Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ed3c11ea-f647-3184-9b29-670a9c33486a.roa
File:                     ed3c11ea-f647-3184-9b29-670a9c33486a.roa (raw, json)
Hash identifier:          05e33zCe0hi8Z3gnYRwg8IiXC9/tEaD24pYOlRTstLA=
Subject key identifier:   57:AE:82:3B:99:E3:63:C6:A1:78:F8:AD:21:4A:06:EC:65:1F:15:66
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AE89130AAEE0B8653AB2CB928
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ed3c11ea-f647-3184-9b29-670a9c33486a.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     212238
IP address blocks:        206.206.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:30:aa:ee:0b:86:53:ab:2c:b9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=cfdeacc1-27ba-4b78-9aed-7ffd99d26c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:8c:25:02:bd:c6:27:4c:8c:f0:b8:da:08:
                    b8:89:26:6c:8a:0e:67:6f:06:67:dd:e2:a7:6a:28:
                    98:32:df:a7:1f:c0:8b:9b:82:08:2a:9b:08:53:fa:
                    77:d3:5d:15:4d:35:dd:fb:8a:9c:71:af:be:f1:46:
                    13:16:a4:59:4f:b2:40:f8:75:97:45:61:57:5a:b2:
                    66:bf:f2:9d:5b:e9:35:5b:30:dd:dd:c3:90:a5:9b:
                    5f:aa:6b:c5:c0:c5:44:ce:04:7d:7c:b4:d1:d6:64:
                    cd:46:50:41:ce:c0:5c:90:bf:ab:98:20:1a:95:ff:
                    4e:f2:b7:d5:b7:bc:47:c0:07:c3:67:7c:cf:4c:8a:
                    b0:5e:0e:86:93:23:bf:f2:bd:8c:f5:17:5f:31:7c:
                    08:8c:ba:ea:b3:2d:12:56:17:f3:ef:7d:7d:2b:45:
                    8e:6d:2a:ba:0a:94:90:ab:4b:f5:28:40:a4:52:83:
                    82:94:c5:04:6e:07:b5:c4:3e:6f:16:de:97:71:32:
                    0e:9c:64:ae:2e:10:5e:05:73:3c:6c:16:57:8f:9b:
                    06:d1:ca:7e:09:be:5e:d6:fe:6b:fb:e2:98:f1:93:
                    06:25:71:67:68:5e:0b:6f:41:95:d3:91:09:79:cb:
                    3f:9b:6e:b9:9b:22:5e:1e:3b:c7:f8:3a:43:fb:70:
                    0a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AE:82:3B:99:E3:63:C6:A1:78:F8:AD:21:4A:06:EC:65:1F:15:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ed3c11ea-f647-3184-9b29-670a9c33486a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:dd:ea:34:7a:6a:14:29:5f:9e:98:b7:db:47:1f:2e:7b:41:
         dc:b1:66:60:33:86:20:f7:aa:2f:0f:b1:32:77:4a:9f:72:6b:
         c8:d6:32:b2:7d:4c:58:03:cd:c2:eb:85:5f:49:dc:d9:2e:49:
         19:7e:95:58:5d:78:bd:70:16:80:cf:29:c9:e9:95:c3:a2:6d:
         88:a7:81:5a:dd:90:73:13:60:31:1b:41:a1:5b:82:a6:ce:3b:
         ad:ad:14:7a:34:b1:f8:5a:cc:3d:45:48:ce:7e:47:b1:e3:3d:
         c2:20:75:6d:b3:e9:f6:4f:1c:49:7a:5d:9a:01:57:e7:98:3f:
         ea:5b:c2:ca:96:21:8f:f1:46:cf:bc:cc:9b:a1:14:02:4e:0a:
         21:38:c8:cf:bc:1a:cd:9b:63:35:31:34:20:76:28:c4:b2:e4:
         0e:21:07:4b:73:fb:cd:9d:08:39:32:54:4b:cc:3c:37:a9:a6:
         4a:36:91:fe:3f:9f:7c:1e:e0:e1:9e:ae:f4:17:c5:96:d6:0c:
         51:14:a7:ab:3c:08:43:46:94:86:d4:a4:42:9c:2a:18:8b:ef:
         c4:75:8e:33:f3:b3:de:5b:40:ca:e0:3d:91:09:0f:23:63:c5:
         ff:03:f9:93:e5:60:94:30:41:6f:8b:55:6c:7c:33:35:48:81:
         1a:2c:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:11:32 2025 by rpki-client