Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f858d5b5-6f43-35ac-a073-d5d6074445c3.roa
File:                     f858d5b5-6f43-35ac-a073-d5d6074445c3.roa (raw, json)
Hash identifier:          XZ0fIzTK6cN+YzgOa+H8LZzm1Ke/4l5zYwXG6Url3vk=
Subject key identifier:   D7:F7:DC:35:46:13:B3:44:6D:76:42:06:3B:CA:27:74:5C:11:77:16
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A00DAC0F9B93F03705F4E5580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f858d5b5-6f43-35ac-a073-d5d6074445c3.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     7018
IP address blocks:        206.206.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c0:f9:b9:3f:03:70:5f:4e:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=6b271fd6-f8aa-4a5f-9b95-63383f7d5aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:5a:64:d1:73:75:dc:d4:9e:2a:db:5e:da:
                    0a:a0:b2:75:6e:a4:b8:1a:30:c9:d8:42:dd:13:33:
                    b2:b2:77:04:37:4b:48:45:95:69:05:34:1d:b2:ac:
                    7d:0b:2b:8d:f7:1b:4e:d8:3d:aa:2e:56:cf:de:c5:
                    6e:88:1d:e5:36:16:15:c8:e0:52:06:e9:7c:0b:04:
                    25:a4:bc:fd:c1:ad:32:3c:cd:1e:32:45:f9:70:9b:
                    16:e0:e7:c1:c4:79:b4:a1:87:d8:68:3c:d6:c8:4d:
                    d5:dd:54:32:27:97:79:d7:f3:91:d4:bd:fc:f2:70:
                    58:9f:92:b4:d0:34:00:39:c5:5f:de:81:64:61:fe:
                    49:50:fb:ce:66:c7:e8:87:b4:03:0e:46:a5:f6:02:
                    67:2f:c5:fb:74:e5:b4:6f:c3:80:3d:75:7b:d3:60:
                    1b:85:a9:a5:6d:0a:f8:14:d2:45:a2:20:f7:bb:c5:
                    19:e1:6f:fd:5c:1f:fc:c0:31:da:66:d6:8a:7f:ff:
                    dd:49:cc:5d:38:dc:f4:a7:05:0c:21:3b:70:0f:12:
                    a8:fb:3b:38:a4:e5:b8:c0:9d:41:18:04:48:44:48:
                    f5:7f:c8:51:47:ce:07:16:e1:48:f9:55:b5:d1:95:
                    1f:e1:3a:02:5a:d4:8c:0f:e9:c6:06:ee:15:c3:63:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F7:DC:35:46:13:B3:44:6D:76:42:06:3B:CA:27:74:5C:11:77:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f858d5b5-6f43-35ac-a073-d5d6074445c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:ae:e2:bb:19:82:0f:32:ad:dd:88:de:c8:d9:8e:2c:3e:ce:
         31:41:6e:6e:a3:f6:11:66:66:51:d4:11:9a:48:19:ad:53:d0:
         53:d4:7c:eb:35:0e:9c:ad:f4:6b:9d:f3:a7:c1:93:bc:1e:be:
         bf:01:07:d0:e7:57:66:fe:18:11:9a:2b:4c:61:a7:3b:00:9b:
         29:27:aa:fd:99:31:3d:8a:45:7c:29:5e:42:b8:0d:e6:cb:35:
         65:ba:3e:a1:12:55:d8:a7:ef:e3:1b:48:b4:9d:38:d0:32:ab:
         4a:e2:4b:7a:d4:59:7f:68:c9:93:7e:a7:ab:34:27:bc:41:ec:
         14:34:c0:6c:f6:10:0f:d5:93:1f:47:23:a5:49:f7:bb:af:0e:
         4d:c8:f5:9b:9a:92:67:f7:1a:6c:b2:56:01:fd:4f:34:1a:45:
         58:16:a1:6b:38:49:65:12:9f:bf:70:1e:f3:67:4a:48:24:57:
         a0:76:b1:41:4a:45:8b:8c:bc:8e:fe:c6:ad:09:16:f3:ee:c8:
         e5:9c:45:33:f6:06:20:fc:95:65:f9:f3:e3:cb:09:63:4c:bf:
         e8:54:08:10:a5:2c:14:55:02:96:f1:6f:af:7e:0f:48:10:51:
         58:f9:7c:94:b1:ea:24:6c:5f:c6:0d:c6:61:46:31:ad:c8:d2:
         1b:91:20:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:27:28 2025 by rpki-client