Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c28ef08-0aa2-3f02-b30f-28a1984c3c37.roa
File:                     1c28ef08-0aa2-3f02-b30f-28a1984c3c37.roa (raw, json)
Hash identifier:          cKnnNE09Jfixdu4n33uiQurD/Hd6uKAPfLe+ufpFQcg=
Subject key identifier:   22:C0:C6:D7:A1:85:8C:BD:2A:75:28:99:8F:9B:2F:64:C0:46:7B:12
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584BB02CFB6307FD60EABAA4C700
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c28ef08-0aa2-3f02-b30f-28a1984c3c37.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     215311
IP address blocks:        206.206.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2c:fb:63:07:fd:60:ea:ba:a4:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=e5b99850-b555-4002-a114-fd151612c05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:dc:7d:a6:72:a1:d2:de:2f:8d:f1:5f:9d:
                    2e:57:b2:79:d6:d8:2a:b4:08:59:79:dd:e7:81:50:
                    dd:62:45:f7:ad:42:98:5f:5a:ec:a3:68:8a:97:76:
                    21:4c:5d:39:b0:bd:08:de:82:19:2e:f1:1d:3d:31:
                    30:36:c3:fb:e9:c0:db:00:08:88:82:74:8c:24:70:
                    02:50:74:f1:e8:f0:dd:3c:2c:07:f1:44:aa:3f:5f:
                    ee:af:ba:ac:44:fc:37:2f:1a:55:d1:75:91:b5:35:
                    7e:5e:ab:8b:c7:db:d1:bc:00:f0:ae:db:db:d1:ce:
                    6d:38:bc:5f:4d:d6:c6:ae:10:ce:9b:58:8e:8d:38:
                    23:22:2e:e7:2a:87:32:96:05:72:7b:d3:06:8b:87:
                    a2:22:c5:8f:74:88:07:0f:68:88:63:28:cb:f6:d5:
                    b1:ea:02:d6:48:ac:54:b8:40:19:af:91:43:ab:07:
                    dd:8c:f1:16:11:79:c7:f6:02:2a:5e:3f:f7:77:25:
                    d8:66:2d:4e:fb:33:72:a5:da:fb:6f:69:3d:ab:12:
                    60:22:bb:15:a9:98:2c:a4:b1:0f:f7:9b:3a:fb:0f:
                    e0:fd:b6:e7:12:ad:20:57:b4:ef:7b:8b:40:53:28:
                    1e:2b:08:a4:83:d3:7a:8a:19:9e:c6:76:b0:e9:3b:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C0:C6:D7:A1:85:8C:BD:2A:75:28:99:8F:9B:2F:64:C0:46:7B:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c28ef08-0aa2-3f02-b30f-28a1984c3c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:19:5e:fe:b2:78:80:32:fd:6c:0e:5a:eb:55:84:a0:3f:d2:
         ae:b8:ce:65:01:fe:5d:89:a8:f7:55:aa:fb:4e:fc:2b:91:7c:
         4c:dc:d4:52:8b:ca:ad:1e:ac:a3:27:78:43:98:b0:9c:06:77:
         22:b8:6d:5e:0b:45:54:5d:5c:a5:88:21:45:16:25:74:a9:75:
         42:86:ef:c3:bd:66:a1:c3:03:95:09:56:ce:1b:66:db:2d:6a:
         24:eb:12:5b:0b:30:1e:e3:1b:f1:2c:dd:6a:ee:e3:b2:67:70:
         91:09:9f:1e:fe:c0:dd:5b:6c:f5:96:35:c4:5d:f1:c6:5b:87:
         27:2e:b4:66:87:59:70:b7:85:b3:27:12:8e:45:14:d4:06:9a:
         99:e5:55:ca:1d:1b:e4:83:9b:68:07:a0:9c:1e:50:0e:d7:e1:
         67:f8:d1:db:c4:8d:bb:17:59:50:50:3c:fa:e3:e3:0b:72:4a:
         71:bf:09:ee:4d:ff:17:c2:98:45:c6:4f:35:98:c7:ff:47:ba:
         3e:8e:5b:2f:53:5a:55:2e:f0:61:99:94:1a:22:c3:a2:56:14:
         69:6e:ca:18:9b:20:b5:7f:72:43:6b:89:54:79:01:59:c0:5f:
         fc:4e:b9:95:42:29:4b:e4:57:68:1b:3d:46:e0:1d:77:88:cc:
         b7:90:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:01:41 2025 by rpki-client