Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12b68af6-fb23-36a0-803d-238e6535b899.roa
File:                     12b68af6-fb23-36a0-803d-238e6535b899.roa (raw, json)
Hash identifier:          uIsX/9s8PI8m5cUhsGvrbxOH9iOPdY15n6i+GUIu2SM=
Subject key identifier:   75:B0:B9:BC:8C:60:F9:2E:58:C0:2C:D4:27:E1:1D:1F:62:D9:CF:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B196C1F1DB851FA9558D84E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12b68af6-fb23-36a0-803d-238e6535b899.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     0
IP address blocks:        208.215.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:1f:1d:b8:51:fa:95:58:d8:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=57ada4e2-77cc-46d3-9439-29dd938fb364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:d2:15:4f:90:0f:cb:c6:be:89:42:0a:29:
                    bc:14:29:20:ec:60:a9:aa:e2:c0:36:43:b9:d7:75:
                    18:39:c1:93:8c:ce:5a:2b:65:cb:15:0c:ee:06:61:
                    69:cd:9a:53:e3:13:3d:5e:6a:44:59:54:c1:12:b2:
                    41:b8:b0:8d:64:1d:d4:6d:79:65:d6:ff:3e:1f:f8:
                    13:17:01:41:a2:00:7a:7d:de:fa:e8:96:08:1b:ed:
                    f7:7f:67:f9:b7:ed:dc:bf:73:2e:42:a9:f1:29:60:
                    2b:ca:dc:10:f9:0a:81:f9:08:61:83:fd:c4:40:cf:
                    e4:08:83:e8:05:c2:54:42:e4:a4:39:60:a1:db:25:
                    be:dd:6a:0f:a7:0d:25:11:c4:bb:d4:50:ba:46:8d:
                    86:e1:e9:c4:77:4d:75:fa:00:2f:9b:86:26:e7:4c:
                    f8:22:90:33:4e:0a:5c:0e:10:7d:b0:36:2a:4f:69:
                    2c:16:bd:1e:ef:2a:c8:a1:31:b8:f0:59:fb:51:56:
                    54:2c:ed:15:98:5b:bd:91:6a:60:d4:d3:15:c3:5e:
                    7d:ac:5e:b7:96:a2:d5:c1:a4:3e:8e:b7:1b:bf:70:
                    5f:3c:c1:92:7c:07:ca:b2:89:2d:46:0f:6f:33:eb:
                    9b:42:91:e4:6a:08:77:37:42:1a:2e:c1:b3:f9:45:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B0:B9:BC:8C:60:F9:2E:58:C0:2C:D4:27:E1:1D:1F:62:D9:CF:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12b68af6-fb23-36a0-803d-238e6535b899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.215.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e8:57:e8:a7:d7:ca:e5:7f:5b:0b:c8:9f:22:aa:9e:75:17:
         56:87:0d:7d:9f:b5:da:ee:1b:77:d8:61:6b:27:3f:f6:4e:81:
         94:e4:31:ed:fd:04:28:79:8f:64:63:6b:30:27:65:e5:c8:fa:
         f1:ce:02:08:94:51:7f:45:27:bb:3b:06:23:dd:67:01:d4:02:
         ad:2c:67:38:4f:a1:a8:8a:03:2c:d5:cb:f1:74:5f:9b:e3:8b:
         90:50:fd:66:02:d9:f4:87:34:9c:96:51:b5:80:af:cd:9a:10:
         82:90:2f:38:e9:c0:ce:0f:15:27:18:aa:28:12:be:25:ce:d4:
         6b:5f:0d:c7:7d:23:e4:92:c6:8f:c4:0f:e5:dd:b6:05:af:b3:
         2e:6a:1b:ba:0f:92:be:25:fc:68:eb:6f:bf:e5:ee:71:7c:f4:
         c6:dd:d3:e6:0b:f1:3c:39:03:e6:a8:dd:87:b6:e6:86:14:31:
         c1:ed:d3:db:f5:73:55:1c:eb:7e:de:78:a0:89:40:a8:3c:0f:
         2d:cb:a7:b9:06:d3:6d:6f:ca:94:b0:8b:7e:1f:fe:1e:3e:82:
         7e:53:82:d1:67:f6:f4:b4:4f:1d:32:ae:f5:28:7a:05:3f:7d:
         bf:37:dd:e6:f7:49:64:19:31:67:61:17:09:9e:13:30:68:a1:
         0f:4c:03:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:11 2025 by rpki-client