Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8f96eed9-a959-3128-87a2-cc1c3cf7536f.roa
File:                     8f96eed9-a959-3128-87a2-cc1c3cf7536f.roa (raw, json)
Hash identifier:          xFCIc81XLk7m5iqdtZXA6cgYMgyS3PX+YIu3T7Rkb8c=
Subject key identifier:   28:C5:8E:D5:A1:69:5D:3E:E0:33:CC:E5:6E:C4:09:C1:EF:4E:59:5E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AE1968473BB4445A06EF06180
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8f96eed9-a959-3128-87a2-cc1c3cf7536f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     7018
IP address blocks:        206.206.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:84:73:bb:44:45:a0:6e:f0:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=e2c3d73f-a0dd-4126-aec9-7462fcb1f85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:5c:f5:ca:84:41:63:d8:9d:07:64:08:42:
                    a8:0a:6c:9a:5d:1d:ef:ed:4b:66:ff:0b:91:be:db:
                    a4:7b:bc:1a:0b:bc:65:15:12:d5:c2:dc:26:7f:0b:
                    37:39:b6:e6:f7:e0:ef:3d:48:4f:e4:03:90:fe:2e:
                    26:33:33:50:b2:73:cb:2e:07:07:d8:8e:fa:ef:72:
                    3c:7b:a3:77:7b:ce:2a:28:c9:fa:ff:e5:0f:48:e4:
                    32:bb:f4:bb:ee:01:0e:1f:12:00:29:b7:0d:dd:26:
                    46:54:1d:fd:d6:20:32:0a:d2:f5:ca:57:82:27:67:
                    22:fe:cd:8d:55:89:20:ed:67:82:8c:9f:78:86:9d:
                    34:90:67:37:f5:7f:34:a2:3d:d6:b3:12:55:e7:70:
                    84:96:30:17:a4:21:b9:8f:5e:a3:37:b6:ee:45:da:
                    23:48:e2:b0:d0:2f:2f:9f:13:c5:f8:66:fb:49:8f:
                    0d:88:03:b5:46:e6:80:ba:13:50:0f:7e:ff:40:40:
                    91:5a:8d:36:55:6e:ed:7b:a7:b6:4b:4d:80:4a:84:
                    50:7f:82:a1:0c:73:20:60:a8:ce:95:e2:8a:dd:00:
                    77:57:0a:2a:14:20:e5:88:0c:bd:8d:d5:03:21:c2:
                    bf:f2:09:93:82:4d:24:47:c9:bb:c6:51:7d:f5:52:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C5:8E:D5:A1:69:5D:3E:E0:33:CC:E5:6E:C4:09:C1:EF:4E:59:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8f96eed9-a959-3128-87a2-cc1c3cf7536f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:47:5f:97:45:0c:35:18:7a:7c:1f:ab:ab:3d:bf:28:55:fb:
         8f:cf:b7:f7:bb:6f:a7:b7:df:fe:ae:73:87:08:e0:4c:a4:1b:
         9e:94:58:0a:3f:46:cf:57:68:35:bd:39:c9:93:d4:37:61:73:
         9d:a4:5d:fa:b9:53:a4:76:3d:87:fb:50:fa:c9:97:0d:72:20:
         05:e9:db:7b:63:bb:03:d8:18:4a:36:11:69:9e:58:88:92:66:
         68:ca:6e:0c:1a:32:6a:89:df:0f:e1:ef:9b:fe:fb:1d:f7:fe:
         44:3c:be:08:d4:fd:91:86:20:bc:43:a1:e2:f1:23:ad:0f:9e:
         84:9d:84:c6:4f:6b:4a:bb:86:63:d4:ba:cd:51:36:10:e0:8e:
         8a:72:53:66:16:e5:31:04:dd:7a:14:79:da:a2:4b:20:3c:f1:
         8c:3b:3a:b2:97:af:3d:40:a7:a9:b4:ad:94:64:46:65:d6:ce:
         8c:65:90:7d:51:43:79:41:65:51:6f:dd:70:25:f5:cf:cb:9f:
         35:c6:4b:36:e5:80:69:1b:20:0f:f8:62:88:2a:8b:8c:44:25:
         a9:0f:ea:09:d3:69:5e:cb:6b:48:2a:29:d5:f1:7b:51:35:c9:
         95:75:a1:63:b4:1f:ee:6c:ed:15:7c:55:ee:2e:df:5b:5d:f0:
         ac:55:8b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:56 2025 by rpki-client