Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a140540-1383-397a-a68a-6f7f03ed2ec9.roa
File:                     6a140540-1383-397a-a68a-6f7f03ed2ec9.roa (raw, json)
Hash identifier:          Ri7mgfii/bIJUtQEiA31vLvOv8pANRcpI1CXuu4Jdrs=
Subject key identifier:   36:2A:58:A9:8A:C9:13:ED:97:2F:26:70:84:08:30:2D:C5:2E:49:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A506AF422A65533A7A7B2F170
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a140540-1383-397a-a68a-6f7f03ed2ec9.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     400903
IP address blocks:        208.208.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:f4:22:a6:55:33:a7:a7:b2:f1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=040480bf-7903-4420-81e5-733e910cc93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b0:96:40:ad:ce:f5:0e:9a:ab:8a:08:12:95:
                    27:63:88:70:34:ea:5e:ad:f4:7b:39:98:5e:3c:c4:
                    a0:55:dd:8d:d2:de:f7:43:21:69:77:70:1a:87:7c:
                    6a:5a:4a:fa:eb:b6:7d:e8:bb:08:88:54:ec:06:49:
                    ca:b9:d2:41:d3:ce:bf:89:fe:f8:aa:83:d3:0e:ce:
                    ac:6f:a5:b5:24:a5:00:d9:24:24:db:e5:86:5c:5a:
                    a2:32:df:eb:eb:69:47:5d:b5:7d:e7:53:80:ac:ae:
                    47:78:42:6b:b9:4f:6b:51:f7:a9:af:2c:7d:e6:d6:
                    50:4a:18:ee:05:1e:64:c9:97:db:43:88:e9:5a:6d:
                    9b:85:af:ef:52:e2:3e:da:4a:11:6d:f1:52:95:b6:
                    fe:56:b7:e9:44:f7:a7:44:4a:6d:4a:5e:2e:35:ce:
                    4f:f8:e4:46:3b:30:d6:66:7a:01:30:1d:d0:8c:a3:
                    b5:93:69:78:e9:04:a5:2b:a8:31:72:b8:6a:cc:a2:
                    d8:f9:ef:67:c3:4c:94:49:44:6a:80:74:c5:eb:bb:
                    81:af:76:04:7d:77:14:26:9d:6e:ab:6c:a0:b4:9a:
                    66:12:2c:18:53:88:f9:88:b5:ef:eb:26:8d:93:b0:
                    50:e5:78:3a:c6:6d:fa:92:4f:44:f1:9c:31:db:f7:
                    45:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2A:58:A9:8A:C9:13:ED:97:2F:26:70:84:08:30:2D:C5:2E:49:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a140540-1383-397a-a68a-6f7f03ed2ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.208.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:4c:b1:37:b2:cb:63:ca:6d:21:97:5e:27:98:07:74:c8:53:
         4b:77:ea:ae:49:6c:7c:bd:f5:22:1c:dc:b2:4e:2c:5a:e4:c0:
         67:4c:5c:c3:3e:77:d6:7b:05:e1:05:3e:30:2b:5a:1b:a3:c4:
         22:61:51:81:ba:a2:b8:61:77:0e:5a:cc:08:25:3f:d6:db:15:
         94:fd:a4:9c:46:cf:49:1a:c3:0d:f0:06:cc:58:f7:60:d7:9c:
         4a:9b:d0:7e:bd:bf:32:ae:fd:13:9e:6e:9d:fe:37:36:94:ee:
         01:34:79:0c:95:e0:f9:04:03:02:02:3b:d6:6e:73:32:4b:10:
         dc:23:7d:86:ea:ef:3f:0a:2a:9b:bf:82:35:12:ab:23:ed:8b:
         b1:a3:b7:ed:48:dd:a5:58:d8:ee:02:2b:69:ef:64:9f:b4:81:
         c8:8b:0b:3e:fa:67:c9:95:ed:4c:eb:7d:db:7b:2c:d6:fb:03:
         26:10:fc:e0:d9:83:d2:8b:91:be:5b:b1:7e:45:2a:e6:59:ef:
         87:5c:d9:7a:48:61:2d:c0:56:ee:12:e5:e9:92:a0:40:0c:57:
         fc:e0:fd:7e:39:7f:11:04:72:6e:18:ba:e8:7e:df:3e:eb:7c:
         86:18:88:c4:50:02:e3:72:ab:94:0e:8c:21:7c:77:29:09:b4:
         af:42:a8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:53:59 2025 by rpki-client