Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/67095573-8d35-3b1f-b5f7-bb26df1f505d.roa
File:                     67095573-8d35-3b1f-b5f7-bb26df1f505d.roa (raw, json)
Hash identifier:          vDwzi/Gt/iM4v6zCVcosPNwop2RgjdZcqJjhrwehoZY=
Subject key identifier:   0C:2C:58:D0:4A:91:72:88:2B:24:94:CE:F4:09:56:5C:6A:1A:69:8A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E6B0A210EE885F4F8F63E3CC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/67095573-8d35-3b1f-b5f7-bb26df1f505d.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     212238
IP address blocks:        206.206.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:21:0e:e8:85:f4:f8:f6:3e:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=9a0a7682-3842-41aa-88b1-c468f4ea9fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:fe:84:b7:39:c0:df:db:50:a1:3d:e4:f1:
                    9e:3a:ca:cb:4d:cb:6b:f7:6f:56:79:76:30:11:f1:
                    33:c7:b9:21:88:e6:1b:22:66:fa:0e:4a:f6:57:de:
                    5a:d1:41:ea:a5:95:4f:aa:b6:07:ed:ea:ed:5a:b5:
                    08:e3:e4:4d:70:49:b0:4d:98:b9:22:40:9a:1d:23:
                    6e:e1:5e:42:4a:12:c7:24:1c:25:dc:a5:b5:50:ed:
                    f9:96:2e:a0:49:58:7f:d5:c3:67:aa:44:8c:fc:05:
                    52:92:bb:a0:41:0e:6a:22:7b:b4:51:8c:13:4c:b4:
                    35:42:77:ba:9b:24:e5:33:0a:3b:60:82:f6:dd:95:
                    cf:ed:c7:16:e7:eb:a8:9c:76:0a:19:57:40:60:1a:
                    49:58:32:52:e8:b2:36:4b:3e:85:5d:64:d9:d3:05:
                    d8:82:b2:d5:a6:51:f5:01:91:7b:ac:39:c9:b3:ad:
                    db:1f:5f:ab:15:02:2b:2e:72:ba:d2:99:cd:b9:c1:
                    84:cb:98:fe:80:31:17:c9:01:a7:eb:3d:cf:5f:f9:
                    7f:59:1c:77:3d:4c:eb:6b:ed:bc:b3:cf:b9:6d:41:
                    59:0a:65:ba:5c:6e:69:18:52:55:f1:2d:a3:39:b2:
                    69:6d:e2:88:db:f2:05:79:d5:8d:cc:07:a4:b9:be:
                    48:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2C:58:D0:4A:91:72:88:2B:24:94:CE:F4:09:56:5C:6A:1A:69:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/67095573-8d35-3b1f-b5f7-bb26df1f505d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:f8:cb:8f:7b:ec:cb:8f:35:45:f5:25:5d:bb:8f:a1:0d:81:
         d5:7e:78:56:78:d3:48:a7:99:8d:5e:a4:a8:89:a5:c4:fb:b1:
         76:2b:a5:af:c5:a0:e4:07:71:de:82:c1:62:64:3a:84:d6:44:
         e2:f2:d7:5c:a2:b2:88:23:6c:3a:b3:dd:51:ea:ad:7b:c3:c8:
         27:f5:bd:4d:02:16:c4:65:71:2e:b2:c3:3f:81:77:0f:f3:77:
         3a:bb:f8:03:9c:2f:d6:4b:b9:f3:4f:16:00:ac:92:cf:1a:9c:
         13:c2:25:a2:a7:d7:82:ac:fc:9a:43:77:bb:34:c1:0b:aa:0d:
         46:76:f2:c2:1c:a7:ca:60:2b:3f:a1:98:cf:3d:10:db:96:8e:
         07:19:e4:c7:cf:e8:81:9a:5e:91:9e:af:60:4e:44:40:66:60:
         9a:4b:39:77:bb:95:84:4a:e7:3f:50:0a:de:12:8d:6f:f5:cf:
         aa:24:a3:7f:8a:07:f6:73:0f:82:c6:4b:f4:6a:96:77:31:43:
         08:25:fa:81:a1:6d:c8:01:de:40:88:3a:ab:25:6c:72:fd:5b:
         c0:c3:44:91:92:d8:31:80:2f:2b:86:d1:af:82:ab:60:82:88:
         d2:8e:be:71:4f:75:2c:e4:88:cb:57:d4:6d:7f:f9:cd:b9:d6:
         2c:f7:0c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:54:23 2026 by rpki-client