Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3e6cb035-863b-34e8-bf04-844074ffa1fa.roa
File:                     3e6cb035-863b-34e8-bf04-844074ffa1fa.roa (raw, json)
Hash identifier:          ZN+ZtfgNS2Ul2zf6j6AB3gGG6pnfyGysy/TzCF7Syxg=
Subject key identifier:   B8:DD:61:29:94:07:9B:3B:EC:16:BF:AE:7C:54:B1:6F:BF:E7:DA:90
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584A8575F88636C890279CD58080
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3e6cb035-863b-34e8-bf04-844074ffa1fa.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     3561
IP address blocks:        208.140.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f8:86:36:c8:90:27:9c:d5:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=5c0a4189-ea7f-46f0-a72a-ac0bec9cadcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6e:67:b3:08:42:f0:a3:4e:df:f2:9c:3e:a4:
                    44:4a:30:be:14:ca:ef:da:47:0e:e6:4a:39:71:15:
                    00:cb:91:00:d9:92:2d:33:41:e7:6b:ad:f7:4d:45:
                    90:2b:92:70:29:fa:21:c0:04:33:ee:af:04:2d:75:
                    9d:ae:b6:dc:85:f6:b2:a5:04:b8:a0:3c:45:d9:ca:
                    68:1f:cf:9d:56:64:5f:a2:2b:20:38:c1:d7:fb:b2:
                    c2:d4:ce:62:d1:31:04:6a:f7:39:64:77:47:cc:ed:
                    4c:54:4b:71:23:fd:5a:9a:67:53:01:91:1d:2f:8c:
                    4c:86:35:dc:49:0b:41:0a:08:f1:a2:ad:77:c5:d4:
                    b2:5e:3e:45:34:c2:25:e2:4c:fe:00:e6:77:2b:66:
                    05:cd:e8:b8:8a:1e:b8:64:55:e2:52:6c:ab:63:12:
                    46:8b:2a:88:bd:e5:dc:8c:80:e1:dd:44:2b:b6:f8:
                    2a:0d:45:12:0c:27:4a:95:24:9b:dc:ea:74:ec:14:
                    09:3b:90:30:b2:44:54:c9:66:81:44:bd:66:10:46:
                    2a:66:bb:df:32:99:cd:1f:14:57:3c:fa:0b:70:34:
                    65:ba:97:fe:b7:d2:10:8b:53:af:79:38:86:a6:52:
                    28:f2:46:8c:e6:08:f2:28:50:b9:ec:a2:17:61:3e:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DD:61:29:94:07:9B:3B:EC:16:BF:AE:7C:54:B1:6F:BF:E7:DA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3e6cb035-863b-34e8-bf04-844074ffa1fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.140.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:aa:ee:3d:e6:0b:0f:46:bc:b2:38:b9:38:a1:bf:eb:9b:e0:
         0b:96:aa:e8:53:42:95:ae:e2:8e:53:4f:9e:c0:f9:d2:70:86:
         05:85:a4:fb:81:7f:46:d0:66:b6:7d:4f:60:e1:ca:b0:a5:7a:
         50:38:8a:d8:1c:a9:9a:c8:66:f0:0a:00:cc:d4:11:7c:bf:16:
         7c:5d:6a:c4:67:e4:d0:5b:74:d9:41:b7:e8:a2:a7:1a:35:00:
         c4:5e:f4:ab:54:75:40:bc:ee:c4:f0:13:2a:57:16:ea:d5:f9:
         67:8e:b1:1b:08:1e:f6:13:8e:a2:83:c0:ba:cf:db:e2:70:b0:
         0e:64:eb:31:9d:37:d2:e2:cd:1e:70:2a:6a:98:39:d0:bc:3d:
         d9:8d:cd:e5:f7:fc:71:b9:a4:d6:91:35:cf:ac:36:98:0d:96:
         14:45:5b:f4:cf:d0:88:36:f3:4e:9b:61:98:79:f6:6c:f8:22:
         ed:0f:fa:5f:20:28:8e:98:e1:cb:31:b6:ef:ee:cc:e6:e3:85:
         ab:8d:be:3b:b4:36:74:ec:78:f3:4a:c2:79:9f:e7:d0:b7:67:
         13:71:25:0c:4e:dc:b6:3c:0f:89:b5:5e:51:07:c8:dd:6a:97:
         f7:d4:17:20:ac:3b:fe:4a:c9:30:81:61:2a:87:98:00:ed:0f:
         16:ee:5c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:30:36 2025 by rpki-client