Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cc76b8e2-6338-3094-98fd-8194d7054ba8.roa
File:                     cc76b8e2-6338-3094-98fd-8194d7054ba8.roa (raw, json)
Hash identifier:          s9CGCoDPHIn0s7VuDEBpuuqY+8pSbBM8blY+pDYysuY=
Subject key identifier:   90:64:2E:6B:A6:04:6A:22:B1:8B:B0:9A:67:AF:5B:84:23:F8:CF:F2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849DDF4D8F5B39924EE01842680
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cc76b8e2-6338-3094-98fd-8194d7054ba8.roa
Signing time:             Fri 16 May 2025 01:00:46 +0000
ROA not before:           Fri 16 May 2025 01:00:46 +0000
ROA not after:            Thu 14 Aug 2025 01:00:46 +0000
asID:                     20001
IP address blocks:        206.206.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dd:f4:d8:f5:b3:99:24:ee:01:84:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 16 01:00:46 2025 GMT
            Not After : Aug 14 01:00:46 2025 GMT
        Subject: CN=1874cc86-d739-423e-bd43-2f25b95260d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:52:3c:16:93:5e:46:6a:a1:61:d1:cd:af:48:
                    26:bf:e2:1f:90:25:1b:8a:2c:22:7f:54:5b:c9:d5:
                    78:e7:84:ab:0c:77:5f:90:46:38:24:db:54:3b:6f:
                    3c:90:ad:de:83:5c:1d:88:dd:f2:58:06:5f:d0:e3:
                    bb:c4:be:8b:4a:72:a7:09:11:60:a3:74:46:6f:d5:
                    7d:6a:13:f5:e3:0c:3b:19:d4:dd:b9:db:a3:d2:3a:
                    11:22:ca:84:19:34:2e:32:eb:fc:1f:61:f4:43:a8:
                    1f:fb:27:7f:18:0e:8e:a1:b2:de:f9:8b:bd:c5:31:
                    51:33:a6:63:fb:54:ba:d8:b5:8e:82:e0:cd:5d:29:
                    8e:13:ab:65:c1:a7:1d:cf:bd:74:43:6e:53:f6:96:
                    5d:aa:25:fa:b2:2f:56:22:11:c2:a6:1e:db:41:ba:
                    f8:32:12:e1:aa:e6:7b:c4:2b:c8:bf:35:35:c0:ac:
                    6b:4e:7b:c9:2e:1e:2a:a3:4e:89:50:a2:3a:14:d4:
                    e2:71:e3:13:54:2d:2a:6c:69:b7:c3:72:88:76:e8:
                    7c:66:d9:6a:f7:97:b3:6a:1f:cd:1a:db:87:29:e4:
                    ba:41:01:4c:23:47:35:1d:c2:d7:3b:95:e6:c0:98:
                    24:33:26:4f:27:9e:9f:b7:7d:36:e6:f7:4c:1a:c9:
                    17:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:64:2E:6B:A6:04:6A:22:B1:8B:B0:9A:67:AF:5B:84:23:F8:CF:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cc76b8e2-6338-3094-98fd-8194d7054ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:04:01:bc:fe:9b:07:80:f7:98:e3:2a:40:6c:a7:0b:c3:40:
         12:52:84:ac:45:20:b4:c7:e9:f0:83:0c:36:60:b2:5c:3d:bc:
         02:df:1e:ee:99:3c:6c:85:ec:8c:c6:2b:2c:dc:34:ec:40:4e:
         b0:06:75:39:25:08:92:9f:82:4c:f1:6a:1f:96:51:6d:67:13:
         5a:12:70:a0:f9:ff:13:92:49:81:64:2a:1f:5f:9c:55:d3:05:
         6e:d4:62:c5:34:a3:a9:97:17:75:c9:fa:ab:2f:97:56:a9:38:
         ad:d4:a1:87:90:f7:db:bd:ce:0c:ed:b3:b9:c0:48:97:b6:d9:
         ce:f2:da:67:97:be:dc:43:9d:6a:8d:b0:ad:73:73:12:ee:ee:
         98:08:1c:52:84:27:c3:74:3c:b5:9d:7a:09:b7:63:69:e8:2f:
         99:6b:85:1e:5e:d2:91:c3:63:34:c9:21:eb:4f:e1:c4:c9:00:
         3a:e7:09:3c:f1:6f:94:0d:4f:93:ea:92:fe:d3:1d:64:d6:f4:
         f6:c4:b2:39:e0:0a:9f:69:1a:6d:c9:3b:12:0e:ad:91:47:ee:
         92:ff:57:e6:64:2c:df:54:c1:76:3f:1c:c7:b0:c9:ba:8e:b7:
         c9:8e:0f:cc:db:7e:ec:01:01:33:ec:2a:94:1c:af:81:6b:e7:
         cd:8b:8c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:32:41 2025 by rpki-client