Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/08923ba0-b5c6-39b9-8e3f-270426f57baf.roa
File:                     08923ba0-b5c6-39b9-8e3f-270426f57baf.roa (raw, json)
Hash identifier:          HuW0XiBzSJQRd8LR4l3Tdt2Ma2LoUBKSCjSaAXDBa+E=
Subject key identifier:   F3:CA:83:60:A8:7F:54:25:2C:70:68:9E:EF:1C:94:E3:52:49:2D:77
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584A31B5659D8EBA26B565BAAC00
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/08923ba0-b5c6-39b9-8e3f-270426f57baf.roa
Signing time:             Sun 15 Jun 2025 01:00:49 +0000
ROA not before:           Sun 15 Jun 2025 01:00:49 +0000
ROA not after:            Sat 13 Sep 2025 01:00:49 +0000
asID:                     13760
IP address blocks:        208.114.200.0/23 maxlen: 23
                          208.114.202.0/23 maxlen: 23
                          208.114.204.0/23 maxlen: 23
                          208.114.206.0/23 maxlen: 23
                          208.114.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:31:b5:65:9d:8e:ba:26:b5:65:ba:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jun 15 01:00:49 2025 GMT
            Not After : Sep 13 01:00:49 2025 GMT
        Subject: CN=f7250612-c70f-454f-9eab-0548dcfda149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:af:75:1f:a4:4a:9c:f9:e7:09:cc:c8:8d:
                    f0:b6:4f:a5:17:3d:d3:24:a8:07:ab:e1:39:1e:f8:
                    ca:76:f7:b2:29:58:e7:fd:42:14:ab:b9:3a:da:a9:
                    a4:d4:72:9c:ef:11:10:8d:78:2f:9c:02:e1:20:c8:
                    2e:cc:95:cf:81:4c:49:fb:1b:fb:66:2a:59:e8:69:
                    f1:10:5e:c2:40:fd:61:de:8a:8e:43:ca:92:f7:22:
                    55:73:48:08:a7:8b:9c:3e:92:2f:2a:71:7f:8c:1e:
                    27:17:13:c8:d6:f6:3f:fe:2e:8e:03:e7:06:1a:ce:
                    ef:da:2a:ee:bb:b8:7a:8c:aa:e8:92:3f:4e:11:88:
                    58:69:9f:a9:94:75:51:9f:c2:e2:5a:5e:58:5b:a7:
                    db:1e:a2:64:70:1a:66:9f:7b:9f:b1:30:83:1c:1d:
                    32:5a:3b:32:9b:f7:8a:43:d5:29:e1:7d:7f:9f:e1:
                    58:1a:dc:b2:4e:6f:5a:be:ce:3c:ec:66:47:14:77:
                    25:1f:67:37:37:90:8e:50:09:d5:34:04:c6:f3:a0:
                    84:da:b1:99:c2:b3:a3:5f:75:ea:5e:b1:6f:eb:b6:
                    9c:df:51:86:77:dd:42:4b:e3:3e:28:0b:66:91:ec:
                    d6:bb:39:05:4b:77:d7:f7:28:9a:31:1c:95:bb:e5:
                    a6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CA:83:60:A8:7F:54:25:2C:70:68:9E:EF:1C:94:E3:52:49:2D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/08923ba0-b5c6-39b9-8e3f-270426f57baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.200.0-208.114.209.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:66:0f:04:4a:4e:a7:1f:af:9e:8c:e0:55:57:d5:2d:ed:92:
         99:2f:a4:c7:38:93:76:64:32:cb:1e:9e:a7:97:b0:7f:6b:c2:
         39:75:d6:9d:52:5c:9c:08:7d:f0:28:4f:b3:38:c8:cd:3a:50:
         44:8f:13:fd:9a:9b:f6:af:de:3a:2e:2a:22:28:7a:c1:60:1c:
         5c:15:c9:71:7d:d6:a6:f1:a8:5c:8a:36:d3:6e:1b:58:3e:e3:
         da:cd:35:e1:fc:34:db:a9:d8:3a:46:62:56:2d:24:37:cb:48:
         04:c1:6b:e1:9a:63:08:48:48:85:b4:32:2f:c8:ef:f2:f9:cb:
         ca:22:2c:87:46:1e:fa:4f:23:8b:70:4e:95:54:fb:34:4e:26:
         28:43:3c:41:5b:dc:74:96:c2:16:25:58:64:f3:5b:18:d5:6d:
         9e:31:4c:51:f4:e7:5a:23:6f:34:9d:a5:7e:f5:1b:cd:10:14:
         f9:fe:30:5b:03:f0:72:4a:45:7e:31:91:b8:bf:dc:21:8f:77:
         07:97:e6:e6:df:27:17:71:71:da:22:f5:55:fe:9a:4a:ae:28:
         ab:2e:37:6d:5b:46:6e:f3:c7:e1:12:cd:bb:97:5e:c0:b5:29:
         00:d9:8f:24:55:38:22:a2:2f:01:bf:33:33:13:22:46:00:70:
         50:a7:51:06
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEoxtWWdjromtWW6rAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm
MzQyMB4XDTI1MDYxNTAxMDA0OVoXDTI1MDkxMzAxMDA0OVowLzEtMCsGA1UEAxMk
ZjcyNTA2MTItYzcwZi00NTRmLTllYWItMDU0OGRjZmRhMTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA2vdR+kSpz55wnMyI3wtk+lFz3TJKgHq+E5
HvjKdveyKVjn/UIUq7k62qmk1HKc7xEQjXgvnALhIMguzJXPgUxJ+xv7ZipZ6Gnx
EF7CQP1h3oqOQ8qS9yJVc0gIp4ucPpIvKnF/jB4nFxPI1vY//i6OA+cGGs7v2iru
u7h6jKrokj9OEYhYaZ+plHVRn8LiWl5YW6fbHqJkcBpmn3ufsTCDHB0yWjsym/eK
Q9Up4X1/n+FYGtyyTm9avs487GZHFHclH2c3N5COUAnVNATG86CE2rGZwrOjX3Xq
XrFv67ac31GGd91CS+M+KAtmkezWuzkFS3fX9yiaMRyVu+Wm3QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFPPKg2Cof1QlLHBonu8clONSSS13MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0
MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvMDg5MjNiYTAtYjVjNi0z
OWI5LThlM2YtMjcwNDI2ZjU3YmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi
MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy
ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz
YTQ1MmYzNDIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPQcsgD
BAHQctAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAr2YPBEpOpx+vnozgVVfVLe2SmS+kxziTdmQyyx6ep5ew
f2vCOXXWnVJcnAh98ChPszjIzTpQRI8T/Zqb9q/eOi4qIih6wWAcXBXJcX3WpvGo
XIo2024bWD7j2s014fw026nYOkZiVi0kN8tIBMFr4ZpjCEhIhbQyL8jv8vnLyiIs
h0Ye+k8ji3BOlVT7NE4mKEM8QVvcdJbCFiVYZPNbGNVtnjFMUfTnWiNvNJ2lfvUb
zRAU+f4wWwPwckpFfjGRuL/cIY93B5fm5t8nF3Fx2iL1Vf6aSq4oqy43bVtGbvPH
4RLNu5dewLUpANmPJFU4IqIvAb8zMxMiRgBwUKdRBg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:24:43 2025 by rpki-client