Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3e6cb035-863b-34e8-bf04-844074ffa1fa.roa
File:                     3e6cb035-863b-34e8-bf04-844074ffa1fa.roa (raw, json)
Hash identifier:          j9+tcsVBJaAyZ8jXkH+f1lVeAk2TG4QgH05Zfm9M/D0=
Subject key identifier:   1F:06:80:D7:CF:4E:69:56:04:C0:0B:AC:C8:59:06:D6:AD:18:C8:F3
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584B6631F6F33074450A8BB12400
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3e6cb035-863b-34e8-bf04-844074ffa1fa.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     3561
IP address blocks:        208.140.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:f6:f3:30:74:45:0a:8b:b1:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=db9a40cc-1952-496f-9292-1f32c8909dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0d:d1:e4:8a:5b:97:55:9a:c3:67:dc:2a:1d:
                    ec:2f:9b:84:81:38:21:70:e5:ce:e6:16:c5:dc:c8:
                    1f:7c:9b:21:84:f2:b7:83:04:cd:fc:18:db:3a:66:
                    c5:26:8d:4f:94:56:93:90:69:fa:3a:e0:b0:b6:d4:
                    49:e0:47:27:3e:ad:a1:b7:78:9e:f0:ba:4b:ed:53:
                    22:9b:12:24:e2:75:e8:e7:d0:20:55:50:a5:33:d8:
                    c7:24:61:50:97:57:53:21:e2:b8:48:58:52:5e:9e:
                    16:47:63:10:11:79:ea:48:98:4a:7f:13:dd:fb:1d:
                    22:91:af:28:b9:63:6b:35:49:7d:2a:c1:2d:f7:25:
                    88:60:b3:84:5e:45:02:4e:08:31:1d:ce:53:2d:e3:
                    bd:5a:bb:dc:eb:50:62:de:4c:31:a6:cd:d0:a0:8f:
                    05:e2:18:52:f9:26:59:ca:75:27:a4:48:57:2a:72:
                    cd:15:9f:4c:b3:b2:83:6b:d5:f3:27:a5:08:53:7f:
                    b6:43:2e:d0:73:f1:73:7c:6f:64:ef:17:46:3f:34:
                    84:da:2b:17:4b:7a:be:7f:fe:6c:6e:ce:1c:e6:ec:
                    3e:3f:6f:9a:23:f8:74:9c:0e:87:ac:8e:22:74:e6:
                    8c:65:35:f7:ae:a8:c5:70:4e:0c:ed:85:1c:78:5d:
                    3a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:06:80:D7:CF:4E:69:56:04:C0:0B:AC:C8:59:06:D6:AD:18:C8:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3e6cb035-863b-34e8-bf04-844074ffa1fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.140.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e3:98:73:79:a0:96:52:36:9c:49:78:8b:4f:c5:8f:1c:3c:
         53:03:f1:d9:ab:73:7d:95:3f:74:64:4c:47:cf:e0:11:63:b3:
         d7:d7:44:dd:09:44:91:80:de:61:ed:81:5d:6c:14:06:fc:ea:
         a1:71:7d:ad:5a:10:b5:4b:23:83:04:90:8e:b3:db:b3:92:f8:
         f0:5f:1f:c5:1d:3f:8d:e7:2d:75:0d:57:18:79:10:5b:47:85:
         a7:a7:f9:6f:00:13:ba:66:cf:16:58:c5:b0:dc:58:1d:05:7d:
         e8:4c:1d:78:bf:03:f3:13:a0:99:1a:10:02:1a:48:35:5e:59:
         50:a6:98:d1:99:30:13:55:13:96:b3:0c:a8:f8:99:cb:8d:20:
         67:7f:0f:14:78:2e:92:a2:84:9e:3e:02:83:21:89:6a:7c:eb:
         62:2b:0e:2f:14:1c:9f:9e:c1:43:65:2b:5f:30:70:cc:1b:92:
         e4:7e:f2:81:96:b6:0b:0e:17:78:da:51:2f:c5:57:af:f5:46:
         7c:b7:5b:8e:2c:22:1f:16:cb:ed:3d:42:58:9e:b2:c7:bd:59:
         32:ea:28:cd:80:7a:55:04:f0:65:53:f7:74:bc:9c:55:84:57:
         12:49:c0:82:13:0c:1d:4f:51:8c:ea:f0:9f:b3:7c:73:9e:66:
         f1:77:d4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:35:14 2025 by rpki-client