Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/06fd9848-1770-3b6c-8750-6da8ff7bee9c.roa
File:                     06fd9848-1770-3b6c-8750-6da8ff7bee9c.roa (raw, json)
Hash identifier:          jDQaDG/V6DxUOeAynyOhIINKQWyoOxzQyj/x1GVdfpI=
Subject key identifier:   94:BC:2C:4F:05:A3:08:00:CF:85:F8:82:AF:A0:47:64:FB:A1:FF:EB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B6E91F856707F18596E61D000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/06fd9848-1770-3b6c-8750-6da8ff7bee9c.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     16509
IP address blocks:        206.206.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:f8:56:70:7f:18:59:6e:61:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=aaa8ff03-323c-4b70-8d7b-11cccbf2b954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ee:df:07:86:93:5e:08:f8:79:5f:ba:4e:b3:
                    00:ba:d3:b8:bd:b4:5c:b7:ee:94:e7:6b:80:60:fb:
                    4e:aa:25:c7:0d:88:72:4e:87:bd:0d:af:78:5f:fe:
                    9f:2c:ec:81:94:e4:c6:9d:7b:a1:d2:e9:66:a6:cf:
                    43:aa:3f:df:2e:26:3e:08:56:95:7c:5d:c2:79:d7:
                    3d:ac:82:61:5e:92:2a:45:16:f1:7f:3f:d6:41:9a:
                    a6:5d:a1:14:6d:0b:df:ca:38:25:ad:3d:a9:eb:a6:
                    be:39:6d:ac:ac:fa:4e:0e:56:20:e1:0c:d8:2f:9b:
                    a0:32:71:e1:60:b1:e1:80:d9:f9:1c:6a:0b:51:55:
                    bd:31:82:3e:c4:88:88:94:e3:60:3c:d7:da:95:ff:
                    62:84:cb:e4:2c:90:8e:44:22:76:dd:db:b5:90:f3:
                    2d:76:cd:80:2d:eb:82:14:7d:ef:63:bf:62:0a:20:
                    00:db:1b:d6:cd:06:37:d0:c3:80:cf:b7:ab:be:e4:
                    87:d4:67:ae:5e:48:71:2e:73:03:2c:42:fd:34:73:
                    de:f4:25:d6:54:94:f5:4d:e2:42:d4:cd:5a:6c:60:
                    75:72:b7:fd:5a:20:e2:6b:83:63:08:58:41:69:0a:
                    9a:49:9e:b7:98:d7:95:6c:39:b7:76:f9:37:de:59:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BC:2C:4F:05:A3:08:00:CF:85:F8:82:AF:A0:47:64:FB:A1:FF:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/06fd9848-1770-3b6c-8750-6da8ff7bee9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:65:c8:3b:7e:96:46:3c:f3:ff:06:f3:63:82:5b:61:02:c0:
         ae:7f:75:27:c2:c7:53:fb:d5:ee:f4:1d:c4:d0:06:e2:4f:6b:
         6e:af:74:2a:e5:d9:fb:77:ee:74:77:91:1b:ba:d6:de:0c:cf:
         5c:3e:07:f0:ad:20:80:cc:17:03:5c:69:24:f2:e2:20:6b:43:
         62:78:da:ea:3f:80:ca:87:ba:2e:02:da:15:3d:74:63:2b:f7:
         82:43:08:ae:e6:e6:0a:59:d8:27:d6:d0:86:2a:81:77:56:87:
         3b:5c:71:8c:cd:02:f1:db:2d:b8:4d:8a:92:8e:77:e1:6c:ca:
         6f:e4:63:2f:f4:49:e7:6e:da:5e:b1:84:a3:ce:e6:62:43:86:
         19:f9:ee:be:0c:b7:a3:90:16:f8:6e:b1:7b:2f:36:17:83:9d:
         ea:d9:ba:e5:e1:6f:cb:9a:be:9c:2e:62:b2:a6:8b:46:12:5f:
         b7:28:73:9e:df:f3:02:c0:45:bf:3c:10:9c:95:3a:7e:df:b9:
         f1:98:97:29:cd:c2:2a:68:75:a5:39:d6:40:bc:ff:d1:e0:bb:
         9b:27:b8:80:7e:8c:ff:6a:b1:19:96:26:18:73:9a:18:ac:08:
         70:ee:35:75:20:5c:60:c3:5b:da:82:bd:f8:58:dd:73:15:2b:
         17:71:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:03:53 2025 by rpki-client