Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa
File:                     73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa (raw, json)
Hash identifier:          0nxtThkyFA02av4fIk90rzeIFH1X6/2txh0a0KSM4wE=
Subject key identifier:   2E:E9:24:2F:D8:28:0C:A5:8C:35:91:86:85:79:A9:39:88:35:BD:83
Certificate issuer:       /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Certificate serial:       010D0C9F4328584A19FAB4AA653D1543D10EEF80
Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa
Signing time:             Fri 06 Jun 2025 13:01:04 +0000
ROA not before:           Fri 06 Jun 2025 13:01:04 +0000
ROA not after:            Thu 04 Sep 2025 13:01:04 +0000
asID:                     998
IP address blocks:        208.94.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:19:fa:b4:aa:65:3d:15:43:d1:0e:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
        Validity
            Not Before: Jun  6 13:01:04 2025 GMT
            Not After : Sep  4 13:01:04 2025 GMT
        Subject: CN=6a7b33f7-2549-4813-9bde-b5125f8bc0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:95:21:88:d7:84:90:30:b4:08:80:4d:05:
                    99:34:66:9f:8c:e9:3b:48:db:4d:fd:2e:4b:35:2f:
                    3a:f2:b9:e6:a9:e5:cb:ba:9e:73:2a:a6:46:bb:03:
                    c9:9c:9c:92:e9:98:b4:cb:5f:03:d6:71:eb:15:16:
                    aa:00:7f:b3:82:6b:71:3d:34:dd:1b:ce:cb:13:49:
                    26:a0:f0:6a:7f:b6:79:8e:3f:b2:ac:67:5a:45:6e:
                    2f:b0:5f:05:ac:58:66:24:96:20:05:e1:b5:79:7a:
                    0e:ef:36:9c:91:e9:76:22:6e:bf:e0:2c:86:81:52:
                    ef:00:c1:b3:01:67:06:02:67:05:e0:36:ac:86:ad:
                    16:e5:d5:28:3e:27:bc:d3:f5:35:c6:d5:e0:e4:52:
                    da:73:d7:d1:19:a4:f2:db:29:11:36:b5:22:64:4b:
                    de:31:2e:4c:c2:98:d6:10:62:4f:a7:29:03:14:9b:
                    66:f5:b6:fb:39:83:bc:4d:05:02:8d:53:c3:a9:20:
                    34:97:1a:1b:c3:6c:1c:b4:ec:2a:3d:66:b9:93:a8:
                    10:12:48:6e:dc:4f:a1:fb:76:1c:a2:7f:19:73:60:
                    0b:16:6a:52:96:bb:16:12:66:78:80:6a:20:ad:3d:
                    ce:11:42:d6:ea:81:0a:fc:e9:fa:46:88:72:17:27:
                    8d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E9:24:2F:D8:28:0C:A5:8C:35:91:86:85:79:A9:39:88:35:BD:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl

            X509v3 Authority Key Identifier:
                keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:43:06:ea:d0:45:32:a2:d8:a4:77:9d:28:5e:ed:8e:47:cb:
         91:64:6f:b7:c6:42:80:a8:01:c3:8c:94:33:80:a0:11:61:63:
         d4:77:8e:b0:f6:d4:7a:20:fb:6a:34:dd:af:4b:29:a4:31:b0:
         ac:1a:ca:9e:f5:26:63:5d:90:41:0e:f1:77:a3:64:d6:b7:ad:
         94:d4:07:3b:a0:db:66:5f:36:fa:94:cb:59:f7:d2:89:79:09:
         5d:9c:23:7b:1e:46:5d:85:9f:57:39:e4:f2:36:49:e6:9e:74:
         09:24:28:bf:61:17:bf:42:c4:95:b5:30:18:3a:e1:c0:f7:75:
         63:ea:37:20:b7:c5:ae:37:15:58:c5:51:03:5f:64:76:0c:06:
         10:5c:5e:d1:45:db:5a:f5:92:92:29:67:57:a0:20:ad:da:ef:
         f5:a2:7f:ec:07:f9:37:ff:7e:6f:12:c4:bd:5d:3c:a5:c5:d1:
         2e:56:97:cf:ce:cc:df:e0:e2:06:db:89:de:01:80:54:92:18:
         ef:6e:f2:d8:73:9b:48:dc:d2:d1:1d:f1:df:2b:55:e2:ef:f6:
         c9:ac:e1:a9:f5:04:fc:07:80:b8:82:3d:8f:d3:df:ab:65:49:
         94:32:45:5d:c7:05:5c:ba:8e:20:3c:e6:eb:38:37:fe:f0:6f:
         4b:a6:a0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:09:27 2025 by rpki-client