Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9cba215b-2331-3e8c-9a71-56c4f9bb1f7a.roa
File:                     9cba215b-2331-3e8c-9a71-56c4f9bb1f7a.roa (raw, json)
Hash identifier:          p1YfiopKo7lUpa2SViUzWiBUaw0pKgXgf6FWNyrN27M=
Subject key identifier:   39:DF:59:54:D2:E1:42:3D:65:BA:AE:58:48:7A:CB:76:B3:8E:EA:8A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E7E94EFA7F5D3C27E96FC5380
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9cba215b-2331-3e8c-9a71-56c4f9bb1f7a.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     13332
IP address blocks:        206.206.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:ef:a7:f5:d3:c2:7e:96:fc:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=b4677bb6-067c-4c9f-81fd-3b5322ba3bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9b:e8:65:70:59:5f:64:43:ae:2d:db:b9:1d:
                    94:25:c5:4c:54:b9:3a:0e:23:09:45:41:b6:7b:ed:
                    ee:f3:67:5b:66:63:c4:f4:82:8b:ab:c0:a4:db:21:
                    cc:37:4c:59:21:86:1b:74:85:ad:7b:3e:1e:7d:74:
                    3d:f8:72:22:d4:d7:4a:48:9e:27:d9:e9:ed:57:2a:
                    c0:21:fb:d4:dc:1e:3a:6e:28:3a:e3:2d:7c:fe:b1:
                    d3:6b:35:c6:6a:4b:db:42:14:48:2b:f4:15:cc:c8:
                    bf:34:93:35:be:73:a5:2c:14:3e:76:09:eb:45:a2:
                    04:78:35:0b:b4:82:5c:e6:e5:f6:7e:74:a2:b9:75:
                    f4:44:23:f2:91:19:b2:ee:37:d5:56:2f:f9:8d:15:
                    fc:fb:cc:e7:86:5f:11:3b:3c:89:0d:ea:a0:f3:d9:
                    90:38:be:8a:c5:bf:a7:d8:88:5d:e7:93:1b:fb:46:
                    bc:24:15:f4:eb:7c:b2:51:78:41:66:f6:28:fe:ec:
                    11:36:c7:3d:d2:42:a4:bd:3e:69:04:82:fa:52:0b:
                    63:69:a3:c7:e4:71:47:99:3b:67:21:57:2b:a8:59:
                    f5:b2:e6:6e:82:ab:39:65:c3:03:22:89:3a:26:b1:
                    cc:2f:40:52:7c:51:0c:ef:0f:a4:b8:25:bd:2a:00:
                    5c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DF:59:54:D2:E1:42:3D:65:BA:AE:58:48:7A:CB:76:B3:8E:EA:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9cba215b-2331-3e8c-9a71-56c4f9bb1f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e9:28:3c:5f:4f:58:a9:1b:13:ce:e4:7e:ac:eb:03:e8:16:
         61:93:54:a4:be:f2:9e:7d:c0:00:98:08:06:d6:35:96:02:69:
         22:ef:bd:73:25:1d:15:d4:83:25:dc:4d:a1:e5:3f:60:7e:6e:
         39:ca:b1:c0:5c:90:70:88:7f:d3:17:43:e3:62:51:07:e4:30:
         c6:59:06:4c:23:07:71:aa:25:aa:48:73:8a:2f:06:56:54:ea:
         dd:5d:fb:7b:1c:61:17:9e:63:2b:72:76:3c:93:a1:f0:4f:79:
         b3:de:f1:1b:e4:4b:84:eb:60:31:1b:76:44:fb:75:a7:da:ec:
         74:c4:bf:3d:08:ea:a6:49:12:a4:00:47:ff:2f:4a:9c:f7:9e:
         60:92:cf:70:57:37:73:c5:f0:05:f4:51:fe:ae:d6:86:f0:30:
         bb:2f:5e:9c:14:74:7a:3f:2c:f3:01:43:3c:f7:ff:6d:70:7c:
         f6:4a:13:2c:3c:d2:f5:cc:e7:67:a7:90:19:43:67:5c:06:25:
         10:10:58:70:fe:56:60:5d:57:f3:75:d3:ea:1b:a0:89:e3:66:
         8d:95:44:87:89:98:88:f9:94:12:ee:3b:0d:7d:1e:8b:ac:e4:
         ef:69:40:b5:64:26:e3:c0:38:d1:27:11:05:57:c5:62:5f:08:
         6f:01:72:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:58:41 2026 by rpki-client