d00-be84-82497d04a39a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.218.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:30:00:ea:97:b8:ae:26:16:f8:41:0d:85:d6:1c:3b:68:ed:
         37:e5:31:97:4e:df:92:05:b2:e7:d4:ec:a3:f6:a2:f0:e4:0c:
         f3:38:cd:2f:79:c3:27:8a:c7:18:3e:21:e5:8b:8e:b2:be:97:
         e5:24:f8:6b:d7:df:1e:e3:0e:20:d1:ad:4d:ab:e1:40:d2:5c:
         85:c3:0a:65:99:7b:46:6e:aa:77:6d:31:d9:41:8b:8d:c5:36:
         b0:df:09:2f:18:1a:69:04:0b:94:08:53:e7:c3:6c:cf:d0:4f:
         e8:80:d7:5c:62:88:fb:ff:b0:e7:4c:ad:05:5c:eb:c0:88:0c:
         8c:bf:0b:97:69:02:14:74:65:55:97:15:ec:c3:27:33:51:76:
         cd:a2:e4:86:60:bd:92:1f:b5:d1:c9:82:4a:33:8a:14:c4:f7:
         a7:9a:ce:38:ee:fc:47:28:db:00:3f:bf:ae:36:74:69:49:f3:
         ee:89:89:e6:15:cd:4c:17:4c:4f:e6:a3:0b:84:3a:16:de:5f:
         0e:1c:54:5b:99:b3:cf:a4:9e:01:ac:b0:50:03:1c:02:e1:e7:
         13:b4:ab:6c:46:49:3c:68:fe:57:61:88:2f:99:92:56:e4:e7:
         29:23:9d:41:19:47:2a:aa:ae:1f:5f:99:87:4c:a5:95:2a:59:
         8d:02:63:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:01:16 2025 by rpki-client