Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/941953a6-c890-3afd-9957-89c970806f3d.roa
File:                     941953a6-c890-3afd-9957-89c970806f3d.roa (raw, json)
Hash identifier:          qN9ZspkHkVz4YJ7lDvMqaWStYBZdV3pIy3CUfkaFees=
Subject key identifier:   50:C4:DD:69:27:F6:C8:9B:5C:CC:6C:75:08:07:B3:8D:E1:5B:A9:62
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F43DD584D4631ADC249255B20
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/941953a6-c890-3afd-9957-89c970806f3d.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     21769
IP address blocks:        206.206.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:58:4d:46:31:ad:c2:49:25:5b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=2489e85b-6d42-45a0-b3fc-1a429ea378ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:99:be:f0:ff:11:3f:ec:04:b3:a9:ca:c8:6b:
                    a4:59:e5:4d:0f:52:48:07:29:10:c3:17:94:03:ce:
                    8b:60:b5:58:02:6d:3b:70:de:5b:1f:51:23:bf:e6:
                    ef:4a:45:df:ae:b1:38:88:c6:8a:89:76:02:71:30:
                    95:0e:9e:f3:4a:3b:64:d1:b2:f0:ab:bb:a8:cb:4f:
                    6d:d7:21:3a:4d:75:46:78:b2:0b:a0:69:1d:41:87:
                    6e:29:fe:4f:56:79:63:33:39:68:9a:9d:43:aa:53:
                    26:20:58:e6:9c:b9:20:b2:31:2f:a9:a0:10:ce:60:
                    ba:2b:82:34:06:4c:1f:d3:f6:f6:a5:24:4e:d5:e0:
                    58:e8:55:57:f7:73:e3:d5:c9:62:ed:00:ef:25:73:
                    e6:ff:65:c1:40:52:a0:3e:38:c1:72:08:9c:67:15:
                    f2:b0:14:ad:07:6e:a7:cf:d5:d9:37:9b:33:4b:ce:
                    99:d5:48:04:c3:a8:25:6c:8f:1f:7f:dd:4f:28:92:
                    fd:85:d8:80:b5:cf:e1:6e:68:80:31:07:0a:94:31:
                    bd:ec:9b:0c:a5:bd:01:45:34:f9:31:92:98:29:d0:
                    29:c3:15:f3:3c:78:48:0b:39:1e:06:4d:72:5f:ca:
                    e4:d7:ab:22:bd:2e:0b:c5:6f:40:97:8e:2f:46:8b:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C4:DD:69:27:F6:C8:9B:5C:CC:6C:75:08:07:B3:8D:E1:5B:A9:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/941953a6-c890-3afd-9957-89c970806f3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:55:00:5b:5f:84:e9:da:45:33:87:00:f3:34:0b:4e:38:9c:
         f9:63:c4:81:f4:2b:37:7f:8c:05:77:48:d6:5a:44:ef:52:3e:
         b2:c0:b5:27:7e:48:bb:e2:a3:1c:0a:ec:03:a6:5d:51:8c:48:
         bd:4e:15:b3:0c:86:e9:ef:32:ad:e5:1f:24:c2:d1:45:a3:ed:
         ad:f1:75:1e:27:c5:d8:8e:ad:4c:6d:39:8d:4c:69:90:49:d5:
         d1:1c:df:ed:c1:69:02:3a:9f:25:ba:a7:1d:1d:f4:57:f9:f2:
         c2:90:c2:bf:c8:63:8a:cf:02:1a:14:dc:0b:57:7d:26:a9:aa:
         76:a7:fe:a9:34:b4:8a:e1:80:83:93:32:5a:76:6f:58:78:ae:
         b1:21:ee:73:e1:23:d2:8b:16:a0:5e:7f:91:0b:46:49:c0:3e:
         ec:4f:97:bc:2d:b0:2e:09:21:9a:49:42:c6:d7:38:77:f5:a2:
         6e:21:ee:ef:c4:2c:53:c4:4f:3f:a4:5c:8c:22:ac:9c:ad:13:
         f2:15:a3:09:64:fd:01:92:25:0e:7c:03:15:df:a5:a9:46:a6:
         6f:34:ca:ae:36:b3:d6:35:a1:5c:c3:f0:09:94:68:09:68:a3:
         72:21:42:23:85:90:be:2a:b8:a8:a4:6d:db:c5:50:2b:19:e6:
         5c:b0:f3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:54:56 2026 by rpki-client