Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdf144a0-eb4d-3b72-9112-92ac6054ca89.roa
File:                     fdf144a0-eb4d-3b72-9112-92ac6054ca89.roa (raw, json)
Hash identifier:          GTEodKdKZ8V3D07wsYw/DvLEqWD9d+P9XE16ccsi1Gw=
Subject key identifier:   47:D2:AA:08:CF:20:C4:DC:14:FC:B4:09:F4:73:B3:B7:9D:5C:F7:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AAC8B836F3282F65A3AB34480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdf144a0-eb4d-3b72-9112-92ac6054ca89.roa
Signing time:             Tue 29 Jul 2025 01:00:48 +0000
ROA not before:           Tue 29 Jul 2025 01:00:48 +0000
ROA not after:            Mon 27 Oct 2025 01:00:48 +0000
asID:                     16509
IP address blocks:        208.213.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:8b:83:6f:32:82:f6:5a:3a:b3:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:48 2025 GMT
            Not After : Oct 27 01:00:48 2025 GMT
        Subject: CN=7b7fab54-2720-40a0-bd73-b577c62b0001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:30:fd:85:23:f5:af:21:ed:4a:77:9a:02:
                    38:89:60:1f:97:62:2b:2e:e1:45:cc:b9:94:2b:5e:
                    2d:d7:42:76:3b:56:53:18:84:4a:61:28:bc:20:61:
                    a5:85:b6:1e:de:42:c7:25:fd:7b:0c:73:66:c9:e7:
                    24:88:07:73:2d:6b:01:54:80:ce:c9:1d:6a:d0:96:
                    a9:78:ac:f9:78:a0:c4:d1:5a:ac:eb:75:3c:06:e6:
                    13:79:01:33:0f:90:01:e6:8f:29:2d:a9:32:0f:87:
                    78:a7:0c:60:38:ff:14:5b:e0:0d:54:ea:91:78:e0:
                    18:17:78:30:db:62:7b:26:7e:93:4e:0d:a8:a8:9e:
                    f1:42:93:b7:8a:a3:91:d8:e7:6a:a8:6a:47:5d:4d:
                    29:32:94:32:c0:a5:87:b1:17:0b:5d:82:5a:a6:7f:
                    ab:8c:7b:60:cf:d8:dc:dd:89:b3:96:4e:4a:5c:96:
                    f7:28:79:79:73:be:93:d7:2b:1a:0e:80:bb:cc:44:
                    9e:bc:10:32:2b:2c:44:64:97:78:5d:f5:95:42:b5:
                    e5:89:7c:52:1a:da:f4:b7:d3:03:7e:34:6e:33:d1:
                    7f:f6:cf:92:b7:a7:ae:be:6a:db:ea:26:43:45:e1:
                    0c:0b:c3:df:e4:83:59:16:7d:d7:fd:cd:b1:f5:5b:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D2:AA:08:CF:20:C4:DC:14:FC:B4:09:F4:73:B3:B7:9D:5C:F7:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdf144a0-eb4d-3b72-9112-92ac6054ca89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.213.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:14:9c:e4:88:cc:88:ae:a8:d3:21:3b:81:52:24:01:2e:07:
         5d:45:50:b4:bd:7b:08:c1:90:30:c4:35:05:58:ba:67:a6:6e:
         f1:46:92:98:27:e0:e1:e8:6f:10:f6:d5:bb:8d:85:d3:dd:62:
         39:6e:89:b3:b9:50:0a:15:ee:2d:34:0f:87:86:66:ef:32:d6:
         1c:e4:57:00:61:8c:0e:f0:06:fa:6b:73:6b:e5:7d:c9:21:48:
         ff:cb:0a:af:e3:25:be:51:99:0e:6d:4a:bf:f3:44:0f:fa:8e:
         74:75:1c:c1:7b:09:d8:8d:0e:0e:01:fa:b0:ec:7d:0a:88:17:
         46:c3:5a:15:91:e6:9c:24:95:3e:6b:07:a8:ce:44:aa:71:59:
         70:74:fc:2b:db:b4:1f:13:98:f5:6c:57:d1:af:03:b1:e8:bd:
         94:f9:b6:ff:3d:90:55:90:27:38:85:99:7c:e3:d9:23:26:1e:
         38:77:09:0b:d2:ea:f6:dd:23:81:d5:76:c1:41:f4:10:9d:d3:
         75:3b:a7:87:3a:35:4f:82:6d:e5:11:cc:ea:5b:3a:20:18:e5:
         97:59:10:5a:3b:8e:d8:22:14:76:07:6d:90:7e:d7:e4:d0:4a:
         4b:f2:35:74:a5:46:ad:d7:21:01:91:6b:e5:ee:22:be:37:a5:
         7a:1d:5b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:18 2025 by rpki-client