Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c08ecf9e-5a1c-3ee9-839b-b64d4a11e5df.roa
File:                     c08ecf9e-5a1c-3ee9-839b-b64d4a11e5df.roa (raw, json)
Hash identifier:          Supa4YnPEToS/PXmDH8O5TZ3nUcOEzFuXYZRVVZPqoo=
Subject key identifier:   9A:6D:3F:B9:61:33:76:2F:91:8C:5A:74:C7:DF:A9:97:19:BA:6E:57
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AAC8B84B474CB93A8DE360100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c08ecf9e-5a1c-3ee9-839b-b64d4a11e5df.roa
Signing time:             Tue 29 Jul 2025 01:00:48 +0000
ROA not before:           Tue 29 Jul 2025 01:00:48 +0000
ROA not after:            Mon 27 Oct 2025 01:00:48 +0000
asID:                     14618
IP address blocks:        208.214.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:8b:84:b4:74:cb:93:a8:de:36:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:48 2025 GMT
            Not After : Oct 27 01:00:48 2025 GMT
        Subject: CN=43756fde-1fc2-4476-a0f9-1eb013420d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:89:0e:d5:16:8c:70:e3:56:f5:f3:4f:2f:
                    b6:27:6c:1d:9b:60:1b:42:58:0d:c9:ea:32:27:db:
                    f3:62:49:57:73:0b:9b:f2:de:a4:eb:b0:ac:0e:72:
                    1d:f8:b8:d3:92:b3:46:5a:e3:f1:e7:74:30:06:9f:
                    67:a1:5b:45:cb:d8:80:6b:9e:f6:b6:90:27:9c:f2:
                    1a:1a:33:76:a2:46:1b:ef:9e:b9:c8:f3:30:a9:5d:
                    b6:e9:22:94:28:8a:67:c2:cb:6e:ec:45:55:7c:47:
                    0f:c7:cf:40:ca:f3:47:04:34:b4:5f:cf:c9:bf:13:
                    89:c4:0f:9b:89:5a:60:f5:9f:c6:28:b9:a9:52:e5:
                    94:b4:d1:bf:70:0b:bf:22:31:43:23:a8:ba:73:59:
                    9d:5e:6e:0c:00:2d:8a:36:d8:89:bf:9b:92:ad:fd:
                    eb:7f:98:5b:f0:05:9c:2f:bb:eb:a6:ea:74:db:60:
                    2c:b2:c6:2e:19:d0:15:5c:33:9b:0e:5b:ac:a9:13:
                    29:42:4c:e9:5c:b7:fa:86:17:c8:ab:e9:99:30:c9:
                    37:33:a6:bf:fc:4f:d9:72:28:81:e1:74:2b:0e:f1:
                    e6:74:9d:e2:8c:0f:1c:c6:85:20:79:da:b6:1d:3d:
                    8a:47:46:b5:d8:72:1c:c8:d6:87:13:44:4d:11:07:
                    71:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6D:3F:B9:61:33:76:2F:91:8C:5A:74:C7:DF:A9:97:19:BA:6E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c08ecf9e-5a1c-3ee9-839b-b64d4a11e5df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.214.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ca:eb:2c:0f:2a:f5:30:0f:1c:1a:33:9d:dc:ac:06:46:8a:
         bc:3d:c7:7d:49:f5:b7:02:6a:60:ca:32:35:c9:61:16:eb:fc:
         ca:9c:ef:6e:9d:1f:e9:c7:3a:c3:69:8b:3a:ec:1d:80:b0:f1:
         09:51:3f:45:e4:4c:fd:db:71:8e:d9:44:ae:05:a8:a3:71:e6:
         0e:9d:0e:a3:e8:7c:84:a0:4e:ed:47:f2:63:48:70:3e:ea:fc:
         93:cd:e1:b3:c8:cf:25:11:46:54:3d:c0:29:b0:53:d9:7d:d5:
         e8:aa:34:47:32:5d:79:26:d2:0b:19:4a:7b:05:18:2e:5a:ee:
         be:45:b8:87:8b:a7:76:09:51:25:05:4b:5b:f1:23:75:b1:90:
         12:9b:0e:f2:ef:6d:34:3c:ac:90:78:d3:8d:32:85:35:95:a3:
         56:9d:89:e4:43:8b:37:81:c5:d4:61:a5:4d:4e:a6:d6:61:ae:
         40:99:fb:7a:29:58:a1:1b:d7:a0:e2:a8:25:fe:a7:7f:d1:50:
         92:31:0b:61:77:f5:1b:60:07:96:c1:59:1c:79:5e:24:ab:3b:
         71:92:42:69:a2:cc:3a:67:c4:d1:54:fc:eb:38:8f:b2:ce:ea:
         40:27:de:e3:1c:d2:53:80:d7:c8:a7:48:bf:cc:5a:f7:39:b1:
         f4:e9:f8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:53:14 2025 by rpki-client