Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f51d672a-0d0f-30b9-a846-d80dda8d3b25.roa
File:                     f51d672a-0d0f-30b9-a846-d80dda8d3b25.roa (raw, json)
Hash identifier:          H+bYiF9GVIbTSlx/ArcyyBFvNtxCrtwPLDxK1xCc2zU=
Subject key identifier:   FB:FC:71:EA:35:C8:4D:5C:61:4B:27:3E:8D:60:E3:F8:2D:27:76:32
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848ED4C6C3D66FE976BF8FE5E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f51d672a-0d0f-30b9-a846-d80dda8d3b25.roa
Signing time:             Tue 18 Feb 2025 20:07:27 +0000
ROA not before:           Tue 18 Feb 2025 20:07:27 +0000
ROA not after:            Mon 19 May 2025 19:07:27 +0000
asID:                     14618
IP address blocks:        208.214.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ed:4c:6c:3d:66:fe:97:6b:f8:fe:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 18 20:07:27 2025 GMT
            Not After : May 19 19:07:27 2025 GMT
        Subject: CN=8d7699a7-efa3-41b3-b5c9-a92679640393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e0:67:fb:02:66:a0:ce:41:67:d5:14:96:cc:
                    00:24:22:43:01:7b:07:88:8f:36:30:af:77:8f:c1:
                    15:9e:1b:2e:dd:0d:68:37:b0:21:58:0d:cd:7d:7c:
                    73:61:27:de:ba:89:5f:78:e5:a2:46:8d:b1:a4:16:
                    0e:4d:e6:a0:b5:74:fc:3a:88:34:80:e9:63:dc:37:
                    0c:8c:6b:a0:b8:80:48:6f:a5:f9:b3:fd:ad:d7:d3:
                    cd:bc:c9:19:4e:4f:f3:9e:5a:eb:d3:cd:bc:b9:cc:
                    5b:97:b2:4b:fd:51:1d:8d:51:ff:b9:dc:0d:58:98:
                    d7:0b:4e:3a:bb:85:b9:e8:9a:e3:ad:58:40:eb:f1:
                    72:fc:be:a5:3e:a7:00:5d:d4:6d:ae:44:14:3f:f6:
                    f4:c7:ff:a5:ad:13:4a:94:11:ab:80:03:dc:77:c2:
                    04:4a:5d:89:5b:bd:53:53:ab:e7:e5:35:8d:3b:3d:
                    94:5d:bf:c9:44:ea:66:34:7f:58:65:cf:f1:60:df:
                    cd:ea:f9:aa:f0:c9:62:b3:da:c4:83:16:92:a2:90:
                    3e:4b:4f:f1:f2:db:e5:63:fe:1b:72:cf:fd:3a:a0:
                    9c:ac:dc:87:f1:87:81:3c:64:e4:22:79:af:3a:59:
                    61:db:74:9b:f2:3a:0b:f8:f3:8a:dd:3a:ee:2b:7a:
                    33:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FC:71:EA:35:C8:4D:5C:61:4B:27:3E:8D:60:E3:F8:2D:27:76:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f51d672a-0d0f-30b9-a846-d80dda8d3b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.214.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:59:be:e7:9f:81:40:2c:4b:b0:69:66:df:d3:1d:06:0a:2b:
         fa:95:50:ee:57:5f:ba:42:3a:d6:70:e9:e2:74:94:1e:09:8c:
         31:ea:08:96:50:5c:81:84:1f:f2:f4:11:ca:99:4c:bf:39:85:
         95:b9:02:d5:45:16:cf:80:07:07:93:67:79:73:c6:16:2a:13:
         3a:a9:fb:ce:1d:96:9b:df:f0:5b:2a:37:c3:36:22:f2:5f:c4:
         ea:4b:e6:99:8d:14:d4:17:5d:ee:f3:c5:a7:03:df:a4:53:46:
         17:b9:d8:96:37:bd:5d:8e:27:bc:4f:74:be:19:3d:c3:54:56:
         79:83:a4:ab:72:6d:a0:11:7c:8d:a0:e9:e8:25:3a:8b:d7:3d:
         10:58:9a:4c:1b:bd:91:34:6e:c3:fa:e1:19:b0:15:7a:f2:ec:
         de:df:d2:86:30:84:7d:37:b5:0c:27:7e:42:4e:91:12:13:b6:
         63:16:ec:c1:3c:b1:77:8f:19:e8:c2:80:17:5c:a0:70:1a:93:
         5f:35:b3:52:cc:9e:a5:0a:54:8e:24:d7:03:dd:4f:58:61:0a:
         8b:36:0a:2f:c8:5a:6b:4f:68:05:99:f4:29:44:54:a3:49:80:
         3e:c1:dc:e8:7d:00:89:ee:cf:7a:bd:d8:d7:0f:12:54:19:16:
         d3:90:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:10 2025 by rpki-client