Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ae1b1023-d9d1-300a-8b40-bea4a0908064.roa
File:                     ae1b1023-d9d1-300a-8b40-bea4a0908064.roa (raw, json)
Hash identifier:          3mv0QhomC8VpNimtDe4zbZpchgdb98z953uHlukzVaE=
Subject key identifier:   2B:9C:3A:ED:D0:7D:68:D6:D3:D5:6D:DD:50:53:1E:FA:D0:5B:0C:B8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E44C894D9F30085790084A3C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ae1b1023-d9d1-300a-8b40-bea4a0908064.roa
Signing time:             Tue 23 Jun 2026 16:07:38 +0000
ROA not before:           Tue 23 Jun 2026 16:07:38 +0000
ROA not after:            Mon 21 Sep 2026 16:07:38 +0000
asID:                     212238
IP address blocks:        206.206.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:44:c8:94:d9:f3:00:85:79:00:84:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 23 16:07:38 2026 GMT
            Not After : Sep 21 16:07:38 2026 GMT
        Subject: CN=b5815326-9e1e-4cce-9304-f0d641da19aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:34:99:c8:ef:b2:06:41:5a:19:aa:cf:e3:dc:
                    20:08:03:c3:3e:e8:83:cc:11:cc:b1:01:f5:0e:76:
                    61:2d:5a:6e:19:05:45:d9:95:1c:75:49:f2:11:6d:
                    3d:dc:e4:8f:12:a1:2f:ce:a6:07:5b:ab:46:2d:c6:
                    3b:53:1d:42:4e:14:8f:e8:5a:f9:f2:c5:42:a4:8c:
                    79:41:a2:a5:7e:4f:98:3e:5d:bb:15:8c:6c:99:4d:
                    ef:93:6a:ab:c9:e3:04:5c:71:66:f3:68:08:5d:90:
                    36:13:6d:ac:df:ff:c1:13:ba:ed:fd:32:2e:38:be:
                    91:e4:fc:56:e5:c7:03:12:ee:23:b9:25:18:cd:35:
                    60:b1:c6:56:1a:81:05:ab:76:3a:b9:d4:c5:17:92:
                    b9:9c:5e:76:2d:50:f7:30:b6:8c:28:b4:d1:6b:07:
                    3e:d5:d5:3a:ed:3b:d1:6a:e1:43:8a:0d:f2:41:24:
                    0b:91:49:f1:54:d2:85:d7:6a:31:f6:93:aa:4e:33:
                    4f:7a:d7:ec:ec:74:63:d4:1c:42:29:82:db:ba:66:
                    cb:2a:4e:41:65:40:7c:c1:3a:8d:8f:dc:8e:10:f6:
                    02:d7:34:a1:75:0b:b9:af:ff:cf:34:3c:7f:47:ad:
                    fb:28:03:6a:d1:52:dd:cf:50:75:d3:11:14:ed:49:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9C:3A:ED:D0:7D:68:D6:D3:D5:6D:DD:50:53:1E:FA:D0:5B:0C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ae1b1023-d9d1-300a-8b40-bea4a0908064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b5:7c:7a:bd:73:21:ad:4d:bd:3c:bd:7f:d3:c6:28:9e:15:
         10:c5:ce:7f:1a:9a:81:c9:17:eb:35:d4:3c:12:03:f9:2d:5f:
         f4:85:74:ad:ef:45:6a:9b:64:7b:fb:42:61:2a:68:9d:89:e5:
         cb:2e:2c:4a:8e:de:de:c9:6e:b4:c5:43:ef:da:62:83:68:87:
         f9:02:28:b9:e1:ee:4a:37:85:40:7a:bb:34:67:19:5b:e6:70:
         82:16:0d:c2:97:bc:5e:4d:fa:4d:32:10:d6:87:d8:f9:e5:37:
         df:44:9c:9a:b9:24:ed:06:b3:1a:23:a1:ee:ba:b4:84:04:bf:
         74:15:1f:33:ec:3d:5d:08:c0:1c:ce:9f:5b:0e:90:9b:81:e6:
         3a:1b:2d:dd:fc:41:01:8b:30:fb:a5:4b:fa:a6:46:6b:b3:f4:
         19:66:95:b4:f9:6c:3a:fb:1e:41:ac:33:77:ae:66:1b:e0:45:
         59:50:75:71:12:6b:c1:ce:90:42:68:52:4f:51:6e:99:4b:75:
         9f:b9:cd:08:23:bf:92:46:9c:5a:f7:52:48:94:e9:6d:d5:e0:
         c3:16:0b:ea:0a:95:a7:99:ce:5d:f7:62:e0:b0:69:ae:2b:7c:
         b3:e8:ef:ef:99:7f:f6:0d:88:48:06:4d:58:32:a7:b4:b7:03:
         76:75:0a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 23:35:41 2026 by rpki-client