Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6dac7c36-b5fa-3a4f-87ac-6aa59f544f8a.roa
File:                     6dac7c36-b5fa-3a4f-87ac-6aa59f544f8a.roa (raw, json)
Hash identifier:          s3tct5hbvAVAk/tuncPMVl7563qBlrhbEvunQ3MIK/Q=
Subject key identifier:   44:7B:B2:6D:15:EA:34:CF:14:A9:89:5D:18:5F:9B:79:5B:13:40:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36CE2075073ACFA837B000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6dac7c36-b5fa-3a4f-87ac-6aa59f544f8a.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     393567
IP address blocks:        208.36.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ce:20:75:07:3a:cf:a8:37:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=71219aaa-3dd8-4c82-b3ff-cd85d99ab6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:90:b5:c2:36:74:91:33:83:8c:15:fa:51:
                    34:73:da:e5:d8:97:e5:90:35:9e:b0:74:20:4a:74:
                    ea:ca:47:04:1f:bd:df:86:1f:42:ad:e5:b6:07:ad:
                    e6:f7:21:bf:29:07:14:8b:b9:fa:dd:a2:1b:46:aa:
                    39:8e:da:94:28:25:72:a6:68:7a:6e:d8:df:a4:fe:
                    8a:35:e9:7b:2d:5e:d7:8f:5d:e5:d7:00:09:74:11:
                    68:99:67:ea:61:9f:14:9c:16:82:5a:60:c7:a1:1c:
                    7f:cd:04:54:8c:4f:aa:c7:87:ac:97:ab:d4:19:8e:
                    ab:2b:55:99:77:19:90:62:6e:63:b4:59:ad:f0:7c:
                    39:0f:f3:33:ff:61:00:9f:54:d4:01:0d:78:af:d4:
                    ea:bd:00:bf:2e:ee:4f:55:5f:cd:8f:b1:78:3a:4f:
                    b8:30:80:53:b8:32:54:47:41:08:34:25:6a:c8:80:
                    54:a9:40:75:51:4a:86:cb:28:fd:36:c0:56:3d:cf:
                    ed:be:3c:c9:7f:14:fa:1e:f2:ba:b1:4a:81:4d:b1:
                    5b:b8:06:ee:6b:85:f9:13:e5:9b:42:1f:4b:53:47:
                    11:56:a7:4d:73:b6:69:7b:43:bc:bb:65:d2:6e:63:
                    c7:23:a4:e4:e5:53:5c:66:94:35:5c:54:b6:89:54:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7B:B2:6D:15:EA:34:CF:14:A9:89:5D:18:5F:9B:79:5B:13:40:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6dac7c36-b5fa-3a4f-87ac-6aa59f544f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.36.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1f:54:de:e4:65:0a:75:8c:d4:18:54:27:ad:bf:ff:a4:2a:
         37:c9:9a:c4:0a:0f:28:10:00:03:30:a4:02:db:67:c4:84:45:
         d5:19:56:cf:9d:54:45:f5:ec:f4:2b:4d:31:62:ca:51:c7:d2:
         58:85:04:ed:57:67:c3:49:fe:2a:6f:2d:62:c7:7c:2d:ea:ca:
         60:95:4c:76:ca:65:78:11:44:bd:d3:9b:10:f2:8d:8e:49:3f:
         c5:6a:e7:74:69:8e:33:b1:2b:57:bf:a5:2d:64:dd:e0:8d:84:
         9c:f7:40:49:93:cd:bd:0e:01:4a:74:18:d5:79:d4:50:02:46:
         b0:dc:34:13:b2:39:5f:85:27:81:29:13:56:7a:26:ea:1f:58:
         08:32:b3:62:50:2f:59:5d:b1:00:2c:13:9c:5e:a7:b8:f7:88:
         5b:d8:12:b4:96:a0:f6:ff:ec:50:16:09:88:b4:df:a9:6e:ef:
         0a:ee:bd:2d:0b:56:f7:9a:0d:4e:1d:7b:a3:61:88:d2:6b:80:
         41:68:ad:9c:89:18:54:bc:77:a4:eb:24:21:39:e9:54:b1:99:
         19:82:5d:9b:a1:5a:89:e7:d5:31:ba:47:16:8b:60:8d:79:ff:
         54:70:9d:1c:5c:56:ad:02:b9:8a:33:ed:f7:e0:1f:6e:1c:12:
         57:d8:de:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:00:12 2025 by rpki-client