Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bcc68759-c3e3-3697-9b8a-b4cd4981b4bb.roa
File:                     bcc68759-c3e3-3697-9b8a-b4cd4981b4bb.roa (raw, json)
Hash identifier:          tV/XchE3hlJpXSjnCbG6l2VM9LmbXiFzRFtYYQSCYwU=
Subject key identifier:   42:26:F4:20:20:89:A2:46:B4:B3:48:24:66:07:99:81:12:75:0D:C1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A1B60008DCC6A156B76EAA200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bcc68759-c3e3-3697-9b8a-b4cd4981b4bb.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     13332
IP address blocks:        206.206.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:00:8d:cc:6a:15:6b:76:ea:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=36ca0836-5b2c-410c-ac7d-e95c85417dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:96:b2:37:db:43:2a:41:2c:e5:d4:89:11:2c:
                    0b:45:03:d8:b5:fb:fe:20:42:5d:4c:40:ea:be:c7:
                    1c:76:af:5d:d7:fd:c3:09:57:88:23:57:c0:99:87:
                    10:27:84:75:0b:43:97:45:9d:02:95:8b:b5:ba:87:
                    5d:15:be:0e:5f:3d:75:2d:4f:ea:9e:43:05:0b:34:
                    e9:aa:b3:12:2e:f4:74:6c:d0:7f:c8:b5:67:88:72:
                    47:e8:64:7a:f7:02:f5:78:85:7b:18:a4:0a:c4:ac:
                    63:33:69:f8:f6:bf:fd:c4:bd:4e:47:15:54:92:03:
                    e6:4c:b6:c9:f3:77:ed:5b:6a:fc:ae:cf:b6:7d:b9:
                    91:9d:46:d8:4b:14:fc:13:53:c5:22:b8:d7:24:22:
                    3c:5c:6b:9e:02:69:a2:81:60:f7:e7:bb:21:82:7c:
                    24:28:7e:2e:a5:1d:40:c3:74:18:70:86:6a:74:64:
                    7e:6d:f4:14:38:ee:02:63:98:7e:3b:99:21:ff:e3:
                    84:cd:e7:50:59:c5:06:e3:91:29:ca:bc:a6:3e:2b:
                    cd:63:bd:df:32:f5:e1:14:fb:6e:c5:13:fe:97:bb:
                    e5:1e:b5:e6:0d:64:44:dc:a2:ac:dd:23:e8:89:3a:
                    c2:f9:ae:14:ba:78:ef:3c:93:52:5b:b6:2b:7e:fb:
                    97:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:26:F4:20:20:89:A2:46:B4:B3:48:24:66:07:99:81:12:75:0D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bcc68759-c3e3-3697-9b8a-b4cd4981b4bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:80:ac:d1:ad:41:2f:0e:53:c6:8c:17:ba:72:d6:1c:b9:65:
         e1:cb:88:b1:16:32:12:8c:ef:b2:3a:2b:11:e2:09:cd:1f:23:
         a9:94:35:f3:49:32:87:17:3c:a9:57:e5:58:e8:e5:63:46:ad:
         6d:a5:e8:fc:17:d3:81:a4:50:e2:3d:97:c5:f9:71:f8:2f:28:
         59:b3:3a:c3:cc:13:ba:a8:76:87:46:54:4d:b3:36:45:24:39:
         42:cb:47:01:f1:5a:75:ba:8b:4c:a2:ae:55:e8:69:91:c8:05:
         1a:e1:e9:57:02:f7:83:1c:63:31:f9:04:31:42:07:1b:fa:05:
         21:37:8d:62:25:e5:a6:82:2d:1b:c0:48:00:48:90:d2:9c:9e:
         3e:93:59:59:bb:c8:82:e2:a4:67:3b:88:53:59:94:66:52:b5:
         68:dd:01:90:b3:71:43:43:60:2f:91:fe:43:af:c6:85:77:45:
         a9:6e:3d:c9:92:9e:fb:20:c6:65:82:3d:42:fc:39:3e:4c:05:
         41:0a:cf:3e:c3:bb:c2:64:c8:43:69:ce:dd:ac:54:42:86:d9:
         17:37:9f:d1:ce:8c:c5:23:35:fb:97:26:e8:58:29:54:3f:ba:
         9e:2d:21:10:77:f5:5e:74:75:a4:21:50:52:0f:82:d5:56:f3:
         3f:c4:4b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:22:26 2025 by rpki-client