Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b1fc06a3-8980-37ad-9e65-b6cf2ba5a305.roa
File:                     b1fc06a3-8980-37ad-9e65-b6cf2ba5a305.roa (raw, json)
Hash identifier:          573NSbGh/pG2FWlCK7dV44tIRUaZbkfxf0ZUfSUL7Vw=
Subject key identifier:   8F:39:CD:66:F8:DE:AB:F5:1A:CB:90:02:2E:E6:D5:E3:DD:5C:20:E3
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584BB24D5C974FF8B7A6D2D77600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b1fc06a3-8980-37ad-9e65-b6cf2ba5a305.roa
Signing time:             Thu 30 Oct 2025 19:17:28 +0000
ROA not before:           Thu 30 Oct 2025 19:17:28 +0000
ROA not after:            Wed 28 Jan 2026 20:17:28 +0000
asID:                     205886
IP address blocks:        206.206.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:4d:5c:97:4f:f8:b7:a6:d2:d7:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 30 19:17:28 2025 GMT
            Not After : Jan 28 20:17:28 2026 GMT
        Subject: CN=b674bd58-5b30-4973-ba63-54dd9c7448aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:95:e1:f6:0f:bb:6e:2f:f4:bd:a7:f9:ed:c1:
                    ca:89:73:0d:65:9e:85:a7:8a:05:cb:68:a1:bc:6a:
                    7a:be:b8:31:b5:73:4e:c7:b9:19:9e:33:6c:98:c6:
                    c5:cb:9e:87:88:ef:ba:04:8b:73:f6:c8:a7:9c:43:
                    76:05:65:af:6c:17:82:b1:8d:3f:50:34:93:b4:4e:
                    b0:6d:f5:11:91:73:d1:b5:ca:47:8d:49:79:3c:39:
                    c0:7c:7e:92:8f:15:52:d8:5e:a5:d6:81:48:b1:f1:
                    bf:63:26:76:fd:3b:67:37:bb:e4:db:16:27:6a:71:
                    28:65:a9:fd:2b:34:2d:17:1c:b2:d2:02:4d:62:97:
                    1c:05:b1:34:96:e5:a0:12:f5:f6:55:a3:39:c1:86:
                    d2:e3:9c:b0:e0:81:f0:1e:a3:19:0f:0e:1e:30:43:
                    cb:99:6b:a7:a3:fc:7c:b2:c9:32:c2:e3:0f:60:72:
                    b3:d9:11:46:6e:63:5f:81:4d:3e:33:24:8f:64:36:
                    a7:a0:73:c6:44:b8:11:76:2c:5f:c0:75:da:a4:ec:
                    56:73:dd:4f:21:b9:4f:a1:4c:f9:05:04:0f:80:dc:
                    af:db:4c:9e:1a:c8:f9:a0:bf:07:d6:86:89:18:d9:
                    3f:38:cd:7b:8a:c1:f7:15:f6:e2:c1:7d:6d:0b:6d:
                    b4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:39:CD:66:F8:DE:AB:F5:1A:CB:90:02:2E:E6:D5:E3:DD:5C:20:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b1fc06a3-8980-37ad-9e65-b6cf2ba5a305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ee:a2:b1:44:92:81:98:30:49:5a:b7:c6:e1:13:72:74:43:
         9c:08:9e:c4:ae:ae:a9:6a:c6:18:d3:58:66:70:d6:46:84:a2:
         52:68:b2:15:19:2b:f2:2a:55:ab:5a:3d:b1:e0:6f:c1:de:ad:
         36:c6:ac:7c:66:70:14:cb:74:0f:23:8e:49:b1:b5:b1:93:e8:
         4c:49:3b:f2:e0:4b:0d:b6:1f:b6:5a:91:aa:48:8f:37:f8:fd:
         09:99:02:76:1f:86:a9:0e:69:c1:e4:9f:c2:78:46:e1:aa:23:
         07:52:49:db:94:98:29:df:9c:eb:55:7b:83:25:1f:f7:2b:45:
         88:b5:6b:55:e8:ee:17:db:78:2b:50:be:2c:af:18:cf:c0:1e:
         5c:bc:e6:59:01:a2:3e:35:db:14:e4:eb:b0:6b:1b:86:3f:81:
         45:c4:df:ed:80:4c:90:e4:cb:05:e2:6b:df:c9:3e:0a:97:47:
         e8:bf:c5:2a:81:fd:8b:77:cd:a3:b2:63:e3:9a:9f:cb:80:9b:
         d1:02:f9:d2:e1:b0:7c:cd:f6:3a:5f:12:f5:d4:95:fc:80:07:
         08:c1:40:d4:13:04:fe:fc:f4:6a:e4:5e:11:17:53:c3:f4:ab:
         a2:fd:5e:44:69:55:0a:63:af:1d:df:6d:7a:4d:9f:4e:43:d1:
         bd:e3:06:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:06 2025 by rpki-client