Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c2131e1-3a70-357b-a696-61606301e821.roa
File:                     9c2131e1-3a70-357b-a696-61606301e821.roa (raw, json)
Hash identifier:          u0wPNGFF9bXpm+L6M9Guc5Ye8cONuMh/ZVzLpsXHefI=
Subject key identifier:   8E:9F:FC:91:AC:19:BB:3A:66:F9:9C:65:A4:67:07:9C:C3:8A:3E:21
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A49CA33DFA98360D0C928B65C
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c2131e1-3a70-357b-a696-61606301e821.roa
Signing time:             Mon 23 Jun 2025 16:02:11 +0000
ROA not before:           Mon 23 Jun 2025 16:02:11 +0000
ROA not after:            Sun 21 Sep 2025 16:02:11 +0000
asID:                     20001
IP address blocks:        206.206.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:ca:33:df:a9:83:60:d0:c9:28:b6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 23 16:02:11 2025 GMT
            Not After : Sep 21 16:02:11 2025 GMT
        Subject: CN=81d212fe-56b0-4c81-bb51-3d8171e3adfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:01:30:04:72:31:b6:f0:15:21:bf:1f:2f:04:
                    a1:05:b6:7e:c2:89:f3:f2:e6:0f:f7:2a:9d:70:8f:
                    13:43:9b:68:14:c5:0e:7b:00:14:9c:fd:17:56:06:
                    2c:f3:4e:10:50:4a:9a:5d:63:fb:79:7c:d2:14:71:
                    d8:6d:3f:3e:17:d0:49:ee:2a:a1:e7:17:b0:21:f4:
                    45:7b:b6:00:23:b9:0f:cd:ba:7b:46:00:d1:8e:18:
                    95:a8:0f:a1:82:e5:00:73:42:07:86:c9:77:0c:ed:
                    49:c5:4a:3f:01:2d:1b:c9:22:e3:50:65:c5:1d:b3:
                    0b:44:14:0d:2c:12:82:21:22:f3:a2:b3:eb:be:5d:
                    a9:98:30:df:d5:d6:fc:3c:ba:f9:88:cf:c3:42:fa:
                    14:d1:d7:d5:05:67:67:d5:89:84:24:18:a4:52:ee:
                    9f:7d:ae:9c:2f:0b:d5:ca:19:a0:2f:24:be:cd:2a:
                    c8:0d:a9:af:45:3e:e0:49:21:36:ae:0c:c8:2d:ed:
                    76:8e:90:97:6a:08:8c:81:be:32:a9:8f:e0:9b:dd:
                    98:49:71:2c:31:cc:eb:4e:8b:96:90:7f:e9:46:50:
                    04:4d:45:32:02:b9:b5:93:fe:73:41:c6:34:c2:5d:
                    f3:65:d3:6e:70:3d:d7:f9:5f:71:b1:bf:ba:6b:bb:
                    3d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9F:FC:91:AC:19:BB:3A:66:F9:9C:65:A4:67:07:9C:C3:8A:3E:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c2131e1-3a70-357b-a696-61606301e821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:a8:e4:62:27:47:97:b7:e2:dd:ba:26:dc:41:85:8a:90:9e:
         44:fc:cb:3d:e9:9a:9f:2f:46:de:43:28:7d:67:9a:b8:0c:28:
         94:9e:59:2b:82:cb:1e:63:f2:c7:16:b4:19:53:07:3f:0b:11:
         58:28:38:44:64:ba:5e:ae:a3:e4:99:a0:0c:c5:02:55:23:72:
         51:87:62:90:f8:77:b5:7d:01:24:d6:73:54:6a:1b:7c:a3:ea:
         77:b5:91:15:52:f6:e8:f7:da:d6:77:fc:ad:46:5d:41:23:6f:
         e6:bd:f4:81:e1:c4:6d:f4:49:33:f4:8f:31:54:5b:68:7f:69:
         fd:b0:cc:81:1a:7d:72:11:31:96:3b:1c:f9:ce:f6:e4:aa:b3:
         97:c0:80:a3:49:fe:11:34:b6:cc:37:97:26:0a:f2:fb:fb:27:
         4b:7f:69:0c:9c:e9:bb:ca:a8:27:f7:f4:2e:a8:e6:65:62:6a:
         27:27:c0:3e:27:f4:22:34:32:c9:b4:8d:1c:3a:50:72:ef:59:
         f4:b2:93:72:0a:1a:68:43:61:7e:07:ff:36:da:58:6b:97:ba:
         6a:de:a2:f1:fb:ab:7f:3c:ba:62:6a:b6:b0:09:24:43:fc:d3:
         b4:60:bc:31:37:77:75:4c:09:89:86:68:03:84:6b:19:e1:94:
         4e:c5:fd:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJyjPfqYNg0MkotlwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDYyMzE2MDIxMVoXDTI1MDkyMTE2MDIxMVowLzEtMCsGA1UEAxMk
ODFkMjEyZmUtNTZiMC00YzgxLWJiNTEtM2Q4MTcxZTNhZGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQEwBHIxtvAVIb8fLwShBbZ+wonz8uYP9yqd
cI8TQ5toFMUOewAUnP0XVgYs804QUEqaXWP7eXzSFHHYbT8+F9BJ7iqh5xewIfRF
e7YAI7kPzbp7RgDRjhiVqA+hguUAc0IHhsl3DO1JxUo/AS0bySLjUGXFHbMLRBQN
LBKCISLzorPrvl2pmDDf1db8PLr5iM/DQvoU0dfVBWdn1YmEJBikUu6ffa6cLwvV
yhmgLyS+zSrIDamvRT7gSSE2rgzILe12jpCXagiMgb4yqY/gm92YSXEsMczrTouW
kH/pRlAETUUyArm1k/5zQcY0wl3zZdNucD3X+V9xsb+6a7s91wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI6f/JGsGbs6ZvmcZaRnB5zDij4hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOWMyMTMxZTEtM2E3MC0z
NTdiLWE2OTYtNjE2MDYzMDFlODIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKKo5GInR5e34t26JtxBhYqQnkT8yz3pmp8vRt5DKH1nmrgMKJSeWSuC
yx5j8scWtBlTBz8LEVgoOERkul6uo+SZoAzFAlUjclGHYpD4d7V9ASTWc1RqG3yj
6ne1kRVS9uj32tZ3/K1GXUEjb+a99IHhxG30STP0jzFUW2h/af2wzIEafXIRMZY7
HPnO9uSqs5fAgKNJ/hE0tsw3lyYK8vv7J0t/aQyc6bvKqCf39C6o5mViaicnwD4n
9CI0Msm0jRw6UHLvWfSyk3IKGmhDYX4H/zbaWGuXumreovH7q388umJqtrAJJEP8
07RgvDE3d3VMCYmGaAOEaxnhlE7F/e4=
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:45:05 2025 by rpki-client