Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9cba215b-2331-3e8c-9a71-56c4f9bb1f7a.roa
File:                     9cba215b-2331-3e8c-9a71-56c4f9bb1f7a.roa (raw, json)
Hash identifier:          b0A0NgxkkWCGQP8gMBccVj/m8cI0MnA3bUlvfdsV7VQ=
Subject key identifier:   50:68:87:21:FF:9E:40:F1:14:4B:2E:BA:A1:A1:FF:CA:8B:07:46:72
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F20F7B949ACBBBF0FDF6FFA80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9cba215b-2331-3e8c-9a71-56c4f9bb1f7a.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     13332
IP address blocks:        206.206.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b9:49:ac:bb:bf:0f:df:6f:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=81b36860-7957-49b8-9ec2-378dca32280b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:65:c1:e8:29:ef:f4:46:c4:a9:de:a3:53:
                    f6:56:f3:8d:fc:ce:9b:c7:50:89:45:ca:4a:6e:20:
                    e2:7b:87:fd:a6:e5:bb:91:89:3a:4c:cb:a3:17:60:
                    8b:2b:01:6a:8a:75:7d:e1:d5:6e:3c:01:32:49:03:
                    af:14:3a:a0:22:ab:c7:5f:09:a4:0d:43:9a:e9:78:
                    82:be:8b:9a:e5:b1:47:9f:76:b9:26:a7:ab:a4:ae:
                    76:fa:05:7f:0b:de:82:1b:c4:f0:70:48:af:ec:0f:
                    2e:2e:92:e4:12:fd:1e:3e:27:fa:e5:64:45:3d:19:
                    f0:38:ff:d4:6b:a6:b6:a7:ba:ff:69:a3:f8:fa:12:
                    9f:3c:1f:b8:95:52:55:3d:e3:24:a8:86:67:57:7e:
                    25:25:8e:5a:b5:62:58:bb:f7:cc:65:e9:03:5b:6c:
                    12:a3:e9:49:c2:53:d5:b2:7f:b7:6c:a0:d4:f7:09:
                    96:29:24:90:79:7e:3c:4a:a6:3e:00:49:80:e6:9f:
                    b7:ab:79:6f:0c:dc:4d:d9:d2:f5:99:90:8d:ba:42:
                    27:15:b0:85:4f:39:0e:eb:9b:32:07:90:be:0c:34:
                    94:9d:5f:6f:ee:31:58:63:bc:d7:15:a9:4b:64:8d:
                    1d:2a:f8:1e:50:9f:28:06:45:58:28:5a:ac:dd:df:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:68:87:21:FF:9E:40:F1:14:4B:2E:BA:A1:A1:FF:CA:8B:07:46:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9cba215b-2331-3e8c-9a71-56c4f9bb1f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:fc:d9:75:e6:2c:7e:bc:56:53:77:c7:0d:a9:2f:95:2f:c7:
         f5:32:c7:c8:3e:e3:29:c6:2f:37:b8:a3:b9:df:75:46:28:63:
         03:cd:98:77:e7:87:97:c7:89:aa:81:44:ba:82:2d:9f:e7:88:
         de:2f:2b:13:e8:0c:47:ad:fd:c5:c4:a1:0b:06:f8:8c:dc:7f:
         0b:7f:4d:98:2d:bd:85:4b:f4:6b:b1:f8:c0:d1:32:32:14:7c:
         fe:b5:f1:9c:fe:a7:b1:05:20:3b:ba:3e:be:33:b6:c2:7b:97:
         d4:aa:be:64:bf:b7:ab:c8:34:d5:75:81:e9:e2:88:c5:aa:fe:
         78:e7:0f:3e:b3:c9:9d:2f:50:da:a7:7f:19:af:46:2e:66:69:
         97:7f:ea:a9:6b:5d:87:33:99:43:86:c7:a5:58:33:3d:d6:1b:
         6b:73:69:80:83:5e:44:c1:9e:40:fa:96:17:26:f1:86:df:40:
         a5:ba:36:eb:00:fe:0e:3b:ee:32:6c:e6:a1:4e:d6:a8:86:72:
         a2:34:7e:4b:55:8c:a2:f1:55:33:86:e4:44:1f:f1:52:f8:61:
         d7:ae:be:ec:cf:be:00:74:1e:69:8f:65:e4:d4:cf:43:15:61:
         35:a5:c4:f5:ad:2c:c6:2d:0a:39:9b:46:78:e1:56:28:24:8d:
         2d:3c:d4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:02:56 2026 by rpki-client