Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/44c02d8d-7e4e-3854-bd23-8b27d39f4c57.roa
File:                     44c02d8d-7e4e-3854-bd23-8b27d39f4c57.roa (raw, json)
Hash identifier:          2QL8e+0rYdED6VllxF7cJY7mslQ+WeqCQTKXKCYuSqA=
Subject key identifier:   75:43:BA:89:99:61:1C:1A:9A:CA:7D:16:2B:F7:38:ED:C8:78:36:8E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AFC1BFF8A6D9447E7BED83988
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/44c02d8d-7e4e-3854-bd23-8b27d39f4c57.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     13332
IP address blocks:        206.206.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:ff:8a:6d:94:47:e7:be:d8:39:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=0e058222-7f40-4a61-b686-0e1049dec898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:42:ea:6f:14:79:6c:d3:61:82:df:f4:b5:
                    24:ea:24:4c:8f:63:58:b3:64:ff:33:49:ee:0d:04:
                    58:a6:65:b2:8f:23:8a:00:40:8a:6f:5f:8e:f0:a6:
                    ff:96:78:ef:43:ff:cb:fe:b6:3b:f0:14:0b:5a:85:
                    8f:bc:73:10:f3:1f:6a:05:5d:2c:bb:97:4f:54:f7:
                    85:eb:57:5a:e2:2a:8b:9e:0e:c6:ae:e6:46:d7:51:
                    5b:bb:a9:0b:69:86:56:d6:8c:a6:4c:23:75:bc:f8:
                    d1:49:9f:10:95:bf:8b:60:ef:7c:ef:d9:38:7f:15:
                    72:8b:aa:a6:93:af:56:78:ed:89:ad:61:bf:16:ec:
                    68:f5:25:5a:00:fd:de:b0:77:d6:2c:45:d3:53:65:
                    36:fa:75:0f:4f:d5:75:18:35:c9:28:19:8f:55:df:
                    c6:04:38:05:ce:d4:b7:b4:a8:cc:3c:a2:b2:d6:fe:
                    69:ec:cc:c2:96:a8:f9:dd:4a:2b:04:0e:a6:c6:53:
                    cd:83:e9:d5:35:58:42:71:58:db:e8:02:08:ed:c2:
                    d5:33:46:0e:1b:1c:80:d7:dd:9a:e1:1c:65:08:d9:
                    a8:72:b1:68:37:5e:62:85:dd:a7:ac:f3:52:1a:91:
                    60:e6:33:78:16:9e:af:e5:1b:ca:04:c7:c9:4e:06:
                    2d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:43:BA:89:99:61:1C:1A:9A:CA:7D:16:2B:F7:38:ED:C8:78:36:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/44c02d8d-7e4e-3854-bd23-8b27d39f4c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:d1:6a:f5:3f:c6:cc:67:ed:c5:ed:a4:f9:88:76:56:6e:92:
         4f:15:40:51:42:c4:ca:b9:43:d0:e3:04:2b:e3:6b:2c:ee:f8:
         7a:ce:1d:4d:50:0b:99:d1:73:f6:d3:35:e9:b6:ad:d7:2f:d7:
         21:0a:79:f7:e5:8b:f5:63:ac:8e:c4:db:c6:e0:06:5c:1c:5e:
         26:04:a9:36:ef:ad:f8:13:c1:d4:33:8e:fd:50:60:cd:d2:1f:
         f0:09:a4:39:4b:00:6c:a5:97:3d:6e:45:55:b0:61:e8:87:9a:
         ee:ea:0f:ba:c4:9c:18:d0:d7:a0:b3:c6:2c:92:4e:e4:22:2f:
         75:b9:a8:07:7a:72:7c:90:ea:2f:42:29:e4:64:ce:76:61:05:
         46:54:6b:06:6c:31:39:e8:8b:1e:f8:6b:28:15:21:a4:4c:b4:
         29:a0:d2:5c:40:0b:59:14:60:5e:0c:da:b9:de:29:7f:40:ed:
         76:79:2d:97:8c:78:fa:39:f7:d2:96:e3:ae:0d:cc:e9:2a:9c:
         12:83:0f:fe:d1:74:94:10:bd:78:dd:83:d1:ec:c5:64:b1:e2:
         9f:b6:2e:05:99:ce:bf:90:35:dd:e7:fd:69:7f:68:bd:44:20:
         ee:da:e1:16:40:01:73:40:fd:71:59:88:9e:72:0f:be:b7:46:
         25:27:dd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 03:53:14 2025 by rpki-client