Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e19ec6d-6f9a-37c9-88d8-e1e2ed9e472c.roa
File:                     5e19ec6d-6f9a-37c9-88d8-e1e2ed9e472c.roa (raw, json)
Hash identifier:          hvJjkG017t0wv2hm36FbOIearC6AyTeQ8xp7U6eM9JQ=
Subject key identifier:   CD:DF:2F:C3:6D:2D:99:49:10:0C:46:02:F7:C6:92:43:97:CF:99:01
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848ED4C69B02D92FB2BF707C600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e19ec6d-6f9a-37c9-88d8-e1e2ed9e472c.roa
Signing time:             Tue 18 Feb 2025 20:07:26 +0000
ROA not before:           Tue 18 Feb 2025 20:07:26 +0000
ROA not after:            Mon 19 May 2025 19:07:26 +0000
asID:                     14618
IP address blocks:        208.213.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ed:4c:69:b0:2d:92:fb:2b:f7:07:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 18 20:07:26 2025 GMT
            Not After : May 19 19:07:26 2025 GMT
        Subject: CN=f3e3af53-3996-4c70-a7db-fa253828d40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:d7:b2:ce:e9:6f:3b:b8:86:c9:6b:05:01:
                    6e:48:65:4e:d4:27:51:94:e2:7c:73:29:5b:6e:c5:
                    3f:41:94:cd:08:58:f0:0e:e9:a7:42:fa:bc:ab:13:
                    be:29:6d:f9:9e:14:17:f8:eb:50:56:80:17:45:0c:
                    d7:fd:97:1a:0d:17:28:1f:5c:1e:82:03:58:d4:b0:
                    0c:3b:a6:39:f0:66:a4:fe:15:c2:82:6b:9e:d3:65:
                    c9:9b:b3:44:00:ee:22:68:21:ae:05:b1:9e:a3:4d:
                    07:bc:1f:b3:e3:58:44:55:ac:29:24:8d:2a:02:50:
                    7f:13:50:15:a4:43:20:7f:86:9c:85:cb:02:df:a9:
                    ec:6c:e7:58:a4:1b:b7:b0:75:dc:8d:01:8c:0e:03:
                    0c:5b:f0:74:48:a0:06:f2:ed:00:c9:2c:5f:a3:1a:
                    18:20:3d:63:70:42:11:54:c7:c6:0c:49:9a:f5:40:
                    a0:6b:e1:d4:b2:5a:00:e8:83:99:16:62:7f:9e:d0:
                    ec:80:7f:a5:75:de:5a:b1:6c:e7:e8:35:5d:1b:65:
                    ae:c9:25:82:95:d4:01:8e:c4:95:57:bd:07:f2:80:
                    3c:3c:0f:bb:ec:7b:c4:4a:2b:66:9d:da:88:5a:cf:
                    21:a1:58:ac:82:76:3e:ce:f8:da:79:fa:c7:c3:14:
                    ce:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DF:2F:C3:6D:2D:99:49:10:0C:46:02:F7:C6:92:43:97:CF:99:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e19ec6d-6f9a-37c9-88d8-e1e2ed9e472c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.213.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:54:0d:a3:a3:ba:34:1a:bf:96:9c:c4:48:f7:11:ec:83:fb:
         cf:b1:a5:ca:32:28:6c:6b:e0:b5:f4:d6:e8:93:61:dc:6d:7a:
         51:9c:7d:a6:a2:99:59:d6:44:4c:ca:e4:8c:2c:66:71:1c:30:
         08:21:05:07:42:76:47:de:e2:5a:5b:ca:4d:3b:0e:03:8c:c0:
         05:e9:6c:4c:c4:9f:a5:ed:40:29:d2:7d:e2:a1:e4:fc:89:1f:
         20:54:41:e5:42:b4:b6:68:28:a9:08:35:e7:34:a3:53:ec:d3:
         02:80:0e:09:2e:36:18:a6:7c:e4:db:0e:3c:5e:f3:4b:49:9b:
         d3:df:a5:8a:65:c6:6b:27:6e:7a:5a:5a:49:53:8e:12:c2:a4:
         a2:a9:38:b5:51:8d:91:3f:87:78:48:a9:a7:10:4e:e9:dd:d6:
         32:ad:d0:fc:64:58:39:9e:30:c4:93:a4:44:f2:3c:57:57:54:
         e6:61:90:d5:99:6c:58:88:1c:48:fa:ce:b1:8e:ab:30:24:2c:
         3d:cf:36:42:af:57:23:76:22:56:3f:4b:74:3a:01:74:e1:8e:
         15:66:d0:cb:48:cb:ca:98:97:85:68:ae:bf:f6:6e:c6:4b:90:
         86:b0:a6:0a:9f:56:79:23:7c:d1:46:3c:cf:3d:b6:0a:37:5b:
         71:a7:99:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:14 2025 by rpki-client