Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3e6cb035-863b-34e8-bf04-844074ffa1fa.roa
File:                     3e6cb035-863b-34e8-bf04-844074ffa1fa.roa (raw, json)
Hash identifier:          bRfkPCUbgXP+AguHKEmTmzbm7khh9Li4BLoNBwzRzcI=
Subject key identifier:   86:98:DE:26:07:F9:1E:65:F5:79:00:A4:8C:3F:E0:EE:1D:5D:AC:40
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584F4C3D4A7BAD140EFBC47CA700
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3e6cb035-863b-34e8-bf04-844074ffa1fa.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     3561
IP address blocks:        208.140.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:4a:7b:ad:14:0e:fb:c4:7c:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=3160b1a6-3382-4236-840e-29b2295167d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:79:89:08:33:7b:6b:c5:f0:c5:51:dc:59:bd:
                    0a:15:d0:a5:7c:3a:b9:0b:bd:f4:3e:16:88:d8:47:
                    8d:8a:4b:7b:14:91:34:b4:90:d4:b1:8e:06:58:bc:
                    a8:31:d8:ce:f7:a0:e8:07:4a:8c:d4:b9:1f:48:8b:
                    d8:70:20:57:1f:7a:f4:b5:34:d3:1c:4a:38:a6:3d:
                    e0:01:7b:82:c7:cd:45:5a:9a:1e:37:0e:3e:ab:07:
                    b9:13:25:00:5c:c5:6c:72:56:c8:18:7c:2a:e6:83:
                    44:bd:09:99:b8:27:0d:9f:0f:ba:43:e9:47:1f:dc:
                    0e:0b:98:69:88:77:e7:6a:db:78:10:72:24:03:56:
                    5a:f8:7f:0e:68:b6:a5:b4:01:77:ee:c9:93:b0:e4:
                    33:d4:37:b0:46:93:6a:04:80:53:89:46:40:4a:24:
                    02:37:de:ec:3a:9f:c7:25:e6:12:3d:0b:e9:cd:37:
                    43:99:9a:b5:ae:29:92:d2:b2:13:ff:ff:92:1c:26:
                    27:4f:0e:b6:53:3e:d9:17:77:f9:b0:62:76:79:42:
                    ca:4e:73:c3:d9:a3:3e:44:8e:7b:a3:ed:73:81:4c:
                    45:a9:70:7f:2c:ac:3e:49:df:e8:7f:8f:9e:70:94:
                    dd:63:a0:3d:2a:3b:47:78:9d:77:1c:2d:48:6d:54:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:98:DE:26:07:F9:1E:65:F5:79:00:A4:8C:3F:E0:EE:1D:5D:AC:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3e6cb035-863b-34e8-bf04-844074ffa1fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.140.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:51:6b:13:63:a8:c4:8a:02:4a:35:e4:4f:b3:c5:f7:5e:1d:
         30:57:3a:75:b3:e7:ea:f4:3a:37:d6:b7:d9:e6:ca:f7:63:5b:
         41:38:20:ee:56:54:ae:33:58:0a:75:f2:f2:f1:ee:af:63:e3:
         64:55:a1:0d:35:b4:fe:91:c5:24:75:c3:90:ec:c8:ae:3f:ae:
         70:c7:e8:c5:4f:4e:fb:b4:4e:b7:7a:ce:63:6b:8c:53:1f:e3:
         24:a6:4e:11:df:81:ec:2a:7a:3b:c7:a9:f6:3f:7b:a1:2f:f4:
         57:27:d0:0a:21:a7:ef:0c:7b:ec:0d:3c:55:59:60:34:00:c0:
         44:aa:96:ca:a7:af:43:cc:e3:1c:6b:ba:5b:fc:6c:21:6d:52:
         93:86:5e:5f:af:e9:2c:45:3f:ea:e8:c4:a2:63:95:e6:8b:9f:
         2b:c2:6f:1a:b4:33:c7:05:c1:bb:81:08:36:f4:ae:e0:13:f0:
         e0:f7:92:c2:d7:9f:c4:d5:35:36:d5:0b:64:2f:d5:99:6b:d6:
         b1:2c:fc:1b:c3:57:2d:f3:8f:9c:dd:06:51:1b:1d:03:ab:39:
         33:93:0b:c1:b8:5f:61:ad:ab:33:d9:d2:99:be:9f:0c:0b:5c:
         a1:1b:ea:12:b4:d3:65:53:09:ba:3f:a1:1b:2b:f2:44:ee:64:
         83:49:0e:12
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9MPUp7rRQO+8R8pwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
MzE2MGIxYTYtMzM4Mi00MjM2LTg0MGUtMjliMjI5NTE2N2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHmJCDN7a8XwxVHcWb0KFdClfDq5C730PhaI
2EeNikt7FJE0tJDUsY4GWLyoMdjO96DoB0qM1LkfSIvYcCBXH3r0tTTTHEo4pj3g
AXuCx81FWpoeNw4+qwe5EyUAXMVsclbIGHwq5oNEvQmZuCcNnw+6Q+lHH9wOC5hp
iHfnatt4EHIkA1Za+H8OaLaltAF37smTsOQz1DewRpNqBIBTiUZASiQCN97sOp/H
JeYSPQvpzTdDmZq1rimS0rIT//+SHCYnTw62Uz7ZF3f5sGJ2eULKTnPD2aM+RI57
o+1zgUxFqXB/LKw+Sd/of4+ecJTdY6A9KjtHeJ13HC1IbVQ7lQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIaY3iYH+R5l9XkApIw/4O4dXaxAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvM2U2Y2IwMzUtODYzYi0z
NGU4LWJmMDQtODQ0MDc0ZmZhMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMC0IwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfFFrE2OoxIoCSjXkT7PF914dMFc6dbPn6vQ6N9a32ebK92NbQTgg7lZU
rjNYCnXy8vHur2PjZFWhDTW0/pHFJHXDkOzIrj+ucMfoxU9O+7ROt3rOY2uMUx/j
JKZOEd+B7Cp6O8ep9j97oS/0VyfQCiGn7wx77A08VVlgNADARKqWyqevQ8zjHGu6
W/xsIW1Sk4ZeX6/pLEU/6ujEomOV5oufK8JvGrQzxwXBu4EINvSu4BPw4PeSwtef
xNU1NtULZC/VmWvWsSz8G8NXLfOPnN0GURsdA6s5M5MLwbhfYa2rM9nSmb6fDAtc
oRvqErTTZVMJuj+hGyvyRO5kg0kOEg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:48:20 2026 by rpki-client