Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23cb025e-0894-3a77-ade8-ad2fcb211115.roa
File:                     23cb025e-0894-3a77-ade8-ad2fcb211115.roa (raw, json)
Hash identifier:          Rkod+2UztRQmijm4MXMYA4NoYKsVjBGqPTXUyWhgyTI=
Subject key identifier:   7D:DD:E6:53:62:5F:51:A3:90:23:47:CD:3A:28:80:F1:CB:B1:DA:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849B631E87D52C6989FCDB53740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23cb025e-0894-3a77-ade8-ad2fcb211115.roa
Signing time:             Thu 01 May 2025 19:11:30 +0000
ROA not before:           Thu 01 May 2025 19:11:30 +0000
ROA not after:            Wed 30 Jul 2025 19:11:30 +0000
asID:                     400902
IP address blocks:        216.149.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:31:e8:7d:52:c6:98:9f:cd:b5:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  1 19:11:30 2025 GMT
            Not After : Jul 30 19:11:30 2025 GMT
        Subject: CN=93e77006-7d2e-490d-b293-ad51d53f7469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bb:ef:dc:c3:03:cd:e4:15:d6:9f:fb:8b:1c:
                    1b:d7:4c:8e:46:50:73:e7:8f:af:3a:6d:b5:68:65:
                    79:27:18:fb:1a:c0:45:e8:1a:1f:aa:21:ab:69:60:
                    c1:85:21:19:7a:95:fd:13:3c:dd:97:b9:66:2b:51:
                    39:82:af:80:af:72:45:fa:27:f0:53:40:d8:d0:15:
                    67:2e:81:e1:7f:97:f6:ad:90:b0:94:6a:68:f5:45:
                    66:50:c4:26:14:76:ed:ba:2c:2e:50:b0:fa:ed:87:
                    87:f1:28:ad:67:e0:ac:63:51:f2:68:31:92:08:63:
                    49:ac:ca:06:d9:bd:38:38:fc:7b:14:61:a7:0b:63:
                    41:12:87:d8:af:ea:0c:58:28:e3:4a:9f:b9:ed:c9:
                    7d:b2:fd:b9:cb:46:ae:0e:6a:25:e2:2a:f0:55:44:
                    d4:3b:dc:f8:ef:d2:7f:9b:62:e9:53:06:9a:5c:8e:
                    15:9f:4c:ba:43:46:b7:e2:96:18:e3:8a:c6:a8:71:
                    09:a6:7f:95:1f:b0:40:68:e4:7f:7f:c9:f1:0b:c5:
                    be:a7:7a:fa:2d:96:eb:f3:4d:c7:63:80:a4:90:71:
                    29:59:c8:f1:dd:38:3c:2f:9a:e5:7d:22:b3:b6:9c:
                    da:56:5a:d7:a3:ed:e8:1d:e6:de:d2:10:23:b0:f0:
                    76:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DD:E6:53:62:5F:51:A3:90:23:47:CD:3A:28:80:F1:CB:B1:DA:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23cb025e-0894-3a77-ade8-ad2fcb211115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.149.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:aa:1d:91:40:f1:58:a5:d7:83:85:c1:be:85:5f:0b:86:06:
         e3:77:06:a7:51:76:00:14:65:75:c9:8c:c5:da:15:29:b9:4e:
         bf:21:c4:e9:0d:a9:01:24:8f:22:d7:21:3b:55:6f:e7:94:6b:
         ef:44:b7:93:6f:2c:9b:8c:b5:ba:fb:65:35:a0:c6:95:49:87:
         b5:00:d4:c9:ed:e6:9a:93:a4:e3:3a:ae:3a:a3:fb:cf:fc:f6:
         ac:c5:37:11:fc:12:25:7c:e3:cf:b2:e3:47:8e:50:31:47:5e:
         be:1f:23:5b:92:97:e3:7f:5a:38:c6:eb:c0:47:0d:11:4f:24:
         a7:5a:a2:22:61:0f:cc:67:9d:da:0b:f1:c4:c1:75:30:fb:fb:
         fc:2b:4e:d9:5b:a9:1f:99:14:5f:38:da:71:22:5f:11:be:79:
         e9:48:99:55:07:2b:dc:32:14:2c:f4:8d:17:37:43:00:b3:37:
         48:ca:1a:fc:c7:0c:b1:26:88:3e:f0:16:f2:20:e2:40:de:3a:
         7a:98:74:3e:3c:32:0d:42:46:bd:1b:2e:8e:e8:69:f0:a1:47:
         d4:3b:da:51:0f:85:76:92:a4:6a:6e:8c:9d:fb:43:b0:58:9c:
         99:c6:a5:43:71:3a:b2:cd:22:98:9b:60:80:0b:57:2b:6c:c6:
         ab:a6:ed:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:20:59 2025 by rpki-client