Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0fa3b079-1e61-346d-abbf-fe26bccd7f78.roa
File:                     0fa3b079-1e61-346d-abbf-fe26bccd7f78.roa (raw, json)
Hash identifier:          5DkqHz5Dfox2CE4CajClZEkUTRX/8L2r4R4OXVmdPKY=
Subject key identifier:   CB:50:76:81:04:D4:5A:0D:86:3A:55:F2:C4:7B:0B:26:2D:A3:AC:69
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E7E94F559AA92975A2FB7BB00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0fa3b079-1e61-346d-abbf-fe26bccd7f78.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     13332
IP address blocks:        206.206.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:f5:59:aa:92:97:5a:2f:b7:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=4a1bcb77-c359-4b1e-8142-2979d72f03a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:8e:37:b5:fe:63:c0:bb:2f:97:00:0f:d4:
                    88:0b:95:bd:1a:2e:5b:53:19:20:1d:00:8e:98:cc:
                    e8:a2:98:68:1a:14:44:66:c5:3b:d2:8a:52:67:80:
                    fc:78:f2:cd:ad:cb:ba:5c:9f:ea:f4:0e:64:e1:2e:
                    fb:f6:e1:c1:e3:03:c0:b5:e6:e0:9f:e4:0b:b1:7e:
                    90:49:a3:05:0a:23:0c:6e:a0:8f:4e:83:18:2a:57:
                    51:63:09:54:88:81:33:ae:df:79:0b:08:00:38:6d:
                    fa:09:75:13:5a:d4:d9:0d:f8:37:fe:da:54:dc:17:
                    92:88:6c:09:f6:97:85:cd:28:c7:31:d0:21:df:87:
                    90:cb:e4:56:29:43:dc:15:a9:60:a5:12:b9:74:1a:
                    86:97:75:10:1f:0a:20:14:6a:5d:38:8b:6f:5f:55:
                    e9:ca:b9:ac:8f:5e:0b:76:16:a4:06:5d:03:d5:1e:
                    1b:39:fa:50:9f:5d:1d:ab:00:c5:43:89:58:f1:a2:
                    fe:93:76:d5:4c:28:4e:8b:1c:74:d9:df:21:4e:91:
                    0b:50:9c:d5:d5:e9:ad:72:22:0e:bb:41:fc:e8:cc:
                    6a:98:25:c7:8e:93:f1:c0:27:3d:fd:c1:f8:4e:62:
                    50:8e:08:ca:c7:9b:4f:2e:3a:08:e2:7b:24:56:04:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:50:76:81:04:D4:5A:0D:86:3A:55:F2:C4:7B:0B:26:2D:A3:AC:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0fa3b079-1e61-346d-abbf-fe26bccd7f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:5d:2d:ab:9f:c1:73:74:0d:73:9d:75:47:87:47:99:34:f9:
         4a:35:f3:7d:98:43:a6:28:dd:eb:46:8c:d9:1e:51:9c:86:e5:
         34:00:93:70:b7:b2:0a:1f:0e:79:f8:a9:41:96:e0:bb:f4:b0:
         07:0b:16:63:00:b3:dd:d6:a3:10:e5:be:d9:f9:81:52:45:56:
         34:74:a1:6e:c0:3a:32:4c:8b:7b:92:10:3c:3a:e0:ac:2c:22:
         c9:22:48:e2:f9:ee:d5:9a:89:2c:74:e8:cc:9b:06:87:50:69:
         b0:98:09:32:d9:3d:79:ee:e2:a7:97:47:b7:70:1a:82:8b:09:
         a9:b0:0c:47:7a:2a:32:2f:e6:c6:a8:1b:b7:79:03:ad:38:1e:
         3e:4d:1e:a3:3a:ec:6b:9f:49:36:d6:4b:bd:91:b6:55:1a:55:
         34:1e:7a:9c:7b:04:2a:14:13:a0:51:b7:d4:a8:57:0f:f3:81:
         84:31:9a:66:56:78:54:99:01:23:df:da:9f:19:25:b4:98:92:
         c6:46:75:a2:83:4a:4d:ad:5e:ff:25:51:0b:bc:90:10:c3:64:
         cb:b0:21:38:d5:45:96:5d:b1:22:66:7d:c6:59:cf:2f:c1:2d:
         cc:35:27:2d:e2:a5:ba:5f:62:5b:00:06:58:d1:fd:97:ac:af:
         80:7c:9b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:58:22 2026 by rpki-client