Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/358cfd8b-ab69-35b7-b430-966fa9defda2.roa
File:                     358cfd8b-ab69-35b7-b430-966fa9defda2.roa (raw, json)
Hash identifier:          kSDkWUa7EfwAh4UjQhkUIA0gXbkDuhs3WB/sgJc7Nb8=
Subject key identifier:   B3:B4:4E:CA:13:6C:8A:B4:5B:AD:DE:4F:E1:A2:B7:CF:17:3E:77:58
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F1E7F6F6F413C48544609AF80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/358cfd8b-ab69-35b7-b430-966fa9defda2.roa
Signing time:             Wed 09 Sep 2026 15:46:28 +0000
ROA not before:           Wed 09 Sep 2026 15:46:28 +0000
ROA not after:            Tue 08 Dec 2026 16:46:28 +0000
asID:                     14618
IP address blocks:        206.206.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:7f:6f:6f:41:3c:48:54:46:09:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  9 15:46:28 2026 GMT
            Not After : Dec  8 16:46:28 2026 GMT
        Subject: CN=866a995c-06ba-4aac-a1cb-1e5b899ce9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:f5:fa:63:4f:5e:21:fd:cd:43:76:1c:09:
                    cc:74:58:0a:a6:7c:08:fb:70:57:8b:e4:f1:7d:f6:
                    71:3e:ae:43:d2:7a:00:e9:bb:33:cb:6b:ab:9c:43:
                    32:90:8b:f2:70:6e:0b:b3:d2:ed:fa:a2:57:d5:7d:
                    b9:b5:ec:bb:d9:f9:9c:0f:49:b2:15:ef:7a:5e:b6:
                    df:57:98:6e:88:b7:85:0f:62:1a:1a:c9:e4:c7:5e:
                    cb:7a:57:09:72:71:c3:26:d7:47:56:12:3f:85:80:
                    fb:86:80:7a:9a:97:7f:b6:e9:07:42:48:a0:d2:f5:
                    f1:ed:0b:33:aa:6b:5d:39:f6:16:44:b7:34:62:45:
                    92:c9:d4:f3:cc:c2:a7:44:77:11:62:23:e8:3d:f7:
                    e8:45:31:c3:a6:15:3c:81:01:07:97:a7:c7:ce:36:
                    87:41:58:46:43:79:6d:77:c8:e2:b2:81:52:32:36:
                    8f:d1:96:36:f6:f1:b4:d8:43:76:42:f7:cb:ed:2d:
                    a6:7a:76:61:b4:8d:2d:b2:cf:fc:7e:63:e9:1d:7a:
                    f7:97:06:27:57:f8:08:a5:8a:2a:54:f0:5f:3d:62:
                    7f:50:e9:2b:bf:f1:1b:16:91:dd:aa:f6:54:ad:14:
                    a9:13:57:3e:fc:3c:82:4f:4e:cf:4d:57:5b:84:07:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B4:4E:CA:13:6C:8A:B4:5B:AD:DE:4F:E1:A2:B7:CF:17:3E:77:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/358cfd8b-ab69-35b7-b430-966fa9defda2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:df:b1:a2:49:88:40:df:31:b2:df:eb:2b:b1:bf:d9:82:60:
         3a:22:1a:86:b9:e2:e3:1d:3e:23:a5:ee:c7:ff:a0:f7:99:19:
         7f:89:7b:5a:24:43:0f:b3:f8:cf:4e:84:8c:96:c7:e7:b9:28:
         e6:f1:83:2f:fc:ed:bc:ac:67:fc:99:0f:bc:25:2d:3c:77:eb:
         0e:58:87:99:7d:1d:48:14:aa:0c:5c:99:ff:fe:73:cd:6a:8b:
         6c:8b:b6:2c:f0:b5:fd:8c:f9:d6:11:27:4e:3b:ae:49:d3:fd:
         e4:49:d3:78:aa:b0:2c:db:19:38:7b:86:a0:1e:14:d4:43:9f:
         58:17:9d:50:ac:e8:a7:18:d4:52:1c:96:eb:7b:72:37:76:57:
         19:59:3a:c7:06:41:4e:96:dc:4a:dd:41:94:85:11:ee:f9:ed:
         4a:2b:23:37:8e:06:76:a6:fb:bc:87:80:25:bd:bb:16:04:1f:
         78:72:00:8d:8b:2e:0c:d4:99:f0:65:60:4c:0d:aa:4e:05:4d:
         43:72:cc:43:17:e1:33:ab:5a:a4:89:bf:3b:73:36:ab:02:84:
         ac:72:5b:60:ba:cb:f2:7f:36:4c:9d:4a:0e:7a:36:d7:d4:96:
         08:65:84:d2:9c:8d:36:3f:ab:4a:35:f5:68:a0:97:d9:f8:b2:
         d3:69:84:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 04:49:56 2026 by rpki-client