Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6724d251-08d5-3d2b-8fd6-5cbbf3de6ec3.roa
File:                     6724d251-08d5-3d2b-8fd6-5cbbf3de6ec3.roa (raw, json)
Hash identifier:          q9wHFXZ9moIMr6Jf29zMwPFzYWsIqHjAatVXhA0F9lw=
Subject key identifier:   33:4C:1C:1D:92:A8:54:11:30:4A:23:99:A6:FF:2A:4E:52:78:80:B2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F5A32FF8D76B46F32C44F28E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6724d251-08d5-3d2b-8fd6-5cbbf3de6ec3.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     211192
IP address blocks:        206.206.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:ff:8d:76:b4:6f:32:c4:4f:28:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=c2b926ca-f85a-4f53-aa42-3c2429b9a64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:28:5b:ff:18:1a:99:d9:ff:2f:d8:71:ba:
                    d2:78:66:02:21:37:40:79:b0:39:e7:5b:a1:75:2c:
                    58:b8:9d:38:7e:ed:b0:d8:6b:55:a2:73:47:20:17:
                    a9:d2:9d:53:2b:5c:1b:84:7b:b9:bf:a3:06:79:ec:
                    3e:c8:97:c3:17:c6:3d:a1:94:f7:60:65:36:30:a0:
                    3b:3d:c2:dd:1b:bb:06:f0:80:9c:0a:da:cd:5b:fc:
                    03:cf:71:7c:d0:48:b4:db:50:ce:b9:fb:ac:cc:47:
                    cb:8e:7d:7d:d4:90:75:a6:a7:a4:f8:0d:d3:ba:de:
                    1a:ea:4e:72:18:af:a0:56:99:43:33:13:ef:d7:81:
                    13:6b:0a:c9:41:34:35:89:85:9e:1d:5f:73:37:99:
                    ca:07:f4:37:5c:01:df:ed:8a:11:4d:08:50:49:b0:
                    41:e0:e5:f3:93:04:e2:26:be:82:db:4b:d6:05:40:
                    94:4f:8c:d8:65:db:e8:63:5c:e6:40:bd:1b:1c:c6:
                    c5:b5:8d:73:a7:5c:e4:48:77:f5:57:a0:11:7c:13:
                    56:4e:6a:0c:b7:de:95:61:22:3a:25:19:e3:25:8b:
                    c1:0f:92:38:c2:12:fb:ac:c6:81:66:a9:9e:ef:db:
                    d4:2b:c0:ec:c4:98:23:ba:98:d5:fa:35:59:e8:1d:
                    a0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4C:1C:1D:92:A8:54:11:30:4A:23:99:A6:FF:2A:4E:52:78:80:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6724d251-08d5-3d2b-8fd6-5cbbf3de6ec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:2a:83:5a:39:d7:24:e9:b9:df:8f:1d:20:52:1b:08:29:8c:
         d2:a4:8a:7f:3e:e3:a3:06:0c:d8:cf:3f:d3:71:38:8c:74:d8:
         63:50:97:0d:e2:dd:99:c6:69:2a:a1:a8:56:59:cd:4f:ac:3d:
         57:5b:33:bb:e8:7e:cb:cb:9f:4d:59:fe:bc:7b:b7:1b:85:ca:
         3a:e6:41:15:6e:b7:e8:aa:90:e2:a9:bb:09:bb:ab:d8:f3:2a:
         ef:3c:6d:5a:02:20:d2:e1:ac:7b:a2:11:73:06:f6:f5:4b:fd:
         4e:3e:a6:75:03:06:80:d9:2e:d5:d1:6c:f5:19:58:99:89:68:
         8d:d1:61:b4:d3:4d:31:68:a5:ed:a9:ca:93:c5:c4:ee:42:29:
         2e:81:ca:f7:be:23:ad:8f:c0:9b:b2:93:a3:36:1d:6e:9c:3c:
         19:1e:82:8f:e1:16:bd:9f:81:7f:79:bb:52:42:82:f6:f4:41:
         52:5b:3b:4d:7c:47:9c:bc:8a:26:ab:20:92:c1:9f:fc:47:56:
         50:9e:cc:b3:87:8e:12:fe:00:71:9a:d2:4d:01:9d:75:97:6c:
         b0:01:fa:f9:e8:62:f6:48:88:ff:ee:04:0e:3b:2e:7d:a5:96:
         18:ea:a7:81:31:37:f6:bf:ba:f5:3d:a4:ca:fc:86:90:7b:ff:
         48:d0:15:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:05:10 2026 by rpki-client