Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1470dd2-2c4e-3cb8-a632-73fc894b8b5e.roa
File:                     b1470dd2-2c4e-3cb8-a632-73fc894b8b5e.roa (raw, json)
Hash identifier:          8Vkn05uiQPscTc9Iu2QkQlBWx3Eb+YaP59nKeKft2Zs=
Subject key identifier:   D2:51:4C:2A:59:C8:91:93:12:5B:D0:C4:DE:7E:8A:03:2B:EA:F6:07
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849CD34C4A61F5D66076348F780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1470dd2-2c4e-3cb8-a632-73fc894b8b5e.roa
Signing time:             Sat 10 May 2025 01:00:47 +0000
ROA not before:           Sat 10 May 2025 01:00:47 +0000
ROA not after:            Fri 08 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        208.214.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cd:34:c4:a6:1f:5d:66:07:63:48:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 01:00:47 2025 GMT
            Not After : Aug  8 01:00:47 2025 GMT
        Subject: CN=67b548d0-f62a-4eaf-a7ce-5096e8e71ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:45:17:7c:ed:89:61:5e:7b:e7:67:25:7a:
                    ba:9a:05:d5:af:98:71:22:51:c3:ab:fa:48:da:a2:
                    5b:96:0a:97:c9:9b:13:7d:db:11:ff:02:1d:e7:96:
                    bb:24:73:a2:80:ea:c6:37:44:b4:61:a4:44:a9:2f:
                    ea:18:d4:ab:d5:23:80:98:d1:54:8b:12:b3:32:ec:
                    fa:63:9a:33:ae:a7:d7:57:56:e0:4d:2c:bb:dd:67:
                    c6:d3:0e:a4:5b:2a:33:e0:45:03:ff:55:13:ec:18:
                    da:ba:f7:a6:6e:a3:ec:45:92:5e:26:0a:29:0a:02:
                    b6:2b:c6:e9:ba:a7:46:25:09:35:73:2b:df:6a:c2:
                    24:96:90:d2:7e:96:e6:5f:33:15:77:1f:5c:4a:5b:
                    e7:30:40:50:9a:00:8f:59:43:ef:11:79:6b:cb:6f:
                    4a:38:4d:80:d0:67:d8:c9:b0:03:f0:ce:fc:d7:76:
                    2f:45:6c:46:16:aa:70:c1:24:ee:95:1b:46:62:84:
                    e8:46:f1:f8:87:aa:af:ca:95:84:0f:5f:49:b2:b8:
                    a5:72:8a:68:b4:d9:a7:49:2b:af:37:3a:17:95:9e:
                    be:3a:95:25:dc:85:ab:6a:09:57:e1:4f:8f:e6:d1:
                    3b:79:39:49:9e:40:f1:1d:b9:54:45:a7:be:8e:06:
                    9e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:51:4C:2A:59:C8:91:93:12:5B:D0:C4:DE:7E:8A:03:2B:EA:F6:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1470dd2-2c4e-3cb8-a632-73fc894b8b5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.214.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8b:2c:70:1d:99:8f:f3:24:2e:2a:4f:8b:83:b4:76:aa:ef:
         95:99:b1:f1:07:ee:19:6b:59:70:2b:63:3d:a1:75:f6:ce:9c:
         aa:08:0d:31:a1:83:70:81:6e:8b:f0:2e:cf:40:08:22:f7:1d:
         72:a6:0b:d9:ac:d3:2c:71:81:07:21:9c:2d:19:80:4e:ed:98:
         d5:20:e9:92:46:a5:16:71:83:a8:0d:c4:ae:bc:e8:81:dc:bb:
         c1:9e:9a:9b:c4:cf:3a:ef:01:47:4f:4f:17:5f:bd:d1:49:3a:
         c8:e0:86:26:d3:59:b0:e5:2b:aa:7f:cb:cd:ea:42:80:73:a1:
         ec:ba:af:9f:83:31:bc:88:57:46:f1:f6:5b:bc:7a:6b:5a:b5:
         42:84:a0:38:c3:10:18:63:b0:4e:01:53:fd:b2:77:e0:bb:80:
         41:f5:89:78:1b:aa:27:d1:19:2e:44:d6:99:89:ea:87:ea:37:
         a1:b9:a9:47:93:a3:45:05:5d:fa:6a:fd:1e:93:51:bb:5d:97:
         e7:d4:bf:30:08:93:22:41:cb:b6:8d:8c:4c:2b:15:be:45:a1:
         87:4c:0e:be:a4:65:3b:00:34:da:f9:79:55:e1:c8:c2:08:8f:
         00:7e:00:ed:42:96:f1:db:a2:94:b0:13:ab:e9:d0:b7:1a:67:
         7b:0a:07:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:16:28 2025 by rpki-client