Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0663685-4884-3cf3-8de1-3d99c5b7bc7c.roa
File:                     e0663685-4884-3cf3-8de1-3d99c5b7bc7c.roa (raw, json)
Hash identifier:          P2uxN7y1uTn0j8fxNMJTg5eHDjIy9LIk69qUMHR6C34=
Subject key identifier:   A5:25:A8:D2:69:1C:81:1D:C2:AD:3B:B0:FD:4B:A9:1C:A1:C6:AB:7B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196A8FDA486318E700AF7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0663685-4884-3cf3-8de1-3d99c5b7bc7c.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     22394
IP address blocks:        141.207.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:a8:fd:a4:86:31:8e:70:0a:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=23514f5c-c7de-4f07-99f5-96997b42eff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:52:cf:3d:4f:79:30:e5:80:e3:c0:51:65:
                    0a:6b:6e:db:ea:bc:75:19:a8:ad:62:df:d0:06:ed:
                    4c:9e:ba:7d:1e:1e:54:29:a8:a1:b0:d9:6d:35:38:
                    24:98:9c:3a:a3:a2:d6:b5:f4:47:b9:6f:1a:4d:c3:
                    a2:fc:6f:6e:de:5d:d1:72:22:e0:6d:75:82:90:68:
                    b0:b4:15:30:4e:79:43:c8:62:2f:2f:ff:76:73:6e:
                    e5:f0:98:fa:a4:f6:50:a8:3a:23:b3:b0:5a:6a:fa:
                    9c:b6:34:17:7e:90:58:eb:b2:67:73:39:e7:e4:5c:
                    11:3a:3a:7d:cc:9d:43:65:fd:59:9f:d4:27:7e:4d:
                    ac:40:f3:24:34:6f:13:4f:e2:74:52:82:86:d2:1a:
                    20:23:d3:99:39:89:d0:68:60:6d:2d:c4:1d:8b:50:
                    27:5d:46:4f:f3:d8:2e:4d:66:9c:f5:c4:5d:5f:13:
                    95:4e:9f:27:53:d0:40:7c:34:12:32:e2:5d:78:13:
                    7b:06:32:2d:7a:0e:59:46:1e:39:18:d0:22:c8:e1:
                    74:28:5c:88:35:b3:9f:1e:57:48:b2:a8:71:de:11:
                    b8:2d:0d:c5:0f:14:ec:34:08:fd:d7:68:cb:6c:57:
                    db:e3:7f:6f:da:cd:39:58:6a:80:4e:fd:99:dc:ac:
                    03:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:25:A8:D2:69:1C:81:1D:C2:AD:3B:B0:FD:4B:A9:1C:A1:C6:AB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0663685-4884-3cf3-8de1-3d99c5b7bc7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:ec:03:a0:04:1f:b1:b2:ed:22:d7:f5:ff:e5:6a:31:94:7b:
         8f:78:53:98:45:da:a3:78:8d:79:67:86:24:5a:48:98:13:d5:
         53:7b:2c:85:2a:c6:0d:74:53:f0:b9:e7:14:8e:75:bc:23:71:
         88:55:78:a3:d4:c3:84:2e:f2:35:c9:fa:e4:74:d2:0d:04:aa:
         e0:07:49:31:34:b6:34:17:11:6b:7d:a3:cc:d4:20:e8:ab:02:
         8c:41:7b:e4:27:d6:40:6a:36:d4:6c:b5:fd:70:b0:a9:5c:7c:
         9f:02:2c:28:8c:bb:df:01:4a:2b:da:ba:7e:cb:17:de:01:bc:
         6a:ee:c2:08:ce:45:37:f3:1e:38:a6:33:cd:dc:29:13:37:43:
         86:8d:2b:48:ca:45:6c:d4:fb:e3:09:5f:51:aa:b0:12:f6:52:
         ca:63:d7:bf:ac:82:25:00:78:57:f7:07:32:b8:5b:e2:e8:01:
         39:6e:c0:16:9c:73:36:e8:4d:7c:08:ba:a1:10:fe:97:5e:08:
         b6:2a:1a:cc:29:9c:f9:d6:00:1d:30:b4:9b:3b:34:ea:46:c1:
         33:51:8e:f9:15:92:0a:d8:4d:b9:55:94:b4:46:f1:93:2f:b4:
         6c:01:00:16:75:78:e5:bb:99:d1:61:2a:fe:48:be:df:3d:a0:
         e5:18:88:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:24 2025 by rpki-client