Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f51d672a-0d0f-30b9-a846-d80dda8d3b25.roa
File:                     f51d672a-0d0f-30b9-a846-d80dda8d3b25.roa (raw, json)
Hash identifier:          E2yuN9UxyKXGWFbzOhQfsCnR7Wg77gNwA3LCow3eYlg=
Subject key identifier:   25:09:50:8F:C9:78:82:3D:E3:3C:4C:DE:A2:82:AC:90:BB:A8:1B:D3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849CD34C47F9940F39FB8F3BA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f51d672a-0d0f-30b9-a846-d80dda8d3b25.roa
Signing time:             Sat 10 May 2025 01:00:47 +0000
ROA not before:           Sat 10 May 2025 01:00:47 +0000
ROA not after:            Fri 08 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        208.214.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cd:34:c4:7f:99:40:f3:9f:b8:f3:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 01:00:47 2025 GMT
            Not After : Aug  8 01:00:47 2025 GMT
        Subject: CN=b4bbb54b-4b78-4778-a6f6-280821bcb120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1a:0c:b0:72:1a:5a:7b:44:70:3b:66:11:89:
                    46:ca:ff:d1:73:ed:34:97:8a:b8:00:fe:30:d6:a1:
                    99:32:31:89:4a:55:af:aa:ee:d6:9b:38:d7:31:88:
                    6a:c7:66:e0:b4:47:6c:96:a4:44:e6:28:7c:f7:99:
                    28:f9:b5:4a:c9:e6:3c:01:ff:e1:64:0e:78:5d:d0:
                    af:b0:c1:29:42:ac:41:e6:bc:cd:d1:64:28:70:2b:
                    85:89:db:5d:78:6f:83:9f:50:1d:2b:47:77:a8:99:
                    6c:de:17:7e:0c:48:80:03:9b:93:ff:6c:62:f9:5b:
                    ea:25:84:e8:a4:79:53:99:9a:e7:8f:f7:cf:5a:50:
                    87:b7:53:f9:83:ca:47:b5:48:55:8d:7c:3a:b0:15:
                    e9:3b:b7:cd:50:6f:d1:1c:e4:e3:4a:33:47:09:2d:
                    7c:5e:47:e8:cf:28:19:bd:d8:3a:b7:b4:cc:f2:c9:
                    10:4d:69:1a:1a:e9:1c:de:c8:2c:be:89:bb:57:24:
                    4f:a7:d3:70:ec:60:82:30:cb:11:cc:ef:03:3d:5d:
                    d0:32:55:93:f5:40:51:26:8e:e7:b1:62:8e:13:1b:
                    1d:80:f6:05:33:08:4b:a4:eb:a0:64:e0:da:31:05:
                    2e:ee:f9:c8:8c:6a:41:31:b9:0a:78:44:bc:9f:f5:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:09:50:8F:C9:78:82:3D:E3:3C:4C:DE:A2:82:AC:90:BB:A8:1B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f51d672a-0d0f-30b9-a846-d80dda8d3b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.214.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:43:14:f0:9d:88:f5:75:f5:e0:c3:ed:1b:9e:71:ec:b8:b2:
         a7:c5:89:29:b4:9a:ef:85:26:48:31:55:b4:26:70:2e:05:40:
         cb:66:5e:55:9d:23:b3:b8:63:17:ef:b0:e5:6a:bb:bc:cf:89:
         f9:2c:10:c0:31:02:bc:70:46:7f:35:52:56:67:6c:31:22:78:
         17:72:3b:92:43:db:c9:5b:2f:99:68:0c:75:da:83:7d:be:f8:
         a5:27:3c:4c:b9:f4:a3:f9:24:6a:92:28:1b:2b:37:ab:84:37:
         0c:0e:60:71:3f:32:d1:cc:78:1b:d6:dd:ab:08:94:75:89:85:
         57:74:f6:c6:5b:61:e9:8c:77:e5:92:fa:96:10:f2:1e:d4:0f:
         d5:c0:fa:44:ef:8c:16:8a:42:77:d5:91:9e:da:f0:31:22:2b:
         f2:87:d1:41:4b:5b:8d:85:2a:76:83:0d:32:e2:cb:a7:75:2c:
         0c:ec:00:6e:32:a5:99:09:e8:b8:67:8a:73:1d:e8:d5:7c:03:
         c4:0c:53:d9:0e:aa:36:a1:de:a7:9d:82:01:92:73:b7:6c:b1:
         28:e2:d0:86:84:39:bf:2a:69:28:37:21:7d:41:dc:25:67:ab:
         f1:f9:0a:a9:9f:10:3b:b4:41:0e:99:81:09:b3:f2:91:79:6e:
         3e:2c:d2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:58:31 2025 by rpki-client