Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/981177d3-a6fb-313d-84de-d728b12d69a0.roa
File:                     981177d3-a6fb-313d-84de-d728b12d69a0.roa (raw, json)
Hash identifier:          /Hbbqj4spxdDAOQqmtoj8xarRce1PDRFhJNLbH8RL80=
Subject key identifier:   DA:0C:91:68:F0:50:3E:69:26:85:CA:B0:A3:37:2F:8E:73:4E:28:B5
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AE19684CB83072AD6913085E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/981177d3-a6fb-313d-84de-d728b12d69a0.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     64267
IP address blocks:        206.206.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:84:cb:83:07:2a:d6:91:30:85:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=705d2944-9dd6-4d7a-8cf9-89f9deba4822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:4d:1b:0b:ef:02:ec:d7:4f:2e:88:9a:ed:
                    17:33:57:53:c6:05:49:d5:9d:7b:7f:83:88:dd:61:
                    ba:0b:5d:16:b9:bd:d3:92:94:c7:27:58:76:b0:91:
                    ce:07:ad:b7:cb:8f:1e:20:a3:17:41:86:76:06:1e:
                    13:f4:2f:e0:45:92:26:28:44:6c:88:17:9f:af:44:
                    85:8d:10:c1:92:63:6c:ff:98:9a:90:45:9e:39:f8:
                    15:a5:48:93:4f:d3:47:c4:be:1c:b2:ab:68:73:74:
                    a2:b7:20:6b:d0:fb:24:64:7d:ce:18:eb:bf:0d:58:
                    9b:4e:78:2f:c8:96:c9:34:bb:b6:00:df:44:08:db:
                    a2:85:76:17:ee:df:a5:7f:98:aa:c3:de:15:e5:64:
                    b7:05:ed:20:f3:44:7c:da:ab:8e:9e:12:cc:7d:ef:
                    56:81:f5:db:00:5a:d5:ce:16:69:b0:ad:3c:90:17:
                    0d:5c:d6:45:b7:e6:ea:20:6e:db:b3:21:61:f9:77:
                    ed:22:cc:40:53:65:a0:b0:dc:3c:8c:9f:5a:28:6c:
                    99:e8:b6:e8:ca:a8:4d:5e:7d:78:e1:ce:4d:50:d3:
                    f1:f5:44:85:6a:46:1d:5f:89:bc:da:13:84:ba:c4:
                    5b:91:fc:0c:90:9e:a8:b8:d3:c0:a6:28:88:fe:59:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0C:91:68:F0:50:3E:69:26:85:CA:B0:A3:37:2F:8E:73:4E:28:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/981177d3-a6fb-313d-84de-d728b12d69a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:79:db:02:30:b2:d1:14:56:45:53:66:c9:7e:2d:28:a7:26:
         01:bc:aa:87:e3:df:3c:e0:9e:15:27:22:8c:50:f5:3b:98:c3:
         a6:4f:c3:20:00:cc:34:84:e3:9e:2b:70:83:5e:12:75:8c:7b:
         9c:a6:99:ef:c0:06:b3:5d:4f:48:b9:cc:06:57:8a:53:d8:4d:
         bb:e3:87:5f:dd:db:5f:e4:41:89:5f:c8:65:8e:36:c4:97:6e:
         12:9a:e8:7d:2e:fb:f8:c2:ad:2f:98:fa:de:a4:a0:73:e9:f7:
         ab:30:86:13:74:ca:09:3a:39:82:e6:1c:d9:14:fe:6c:f5:7b:
         7f:29:b0:85:95:80:b4:6f:b9:49:66:c2:65:a5:e8:59:b8:8e:
         08:37:e9:cb:da:eb:4a:8b:f1:a7:e3:ea:3e:cb:56:09:27:4e:
         13:c6:f6:bf:a8:44:a0:ab:a6:2e:d1:b3:f4:5a:df:01:e0:c4:
         20:b8:4d:7b:e6:ca:3f:36:63:5e:3c:f2:d7:a2:fd:45:76:24:
         44:fb:f1:2e:49:43:e7:b1:fb:6c:8f:b6:a8:77:de:bc:f0:17:
         4d:1b:9a:3e:bb:b4:2b:37:f7:be:aa:d8:8e:f2:b2:3f:59:9f:
         7c:ec:83:ad:bf:ea:33:b6:7a:ea:18:2d:15:f9:a7:fa:f3:fb:
         9c:75:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:49:39 2025 by rpki-client