Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1d50887e-620e-355a-9f9a-5b80aa021c62.roa
File:                     1d50887e-620e-355a-9f9a-5b80aa021c62.roa (raw, json)
Hash identifier:          fpSJtafNFpliVIs+cYW/LEe0fr1TvA4y2mYJx1kVfxc=
Subject key identifier:   8A:3F:D0:D3:45:1C:B4:27:C4:16:99:4B:E5:7B:71:ED:9A:FE:58:F9
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584BC3D58E45A2BC3D940DF31800
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1d50887e-620e-355a-9f9a-5b80aa021c62.roa
Signing time:             Thu 06 Nov 2025 02:00:31 +0000
ROA not before:           Thu 06 Nov 2025 02:00:31 +0000
ROA not after:            Wed 04 Feb 2026 02:00:31 +0000
asID:                     54004
IP address blocks:        206.206.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c3:d5:8e:45:a2:bc:3d:94:0d:f3:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov  6 02:00:31 2025 GMT
            Not After : Feb  4 02:00:31 2026 GMT
        Subject: CN=9c069d1c-da2f-4ef9-bf6a-5a29d48bfe4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:d2:67:44:98:1e:63:3d:e5:22:15:63:33:
                    69:9d:43:64:69:bf:eb:af:af:56:92:00:c5:59:e1:
                    e1:ec:ad:39:3d:87:67:7e:36:54:cf:22:32:f4:e7:
                    78:04:0e:a9:59:21:ac:3f:f3:86:11:fe:79:3c:84:
                    8b:bf:99:ed:59:d1:23:3d:65:85:d3:db:a3:e3:26:
                    28:24:d9:b5:ab:dc:f3:a1:a0:6c:e8:11:c7:44:44:
                    ea:d9:71:79:ea:3d:06:59:9e:38:ca:29:5b:f2:2f:
                    be:93:40:68:a2:9f:2e:a5:7a:d3:fa:2a:33:42:e6:
                    d4:01:29:ff:c6:3a:94:e5:a0:4c:f1:85:32:7a:61:
                    3b:60:2c:e1:0e:45:f1:a6:cc:b7:b2:7b:e5:d8:af:
                    56:b2:4f:f5:fe:88:b2:c6:f3:b0:4b:35:09:17:83:
                    d8:f1:35:d1:d4:20:78:6f:e4:ea:21:ab:0b:5a:ec:
                    45:d1:5e:58:2c:e9:50:38:4e:06:99:4e:3c:be:8d:
                    08:31:d2:39:42:53:b5:6c:ca:ef:cb:54:99:e9:90:
                    c6:05:11:8a:f9:70:4a:0c:d5:76:90:be:22:84:52:
                    ec:db:b4:e2:97:8d:96:a0:77:e7:f0:f7:05:37:29:
                    6b:c8:ab:e1:39:a6:bd:9d:41:64:32:3c:0f:a6:1a:
                    bd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3F:D0:D3:45:1C:B4:27:C4:16:99:4B:E5:7B:71:ED:9A:FE:58:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1d50887e-620e-355a-9f9a-5b80aa021c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:d1:6a:8c:cb:b9:03:6a:16:21:2e:d8:87:4b:fe:d9:dc:25:
         13:a4:74:1a:4f:0c:32:a9:28:4b:6d:47:94:42:f4:3d:2c:b8:
         b6:56:be:0b:3e:a0:82:cc:cf:b6:87:22:75:9a:f8:14:a4:ea:
         5d:3d:be:f9:c8:96:8f:35:4e:c3:4c:c0:8b:37:88:f8:3f:75:
         28:92:f0:f1:88:51:a6:8f:96:ac:43:20:9a:fb:b6:5c:6f:a0:
         1f:f9:a5:42:27:68:93:a4:d9:4e:52:14:42:56:e6:26:39:d5:
         d2:fd:b1:e4:07:a4:a7:1b:5d:17:21:a5:07:ee:35:8f:0e:c4:
         14:84:75:57:80:17:fe:da:69:eb:54:45:df:b1:9d:de:be:39:
         78:c3:db:23:07:a7:28:7e:94:15:fa:14:04:b6:e7:2b:72:46:
         c9:26:88:dc:88:4b:d8:fb:27:5b:6c:3a:2c:5c:50:e6:79:38:
         dc:3e:ac:e0:25:45:b3:d9:31:33:14:7a:21:d8:a5:58:f6:e7:
         bf:e0:5e:3f:2f:93:f0:17:e5:b4:e8:1e:6e:fb:da:a1:36:3a:
         27:87:31:27:1d:bf:a4:e7:0d:e3:4b:3a:9d:61:04:ad:13:e8:
         2e:4e:c4:f7:c4:12:4e:c1:6e:e6:88:ec:38:67:b9:77:00:1a:
         ba:1e:5c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 02:12:51 2025 by rpki-client