Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3dec2bd-6e0f-3bc9-901d-0cf8ec36a814.roa
File:                     c3dec2bd-6e0f-3bc9-901d-0cf8ec36a814.roa (raw, json)
Hash identifier:          aQ0oJ35cGJaG9n+vnUFhYSis/ZDt5mA8MrUjm2jkyYQ=
Subject key identifier:   B0:CE:1B:12:42:87:AB:B4:A6:E7:2F:E1:27:3B:33:99:78:D6:9D:D6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B8D477DF1547D7167CE05C500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3dec2bd-6e0f-3bc9-901d-0cf8ec36a814.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     14618
IP address blocks:        208.214.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:47:7d:f1:54:7d:71:67:ce:05:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=b4a6bf1b-22ed-465f-9da9-2d88ffa35946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7e:27:82:39:ed:3b:5e:d8:0f:0d:29:74:89:
                    9c:bd:f3:30:80:13:fb:33:a8:34:e8:f7:21:c1:15:
                    59:6c:76:3e:88:d1:03:71:0c:a9:85:67:16:f0:10:
                    30:e7:cd:59:af:42:39:54:29:f3:3c:48:a3:bf:14:
                    f5:fd:c7:d9:ce:73:67:45:40:8f:4b:f8:52:59:78:
                    76:fd:0d:cb:7e:70:8d:11:62:10:0b:ac:ea:32:fc:
                    58:b4:4f:6c:b6:2f:bd:c0:5e:93:e9:df:1a:07:c2:
                    4a:35:cd:0f:c2:fd:4f:9f:b7:98:4b:9a:09:8e:05:
                    0e:77:1f:06:21:5e:de:21:35:88:06:5c:d1:7f:86:
                    b9:86:22:cb:1e:8d:1a:a8:b9:e9:c3:cb:ab:32:90:
                    7a:27:60:df:a5:ca:df:96:ee:d2:fa:46:00:1c:d9:
                    cf:fe:32:b8:62:f6:d7:14:da:17:55:74:99:b9:e3:
                    02:5f:2e:dd:7b:e2:75:bb:59:79:45:2b:24:24:e4:
                    d0:14:b1:ac:a8:31:7e:44:52:1e:d8:a2:fd:01:96:
                    29:50:c3:68:10:f1:c8:d0:8a:35:81:26:f0:22:8c:
                    18:b5:fa:03:5b:15:4a:12:e1:5b:48:ba:1e:f1:67:
                    61:96:b1:cc:9c:bd:92:d8:e3:72:4d:65:c9:8b:bc:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CE:1B:12:42:87:AB:B4:A6:E7:2F:E1:27:3B:33:99:78:D6:9D:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3dec2bd-6e0f-3bc9-901d-0cf8ec36a814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.214.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:30:13:64:00:a1:54:11:2b:e1:ce:38:a1:0a:ed:00:46:21:
         46:41:09:b0:37:ed:97:60:1e:1f:ca:82:23:b8:c0:82:d9:af:
         87:2e:16:50:55:18:52:3d:b0:32:ef:2f:ad:ae:fe:e4:0c:13:
         3a:d7:a5:4f:ed:f7:13:b5:bc:27:9e:20:66:c7:66:a3:d9:5c:
         79:54:08:f7:d6:c6:92:6e:34:80:46:30:cc:ea:8e:35:43:3f:
         d9:97:32:a5:cd:79:8b:36:04:19:d4:a2:33:3e:4e:96:38:f9:
         91:f0:42:e8:bb:75:c8:d8:a8:8b:bc:54:2d:6c:e2:e3:74:8c:
         bd:9a:3d:ac:cd:80:13:b9:7f:55:6c:18:1d:24:b1:1e:19:f5:
         cb:6d:16:ec:ad:b5:29:05:db:93:f1:9c:cf:97:e5:15:21:73:
         0b:1d:23:db:06:8a:f6:fe:8c:92:6b:1c:d3:65:19:9d:f6:da:
         50:ab:f6:27:db:8c:ef:04:0d:54:55:4f:73:d2:f5:03:73:d6:
         10:c1:1a:20:21:6a:4a:40:f2:e4:06:81:2c:51:30:e8:b7:20:
         7a:2c:ec:e2:be:c9:d1:cd:a3:60:dd:be:e5:b5:dd:c4:b8:22:
         40:c6:f7:e7:67:c1:dd:d5:c3:97:49:70:92:12:1e:f3:06:48:
         b0:b1:5e:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNR33xVH1xZ84FxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk
YjRhNmJmMWItMjJlZC00NjVmLTlkYTktMmQ4OGZmYTM1OTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn4ngjntO17YDw0pdImcvfMwgBP7M6g06Pch
wRVZbHY+iNEDcQyphWcW8BAw581Zr0I5VCnzPEijvxT1/cfZznNnRUCPS/hSWXh2
/Q3LfnCNEWIQC6zqMvxYtE9sti+9wF6T6d8aB8JKNc0Pwv1Pn7eYS5oJjgUOdx8G
IV7eITWIBlzRf4a5hiLLHo0aqLnpw8urMpB6J2Dfpcrflu7S+kYAHNnP/jK4YvbX
FNoXVXSZueMCXy7de+J1u1l5RSskJOTQFLGsqDF+RFIe2KL9AZYpUMNoEPHI0Io1
gSbwIowYtfoDWxVKEuFbSLoe8WdhlrHMnL2S2ONyTWXJi7ymcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLDOGxJCh6u0pucv4Sc7M5l41p3WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzNkZWMyYmQtNmUwZi0z
YmM5LTkwMWQtMGNmOGVjMzZhODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NbkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGEwE2QAoVQRK+HOOKEK7QBGIUZBCbA37ZdgHh/KgiO4wILZr4cuFlBV
GFI9sDLvL62u/uQMEzrXpU/t9xO1vCeeIGbHZqPZXHlUCPfWxpJuNIBGMMzqjjVD
P9mXMqXNeYs2BBnUojM+TpY4+ZHwQui7dcjYqIu8VC1s4uN0jL2aPazNgBO5f1Vs
GB0ksR4Z9cttFuyttSkF25PxnM+X5RUhcwsdI9sGivb+jJJrHNNlGZ322lCr9ifb
jO8EDVRVT3PS9QNz1hDBGiAhakpA8uQGgSxRMOi3IHos7OK+ydHNo2DdvuW13cS4
IkDG9+dnwd3Vw5dJcJISHvMGSLCxXqw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:40 2025 by rpki-client