Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa
File:                     d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa (raw, json)
Hash identifier:          UpfxwCOs1TxJfrzbaJSb+94zrj2bK5nvX8CiY8n4DPc=
Subject key identifier:   EE:83:D4:FE:8D:6A:8B:B8:13:C2:29:35:B4:EB:2C:AE:43:F2:6F:99
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AAC8B83B5AC279A2274591B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa
Signing time:             Tue 29 Jul 2025 01:00:48 +0000
ROA not before:           Tue 29 Jul 2025 01:00:48 +0000
ROA not after:            Mon 27 Oct 2025 01:00:48 +0000
asID:                     14618
IP address blocks:        208.213.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:8b:83:b5:ac:27:9a:22:74:59:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:48 2025 GMT
            Not After : Oct 27 01:00:48 2025 GMT
        Subject: CN=bc7a8674-8ae0-4ced-af5c-b4c45d42c29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e3:56:09:de:ee:03:09:d6:8c:ee:e0:1a:ab:
                    02:2f:48:bd:2a:22:02:3d:55:9d:0d:82:10:0e:b5:
                    19:3c:13:1e:43:03:33:16:6e:7f:b0:d3:93:5a:d3:
                    32:c6:72:c2:0c:43:a3:40:b0:08:98:8f:7b:f4:52:
                    c9:6c:5d:63:e9:f5:d3:41:03:23:1b:ad:54:a7:8f:
                    bf:9f:aa:ce:c9:28:5f:87:f0:e6:64:a6:2b:1d:d3:
                    6e:6d:9f:e6:56:06:f7:b4:c3:02:78:a9:36:c6:89:
                    0e:a4:09:b4:f9:ac:f3:e8:a4:f0:85:57:20:09:7e:
                    6d:02:ca:4d:a1:64:bc:eb:a5:ca:dd:3b:e4:1e:96:
                    47:e1:4d:02:69:e0:99:a5:fe:e4:d7:50:cd:8c:37:
                    7a:74:88:a0:d7:1c:3f:aa:d3:18:91:67:7f:2a:17:
                    6f:31:04:3f:64:ce:e1:ba:fb:18:53:02:a7:15:bb:
                    c2:66:5f:56:e1:16:52:01:17:49:62:59:ba:90:a2:
                    15:f1:f9:c7:73:4d:71:a7:d4:6e:65:64:e6:2e:28:
                    6e:bc:21:83:c6:6e:1a:a7:63:da:ea:6b:76:6e:66:
                    70:c7:ac:7a:81:68:a0:83:ff:df:3e:cd:25:43:6d:
                    40:c9:2d:86:f1:a7:81:93:f7:38:d9:30:5a:c6:48:
                    c7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:83:D4:FE:8D:6A:8B:B8:13:C2:29:35:B4:EB:2C:AE:43:F2:6F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.213.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:11:5b:b2:8a:04:3a:42:97:4d:8b:a1:1e:5d:1d:e8:0b:eb:
         ca:34:00:61:a0:78:b3:89:0f:0b:e1:a3:f1:12:fd:3e:23:07:
         21:71:11:5d:fc:b2:fc:68:92:67:c8:50:10:e7:ba:de:ea:06:
         c9:68:7c:1d:67:67:49:d6:eb:8c:7d:dd:97:34:f9:2d:cf:25:
         fc:46:ab:37:7d:44:ff:0c:7b:e1:c7:71:eb:c3:53:0e:78:be:
         e0:9a:9c:27:c4:1a:64:95:d0:2b:55:f0:5d:b0:36:3c:22:c5:
         a5:f4:cf:30:5a:98:b1:ba:ba:7a:88:0d:d2:27:54:ba:b8:b7:
         3f:f3:a2:88:18:60:7f:34:54:d1:eb:92:1f:f7:01:11:2d:cf:
         2d:e7:87:16:ef:fa:08:0f:1f:de:d7:ac:71:c6:72:cf:c6:db:
         c5:02:12:17:46:ad:5f:c4:2a:10:29:e1:dc:f1:4e:f8:be:6a:
         35:b9:3e:52:dd:ab:6d:9b:72:20:7a:be:a3:38:d0:b0:f4:98:
         bf:5d:bf:1a:b8:04:ec:e2:15:9d:ee:e6:03:a8:13:05:65:1f:
         5d:20:34:7d:db:a7:4e:fa:1d:f7:1b:18:fb:00:cd:09:13:33:
         cd:e8:3a:77:57:e3:46:3c:04:59:fc:e9:be:c8:da:67:60:79:
         a6:19:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:52 2025 by rpki-client