Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/39474b31-4761-3eb5-9369-5a53a956a945.roa
File:                     39474b31-4761-3eb5-9369-5a53a956a945.roa (raw, json)
Hash identifier:          ND21dNtd7gam6rAVchlxpdAGsxq1YDsc5LoUh7Nvakw=
Subject key identifier:   41:E8:B1:3A:9A:95:0B:FB:2E:9C:70:A8:2A:9F:D0:FA:ED:FD:96:C9
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B3DB6F5101915373233167840
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/39474b31-4761-3eb5-9369-5a53a956a945.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     51765
IP address blocks:        206.206.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:f5:10:19:15:37:32:33:16:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=702502ef-f309-40a6-8bb3-97a6f9a9c977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a8:af:f5:b1:0b:3e:60:8c:28:76:b9:d3:7f:
                    71:d0:df:8a:85:be:a0:8f:71:0e:9a:08:a4:20:88:
                    8f:50:ce:6f:f7:19:3a:07:ee:d8:88:50:c7:6e:e6:
                    77:00:7d:8b:fa:99:94:a9:52:5f:f4:3b:8e:5e:ab:
                    3f:92:77:ae:36:16:04:99:c9:4e:7d:cc:51:eb:8b:
                    f3:87:da:0b:72:78:10:a0:ec:7e:cf:b9:5f:ee:59:
                    cd:fd:af:26:a6:17:21:66:f4:3e:dc:73:c8:f6:30:
                    9a:71:f2:5e:c2:b3:8e:d5:de:fa:f4:da:a7:41:94:
                    95:f8:cf:10:44:58:d0:2a:e3:8f:b0:a7:e7:47:b0:
                    7a:18:68:db:88:b2:ff:da:98:7c:c4:bb:e4:13:33:
                    8c:bb:5d:ae:26:5d:b7:ef:34:0d:b1:b3:d7:c7:da:
                    cf:5c:4f:71:a9:a5:53:e4:fc:5d:4d:c0:91:03:d2:
                    0a:80:49:5a:2d:35:1e:1c:18:27:95:f5:83:66:b7:
                    2f:20:f9:40:e0:a9:59:81:b9:bc:65:0e:c2:41:d4:
                    a7:a9:31:f6:cf:ca:ef:ef:20:1e:60:61:1d:5a:d1:
                    85:d5:4f:79:0a:a6:0b:7a:d6:f8:0b:66:f7:7e:cf:
                    e4:93:db:92:47:91:5d:9b:d4:cc:74:a8:e7:4d:36:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E8:B1:3A:9A:95:0B:FB:2E:9C:70:A8:2A:9F:D0:FA:ED:FD:96:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/39474b31-4761-3eb5-9369-5a53a956a945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:fc:8e:d0:00:00:8f:29:21:1b:26:4d:27:da:4d:dd:76:5f:
         10:a9:d3:e4:55:16:6d:27:89:04:16:b5:f6:bd:73:1a:33:9d:
         60:fd:87:1a:ec:48:4d:c3:87:c8:e4:5e:4d:25:0a:c6:49:37:
         cd:a9:f8:8e:5e:71:84:9d:32:94:5a:a2:06:ed:b9:ae:29:77:
         9a:46:2a:5c:36:d1:27:4d:7a:96:6e:bb:d8:25:ad:8f:c6:94:
         6f:50:b7:bb:85:3c:a1:82:07:01:37:1d:d1:36:ff:cb:a3:90:
         82:91:cd:07:c8:19:47:db:75:bd:30:df:4e:e8:14:5d:5c:05:
         de:f2:f5:6b:5c:e7:0d:df:59:6d:e1:1e:53:d9:da:70:7a:82:
         a8:2b:9e:2f:c5:df:56:b2:ae:2e:49:ca:5f:34:0b:52:7a:2d:
         af:66:68:94:3f:81:a0:d9:6f:82:cf:0f:dc:bd:26:78:a1:4e:
         56:4f:73:d6:1d:68:3e:c3:a0:c9:e1:f0:94:b5:48:d8:35:43:
         4c:8e:9f:a9:37:97:ab:5f:b5:f1:2d:28:c8:aa:43:f7:10:f1:
         56:22:ca:6e:78:16:d5:cd:a0:53:3f:b2:b6:2d:ac:b2:60:4f:
         d8:f4:5d:e7:89:5f:a3:e2:23:f7:28:2f:9b:ca:e9:42:30:6c:
         4c:6f:fb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:27 2025 by rpki-client