Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8e5b5af2-fa0b-37ac-b9c3-854995cbce35.roa
File:                     8e5b5af2-fa0b-37ac-b9c3-854995cbce35.roa (raw, json)
Hash identifier:          cvEo9ojy4aHHiQC+ZO8PEucjz47KCCIdXW+5xJIRXeM=
Subject key identifier:   10:50:D4:D9:35:92:76:25:DB:43:49:15:E0:3B:2C:79:21:28:B5:A2
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584A4A3EA272D2E3C3C17281B3D0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8e5b5af2-fa0b-37ac-b9c3-854995cbce35.roa
Signing time:             Mon 23 Jun 2025 19:56:47 +0000
ROA not before:           Mon 23 Jun 2025 19:56:47 +0000
ROA not after:            Sun 21 Sep 2025 19:56:47 +0000
asID:                     3561
IP address blocks:        208.139.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:3e:a2:72:d2:e3:c3:c1:72:81:b3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jun 23 19:56:47 2025 GMT
            Not After : Sep 21 19:56:47 2025 GMT
        Subject: CN=266ae103-74cf-4c49-abe3-3a02b5838030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:be:0b:6a:8a:2d:f5:0a:cc:73:b2:ab:27:
                    5d:93:37:90:a0:53:7e:1e:3d:8e:c0:a2:21:76:0c:
                    10:a8:90:a9:ab:a5:82:f9:75:6a:52:35:b0:83:48:
                    16:3d:ec:de:1e:59:d9:7e:7d:25:66:37:85:22:ba:
                    81:d3:99:77:9d:13:20:3a:61:b0:94:ca:82:a8:f3:
                    ca:6d:17:a3:5b:79:57:9a:af:5e:22:f3:57:c0:5f:
                    2e:d3:22:95:88:ff:5d:70:3d:3a:58:af:3b:56:61:
                    0d:6d:97:32:dc:95:1c:b5:18:e0:48:96:39:d1:a1:
                    5a:be:97:d4:fb:96:62:53:f8:70:d4:17:85:ae:fd:
                    d5:74:33:51:c1:af:96:74:86:3a:e8:ef:10:67:61:
                    a4:21:06:b2:c0:33:c2:ac:99:61:4b:07:d8:f3:3b:
                    ca:b7:bc:22:16:46:49:99:db:26:1f:1e:11:c5:34:
                    ea:20:8f:b3:5d:ec:e5:d8:60:80:51:b0:29:b2:b6:
                    6b:61:df:c9:fd:db:96:a2:3c:fe:a6:15:35:79:0e:
                    b0:d9:45:87:8e:f7:11:80:69:cb:5a:8a:cf:4a:66:
                    b2:83:e6:bc:dc:9f:ad:5c:8e:64:6b:e1:4d:1c:77:
                    1a:c4:3f:25:a4:1a:b7:08:e1:0c:aa:c8:5a:83:3c:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:50:D4:D9:35:92:76:25:DB:43:49:15:E0:3B:2C:79:21:28:B5:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8e5b5af2-fa0b-37ac-b9c3-854995cbce35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.139.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:9f:00:1c:b2:43:8b:fb:eb:0a:1a:d1:f2:28:46:58:04:e0:
         3e:03:12:80:d4:1c:fd:08:92:d7:11:0d:69:ea:bb:43:06:5b:
         46:53:50:6e:b2:65:e2:5e:4e:56:6e:71:15:ef:f8:67:c1:e6:
         2d:53:ce:f1:8f:8e:4b:da:69:f6:2b:cd:4f:8d:03:3c:47:98:
         f1:6e:5a:c2:e6:ca:79:cf:b5:71:f7:c7:74:ed:63:41:bc:04:
         39:7e:71:ff:9d:08:05:74:94:eb:45:19:84:56:25:2d:15:96:
         cf:34:cb:5c:b6:a2:e3:9d:fe:18:c7:fe:8b:aa:42:be:56:27:
         a8:dd:cc:a2:92:2c:f1:01:e4:24:d4:4b:1f:6f:3e:60:41:d3:
         81:aa:1f:c0:f1:5f:92:36:52:23:18:6a:9e:ee:42:15:41:4d:
         50:be:ec:22:5b:b2:a4:08:05:a5:63:47:bf:af:5c:d3:4a:26:
         6b:3b:95:4a:4f:31:c3:46:5b:ac:72:9a:ec:ee:67:d6:d7:b6:
         26:f0:ca:aa:35:5a:5a:e1:cc:d0:d3:51:07:fe:20:23:5c:f2:
         ce:47:d6:61:b8:a4:d0:bb:d3:b4:73:8f:dd:3a:3a:04:18:2a:
         cb:f4:14:33:c8:8b:c2:93:86:99:37:7c:e3:15:42:45:f4:fa:
         79:ce:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:49:53 2025 by rpki-client