Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c5dd3f3-0f40-3cbc-a344-f4e35de4c6c1.roa
File:                     5c5dd3f3-0f40-3cbc-a344-f4e35de4c6c1.roa (raw, json)
Hash identifier:          D5bbEVmbuoC3P1LjDhPbdcNXbDpcCUjGK4f3Zgflfw4=
Subject key identifier:   19:01:6C:DB:DA:93:B2:37:82:3E:AB:39:B3:48:40:F7:94:79:24:C4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849CD34C3F44E295B8B3B79B780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c5dd3f3-0f40-3cbc-a344-f4e35de4c6c1.roa
Signing time:             Sat 10 May 2025 01:00:47 +0000
ROA not before:           Sat 10 May 2025 01:00:47 +0000
ROA not after:            Fri 08 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        208.214.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cd:34:c3:f4:4e:29:5b:8b:3b:79:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 01:00:47 2025 GMT
            Not After : Aug  8 01:00:47 2025 GMT
        Subject: CN=5cdcf144-0739-450a-96bb-02f138124a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:77:66:73:10:d3:47:14:02:2e:2a:d2:37:e6:
                    4a:16:fd:86:72:33:19:cb:ea:ac:8d:ee:3a:e6:e1:
                    24:77:7e:3d:c2:e1:93:01:59:f8:03:3b:1b:cf:29:
                    8c:d8:bb:92:c9:00:07:75:2a:a0:52:9f:88:71:5a:
                    a6:16:db:c5:8c:64:b2:16:f7:55:b3:f8:86:1e:dc:
                    d6:ad:38:79:b3:76:0c:a5:c0:ae:1a:40:ae:8d:73:
                    2f:95:f2:59:ce:14:54:4c:bf:0d:f8:c0:28:13:0e:
                    84:8b:48:56:f4:05:58:cd:5f:37:3e:fe:00:ce:63:
                    a3:83:5d:61:2c:7c:11:b7:4a:ad:f9:62:fc:bf:cf:
                    df:d0:46:81:84:e9:91:74:8f:0e:13:10:18:58:37:
                    1e:86:3e:ef:74:4e:90:dc:20:dc:b9:b5:51:3d:36:
                    5b:c4:8d:37:20:22:a0:cb:da:61:74:ab:62:8a:cd:
                    65:e9:ba:1d:66:27:08:4e:1a:28:41:9a:ff:09:dc:
                    c7:6d:0a:4a:61:a1:7c:09:4d:07:f6:90:31:81:b9:
                    2c:04:d8:61:71:ef:3d:76:e6:bf:b9:c5:84:0e:a8:
                    11:d1:85:09:e8:3d:0f:80:5f:ff:45:04:ac:d4:60:
                    bd:b6:b5:0e:36:95:97:ed:b4:bb:e0:3a:d9:98:04:
                    a1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:01:6C:DB:DA:93:B2:37:82:3E:AB:39:B3:48:40:F7:94:79:24:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c5dd3f3-0f40-3cbc-a344-f4e35de4c6c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.214.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:25:ab:d1:f4:51:0c:87:df:98:ed:c0:f6:bf:b9:7a:6b:b2:
         f7:51:db:df:41:b3:07:65:c6:b0:c5:8a:a6:2a:e0:3d:79:6c:
         9f:f2:fe:4c:54:36:25:eb:2c:b2:2f:a0:91:6e:8d:bd:06:5b:
         63:6e:f4:6b:cd:13:be:ee:9e:14:1b:2e:63:bc:24:c0:ec:5a:
         82:24:2a:de:39:18:4f:fa:51:c7:aa:5d:41:3d:41:a2:99:c8:
         7f:54:0f:fa:b0:c7:12:1b:16:56:b6:d2:b8:0e:94:a3:f5:12:
         b0:32:e4:9a:1c:43:18:b0:41:1d:7f:a4:03:19:06:18:ea:b4:
         0d:01:2e:57:cc:bb:c6:97:e1:e4:b7:0d:f9:df:4b:de:6a:a1:
         b4:94:fc:2e:d6:bb:20:cd:19:62:a4:a1:0b:fe:16:75:14:2c:
         f2:74:57:93:63:9b:94:15:37:72:c1:4e:33:c9:d9:7c:e9:bb:
         61:75:64:21:d8:26:51:ca:e7:02:69:86:3d:9b:bf:72:12:1d:
         99:1d:bb:0e:9e:89:ad:bb:05:a4:90:be:d3:88:b5:47:2b:4f:
         84:64:3d:14:c2:8f:12:a5:2d:87:ae:43:8a:b2:f5:e4:64:52:
         56:9c:3e:1c:2a:f4:1f:67:a9:e5:04:56:24:96:d3:d1:71:ee:
         60:76:95:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:00:13 2025 by rpki-client