Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32849744-8667-323b-96ef-3a6d7cf69349.roa
File:                     32849744-8667-323b-96ef-3a6d7cf69349.roa (raw, json)
Hash identifier:          saIxrHlCsCHKrftzKASOEYiGJfGC8f6U/7fmakxT9H0=
Subject key identifier:   DE:6F:DF:03:2F:41:D4:84:91:B4:70:B4:62:71:CD:57:33:FB:82:50
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849CD34C29DA825BE3DBE8AE4F0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32849744-8667-323b-96ef-3a6d7cf69349.roa
Signing time:             Sat 10 May 2025 01:00:47 +0000
ROA not before:           Sat 10 May 2025 01:00:47 +0000
ROA not after:            Fri 08 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        208.213.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cd:34:c2:9d:a8:25:be:3d:be:8a:e4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 01:00:47 2025 GMT
            Not After : Aug  8 01:00:47 2025 GMT
        Subject: CN=af80c0f2-5d03-4107-9997-f1f444210621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:23:30:41:3d:c7:24:eb:e9:eb:d6:fb:3a:
                    d8:ed:c6:3d:96:c1:c8:ee:76:97:27:3f:fc:3c:96:
                    c1:f0:14:69:35:5f:68:b5:b6:fe:6e:0b:77:00:26:
                    95:a8:12:30:5c:8f:ef:61:1a:12:6a:bd:03:ba:50:
                    03:71:da:c4:86:51:9b:dd:0c:c6:d0:a3:e3:49:83:
                    63:85:a8:30:e3:c2:62:1f:d0:34:5a:83:56:d4:ec:
                    d2:14:c2:02:f3:bf:c3:cb:e1:a2:3a:b4:4e:32:fd:
                    ee:7b:03:c4:ce:8a:4b:2d:9a:37:40:29:d4:18:19:
                    86:72:6a:03:c6:d1:a5:bb:26:82:f1:f1:87:c5:38:
                    fb:94:34:bf:02:11:88:78:c4:fe:b7:0e:0e:9e:e6:
                    e3:bd:28:e6:52:37:85:08:cf:33:5d:9b:2d:59:c8:
                    c4:32:32:08:00:33:f0:ee:ea:b3:29:a7:77:5d:f1:
                    e5:97:f5:26:fb:d1:6f:9e:34:02:65:a4:f5:78:bc:
                    b9:5b:8d:24:70:91:6c:3c:99:03:2f:08:cc:0d:72:
                    50:06:28:0d:7a:96:c4:e9:d8:21:f1:3c:3f:53:0f:
                    66:ce:a1:50:4b:7d:6a:af:37:c7:81:13:c8:6f:63:
                    b6:f6:2b:14:65:9d:c0:df:2e:a3:13:60:70:4c:e1:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6F:DF:03:2F:41:D4:84:91:B4:70:B4:62:71:CD:57:33:FB:82:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32849744-8667-323b-96ef-3a6d7cf69349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.213.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ac:21:da:fa:58:37:7f:35:22:e1:0d:8b:b2:03:9b:fd:7e:
         b9:a8:42:aa:d1:c4:0e:04:03:96:26:5e:cd:b1:e1:c4:71:c8:
         21:9b:3f:cc:21:9d:59:c0:28:de:e2:58:30:00:2b:d2:cf:a6:
         c2:2d:e1:a6:bb:6a:0b:88:4c:1d:ee:5f:29:cc:fe:d8:6d:bb:
         88:4f:d7:b3:1f:a3:b4:68:9d:d4:c1:3f:cc:3b:02:27:19:2e:
         39:2b:be:9c:33:32:5f:48:1f:85:86:59:45:51:52:e0:5e:86:
         96:f5:b3:96:d6:3a:0f:cd:d2:a1:e6:c7:0c:dc:6b:b2:7d:7f:
         b0:b5:be:d7:5c:40:5f:4f:86:74:e6:0c:cb:e7:03:91:46:bf:
         0a:d6:fd:aa:9f:e0:d8:d7:38:39:48:9b:69:39:28:36:a7:8b:
         f3:b9:d8:86:e9:85:af:f8:03:bd:2b:67:f1:68:8d:cc:9e:44:
         80:91:00:e7:79:b7:93:08:48:4a:9e:2a:46:83:2e:27:34:36:
         72:d4:89:72:8d:a3:17:ec:9b:7d:7c:ae:e7:84:9a:33:02:1b:
         54:ec:17:8f:d1:b7:32:dd:58:c2:af:75:d9:2f:7e:7e:cd:f8:
         31:9d:8b:4a:27:48:ff:3c:06:54:50:59:86:8d:ac:b3:47:0b:
         5f:aa:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:12:33 2025 by rpki-client