Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3e6cb035-863b-34e8-bf04-844074ffa1fa.roa
File:                     3e6cb035-863b-34e8-bf04-844074ffa1fa.roa (raw, json)
Hash identifier:          /nvzZtR/VXxwxbkt7p7r5s8RzCFuTW9VNK/FhBWK0XA=
Subject key identifier:   69:46:23:D5:FB:E7:59:3E:BB:E7:4A:E3:CA:56:13:46:D4:9A:1E:74
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285848C6E633D5CC8E5B7B6D8FA7C0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3e6cb035-863b-34e8-bf04-844074ffa1fa.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     3561
IP address blocks:        208.140.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:33:d5:cc:8e:5b:7b:6d:8f:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=e4e8506d-ac50-44c7-bf68-f2e8d98045e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:23:37:b2:35:26:34:5a:74:18:af:01:12:
                    b7:97:b5:f9:2b:61:3a:27:4f:bb:59:fd:7c:24:ba:
                    0f:74:63:82:0d:23:05:0d:db:59:a7:6d:80:51:81:
                    18:25:e3:66:53:c2:01:4d:69:5f:70:d9:86:9d:1f:
                    80:f1:6c:05:a0:73:f6:74:58:73:40:0b:b2:c8:7a:
                    fb:14:8c:d9:35:8a:e4:bc:c2:17:2c:6d:7b:ec:fb:
                    9d:be:71:ba:48:ac:52:a2:07:93:9f:cf:d3:a3:6e:
                    b8:e6:5c:48:60:46:60:f2:14:aa:8c:4d:fd:c7:fa:
                    42:c8:c9:ee:3c:cd:7f:73:00:c6:e1:38:8d:70:5f:
                    e0:b1:43:e2:14:68:43:64:34:b7:47:23:fa:8d:75:
                    60:c7:44:61:20:ad:d7:49:d7:e4:7f:a8:42:b2:4b:
                    60:05:65:a3:c0:69:2b:69:ae:c2:86:49:30:1d:99:
                    6b:f1:3e:00:83:33:39:c8:d0:3d:c6:38:6e:d6:d4:
                    d4:a6:0a:03:60:e8:5b:0a:ed:be:e3:36:6b:1b:97:
                    1f:0d:9c:3d:80:7e:52:f0:48:33:db:be:1e:b6:eb:
                    ca:da:8f:69:fa:09:6b:b7:7c:87:bd:3f:b9:3c:b2:
                    19:93:fc:cf:97:dd:63:c8:f5:7f:27:49:64:d7:3f:
                    b9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:46:23:D5:FB:E7:59:3E:BB:E7:4A:E3:CA:56:13:46:D4:9A:1E:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3e6cb035-863b-34e8-bf04-844074ffa1fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.140.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ae:7e:f7:5d:c5:5f:e2:69:c4:84:9e:e9:fa:9b:e5:af:96:
         91:01:c3:ad:35:94:bd:bb:aa:41:bc:fd:79:2b:1e:79:3b:7f:
         9e:6b:93:ab:72:0b:05:1e:e4:63:05:ef:f9:f0:4e:a2:9b:c3:
         38:e5:58:53:43:8a:fe:26:3e:3c:ce:2c:28:f8:2f:90:a0:f0:
         d8:d2:c3:77:e3:48:c5:8f:70:77:d4:4a:dd:c9:69:ea:11:b8:
         a9:9a:14:10:9e:ae:91:d8:ba:38:5a:06:bd:25:93:22:76:ae:
         e9:f6:d8:34:f3:70:9f:c1:2d:a4:d2:f9:d9:b1:6a:3c:51:a1:
         7e:69:f2:ef:d7:78:b0:bf:00:b5:9b:8f:94:83:bb:03:f0:67:
         c5:8b:78:bb:bb:d5:17:02:94:ff:05:a5:7c:94:00:9c:4d:02:
         35:26:7d:fc:59:93:86:b5:d1:39:50:f9:20:50:c0:3d:b4:68:
         ce:b9:ce:ea:1c:ac:ae:5c:28:18:32:1b:90:c1:fd:66:b8:68:
         12:2a:0d:7f:b3:3f:43:34:db:8b:59:26:a4:73:72:03:d2:7e:
         29:b6:38:5d:6f:a6:bd:d7:f7:11:f5:e7:cf:81:ea:b8:8e:39:
         b2:3f:e0:68:74:a9:48:70:8b:fe:d4:73:bf:ba:89:df:7d:25:
         a6:9b:5d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:42:16 2025 by rpki-client