Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa
File:                     0f9a93b5-1896-3553-add4-16df12179fd0.roa (raw, json)
Hash identifier:          m+iBs6LWMZX8e881FIXMoIrzGtmNM5WW0/h785iQRp0=
Subject key identifier:   9F:28:05:3E:4C:45:70:31:82:1B:17:4B:88:94:AE:08:40:9D:27:2A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D4D5A9A8E220B860B9BC5F610
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        208.214.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:9a:8e:22:0b:86:0b:9b:c5:f6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=20caf7a0-1468-465d-b400-7cc144888374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8d:42:1c:59:18:0f:2d:a0:75:16:a1:21:e0:
                    19:62:76:d8:4b:7b:82:c3:0c:f8:27:3d:e1:e2:8c:
                    7c:8e:e5:a3:09:29:dc:3e:18:88:f0:4b:af:a6:49:
                    1f:82:da:d1:49:5f:8f:c3:1f:f7:00:36:33:4b:f4:
                    3a:21:57:aa:f3:55:fa:24:dd:fd:27:2a:39:a8:50:
                    c7:48:93:8e:a6:11:b8:51:6a:ff:91:cd:d1:41:ef:
                    2d:b2:a9:74:b9:86:25:6e:de:a2:a0:45:20:f5:45:
                    9c:bb:81:17:7b:d4:63:d3:7f:3d:c3:99:06:64:f5:
                    6b:f1:82:d7:a5:67:bd:2b:c1:00:18:61:f4:1a:90:
                    63:c7:e2:79:9f:d1:1f:ff:4e:35:43:c6:62:7a:79:
                    54:26:15:f0:97:91:bb:4a:61:2e:87:36:1c:8b:f3:
                    c9:39:c0:64:76:61:d8:64:41:c1:5a:a5:96:a7:fa:
                    00:21:91:76:58:28:6c:02:4f:a8:ab:29:5e:e9:2b:
                    4e:79:8b:8c:43:1c:d8:b5:bd:51:f0:d9:d4:f5:06:
                    62:5a:18:a8:3d:5a:24:01:13:fd:d1:f9:70:f8:f9:
                    e5:54:d9:cf:02:df:04:33:fa:0f:ec:1e:0d:92:34:
                    ce:e7:c1:47:45:6f:36:8d:d3:16:dc:a8:11:cc:92:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:28:05:3E:4C:45:70:31:82:1B:17:4B:88:94:AE:08:40:9D:27:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.214.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b9:0d:66:c4:3b:42:1d:12:47:72:eb:6f:12:1d:6f:95:33:
         ea:2e:70:cf:4c:26:2e:3f:f8:4b:21:5d:39:ab:05:57:41:14:
         5a:1e:48:e1:9c:78:6a:21:e6:73:55:94:30:99:3b:db:b6:90:
         fd:97:68:69:91:bd:44:ed:b5:4b:fd:a1:f2:54:01:fb:39:f1:
         e2:ed:a3:3a:fe:89:f6:d5:0f:e9:16:c2:dc:30:24:fd:ff:cd:
         78:57:eb:e4:68:d7:8d:07:ec:85:95:63:1b:8e:84:89:ed:75:
         2e:07:e0:29:a7:65:87:45:b4:67:89:4f:ee:a0:7d:9a:ea:17:
         47:f6:1c:5d:4f:04:6a:49:23:57:b3:5d:86:4d:3d:84:ad:56:
         f8:b1:91:f5:9a:03:fe:11:44:18:6a:5e:b7:1f:6d:1c:b0:1c:
         b1:ce:5e:55:47:10:cf:bb:4f:91:a9:8c:51:d6:a0:3d:10:0a:
         8c:0c:a5:9b:58:bd:f7:a3:75:1b:77:30:b6:14:34:ac:6f:52:
         90:29:db:f2:40:b3:bd:e3:f3:e9:4e:93:d4:92:1a:05:57:87:
         99:9a:46:8f:96:d7:c3:ec:9a:78:5a:2a:45:15:de:75:23:9b:
         47:7d:38:c1:57:f6:3b:5f:60:34:6d:44:37:70:f1:f4:5a:c1:
         94:14:ed:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 18:27:22 2026 by rpki-client