Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aec7258d-71d5-36c3-a233-72865e7fc5c2.roa
File:                     aec7258d-71d5-36c3-a233-72865e7fc5c2.roa (raw, json)
Hash identifier:          xdNDK0nx+PiWedqdW4Y1P1RFKxCwhJZnS7E0y/6Jcv4=
Subject key identifier:   35:59:1F:B8:CA:6D:7E:B0:90:52:4A:7F:95:B7:FC:D0:84:18:DF:CB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B7B21F375AACF8832D2FA2280
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aec7258d-71d5-36c3-a233-72865e7fc5c2.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     7018
IP address blocks:        206.206.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:f3:75:aa:cf:88:32:d2:fa:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=156d02a2-eaae-495c-a184-558f61194d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:95:2a:b2:60:af:f6:a4:ca:c1:15:b9:ba:96:
                    65:da:c0:60:8a:86:0a:1a:b1:e6:89:d1:dc:15:43:
                    80:9e:58:3d:46:f8:34:34:1d:60:84:4d:2a:09:a9:
                    66:15:ab:32:14:0a:45:c7:a0:18:1d:c3:f6:ca:de:
                    3c:39:65:76:1a:3f:89:ae:0b:a7:50:c1:6c:aa:86:
                    a2:73:67:d4:9d:6e:cd:d5:5b:a2:3b:f6:8d:dd:ec:
                    fb:56:8d:45:15:c5:ca:db:36:76:e0:0b:d0:be:93:
                    ec:6e:33:c4:41:f6:9c:ff:f3:79:3d:e7:36:08:c1:
                    29:95:de:18:8b:42:98:20:26:80:0f:cb:a9:61:87:
                    e2:f7:b1:f9:72:21:31:ed:68:04:8f:a5:40:11:13:
                    19:8c:20:71:59:a6:c1:47:b9:9e:66:72:51:88:cf:
                    5a:1a:d0:55:a2:dd:e2:8e:63:3c:2a:8c:b9:65:79:
                    9c:6f:00:64:4c:f0:1b:13:09:3e:70:36:41:94:42:
                    65:3b:25:d4:f6:49:f9:fa:02:51:bc:cf:f5:04:ba:
                    48:7f:8f:a4:e9:71:66:b0:ca:89:b1:96:c2:99:1e:
                    a1:c0:ea:63:71:ae:d2:6a:fe:10:f8:ca:5d:34:be:
                    42:9a:c1:1a:2b:48:5c:d3:e8:5d:8b:3c:3f:a3:25:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:59:1F:B8:CA:6D:7E:B0:90:52:4A:7F:95:B7:FC:D0:84:18:DF:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aec7258d-71d5-36c3-a233-72865e7fc5c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:67:ed:ba:6d:ed:06:1f:e1:1b:8d:81:f2:69:f3:32:12:79:
         5f:66:1a:fa:2d:cf:17:f8:8d:2c:a4:fa:1c:7b:1c:81:ec:fe:
         23:f0:c1:17:7c:ee:6a:a7:28:11:71:ca:7f:2f:f4:dc:22:6f:
         c8:e3:e1:53:6a:70:cb:f6:bc:21:59:41:cc:50:dc:09:5e:d8:
         ff:04:70:c3:7d:5f:91:61:40:08:96:80:6f:c7:4b:c4:fd:23:
         72:a1:a8:0d:ab:72:6c:c1:2a:7c:13:82:42:94:f7:e1:e2:39:
         81:e1:6b:70:6f:12:0f:b0:87:be:8d:4f:f8:25:9b:b8:90:2a:
         ce:9f:8d:49:2f:8c:91:9e:8d:be:9c:d9:bd:36:38:92:6a:57:
         af:55:e4:da:7c:9a:fe:aa:ba:64:f7:c6:c7:0f:15:93:13:07:
         9c:6c:40:42:ec:a6:5b:24:cc:ea:94:bb:76:34:70:d8:44:63:
         58:56:e6:82:e1:b5:89:07:79:67:c8:3e:9c:3e:49:9c:fe:7c:
         fd:04:70:5d:67:d3:6d:f9:1f:8e:fd:a2:3f:04:9f:dd:75:e5:
         c1:a2:a3:3d:a5:97:6a:1d:d1:4f:f2:74:8e:75:dc:b1:8d:a5:
         bf:1e:2a:8f:b7:59:65:46:20:00:fb:7b:79:2e:da:31:e3:ce:
         8f:5a:70:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:03:34 2025 by rpki-client