Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/44c02d8d-7e4e-3854-bd23-8b27d39f4c57.roa
File:                     44c02d8d-7e4e-3854-bd23-8b27d39f4c57.roa (raw, json)
Hash identifier:          Sz0KJaa1Jm7xE5hSMMFYZzppiD7c6qFxQgKncUeWNF4=
Subject key identifier:   43:01:C1:CE:CA:D8:C8:1A:9E:A6:DB:6E:68:57:0C:F8:61:33:5C:0C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E7E94EF901DE05BBB16BC3500
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/44c02d8d-7e4e-3854-bd23-8b27d39f4c57.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     13332
IP address blocks:        206.206.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:ef:90:1d:e0:5b:bb:16:bc:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=07e00812-9d8e-4b32-ad18-34238da0601f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:82:02:e0:c0:c7:fa:9b:db:18:0c:e0:df:e7:
                    0a:be:ec:83:15:63:c6:57:81:5f:87:80:aa:a3:82:
                    98:92:23:8b:64:77:b8:a9:c1:0c:c8:cb:76:d7:05:
                    5f:c5:79:13:da:a3:30:47:d3:80:86:3a:2f:d5:c5:
                    85:57:b3:8d:af:c6:df:fa:d6:fe:5e:44:28:fa:f7:
                    c2:d2:06:69:a0:d9:52:e7:01:d2:b7:58:2b:c6:05:
                    b6:c7:11:8f:a5:28:77:68:56:e2:85:bd:bc:a7:3f:
                    01:9a:5d:9a:db:83:52:66:f8:4e:98:be:73:3e:49:
                    37:18:a0:f9:28:90:4e:0d:d6:20:48:c9:52:75:a8:
                    15:db:f9:f2:f9:9c:73:89:9d:70:56:38:57:3f:f4:
                    27:32:c4:f4:3e:94:3b:57:a4:6d:e0:01:df:a1:dc:
                    6e:f7:2b:57:04:1c:b0:9b:ef:bb:4f:ea:37:15:16:
                    b3:2e:58:0f:57:f4:f6:0d:c1:3a:8b:88:92:9d:58:
                    48:ac:28:dc:84:0b:ce:52:6b:44:2c:4c:8f:ff:54:
                    1b:d1:92:63:e3:a0:2b:af:58:74:df:93:8f:7b:90:
                    51:b2:53:19:d0:19:1e:17:20:0d:ce:94:84:28:3e:
                    ed:92:fe:25:48:50:95:3c:8f:4b:8c:73:58:fd:79:
                    ba:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:01:C1:CE:CA:D8:C8:1A:9E:A6:DB:6E:68:57:0C:F8:61:33:5C:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/44c02d8d-7e4e-3854-bd23-8b27d39f4c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:4b:6e:1f:ff:54:66:cb:80:aa:24:44:82:9c:a8:51:06:6e:
         4d:a2:84:e5:8d:bb:6e:30:51:c2:0f:57:36:ea:d2:d2:68:72:
         6f:24:a8:98:ec:32:1e:31:35:6a:40:cc:44:0c:a5:29:81:08:
         86:10:25:0d:c3:64:12:bd:72:8f:79:43:87:d3:70:5d:e2:df:
         d5:b9:9c:df:61:93:81:f9:1b:11:11:cb:7f:e4:6d:44:7a:67:
         db:20:a8:9a:27:73:15:3e:1e:da:67:2c:27:a4:b9:b9:e2:a0:
         c1:3d:95:00:ea:d4:82:f6:68:0d:9b:7b:ed:cf:70:b6:e6:16:
         90:8d:54:90:61:7d:bc:92:9d:2a:e6:bd:12:d1:71:46:2e:73:
         66:40:21:25:20:1a:f8:46:52:6c:c1:57:4f:34:9f:08:35:dd:
         ca:99:0b:d1:b1:4a:24:76:0a:91:fb:04:1f:da:c4:cd:87:5e:
         80:2d:fc:24:97:c3:e0:f8:f9:fe:e7:3b:b0:95:7f:9e:0e:30:
         19:92:7d:42:7f:76:65:bc:f8:db:5c:69:a9:d3:e5:87:18:cd:
         91:30:39:ec:97:c9:1f:2a:18:82:50:04:22:9f:21:07:2b:31:
         48:47:49:cc:a6:c2:10:06:b6:32:77:8c:7b:ca:9d:20:f6:2a:
         9e:86:49:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:29:17 2026 by rpki-client