Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ce4b79a2-2bbc-38fb-a3b2-3516f2d23a82.roa
File:                     ce4b79a2-2bbc-38fb-a3b2-3516f2d23a82.roa (raw, json)
Hash identifier:          pAb12o9tSpnqE5Xxevwvufjk/qhiZC0atzI27/J7cw4=
Subject key identifier:   CA:44:88:77:3B:BF:50:94:CF:80:F0:F1:5F:29:0A:1C:07:5D:82:6E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F1897A47BEA49CC782114DC80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ce4b79a2-2bbc-38fb-a3b2-3516f2d23a82.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     397423
IP address blocks:        206.206.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:a4:7b:ea:49:cc:78:21:14:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=63c4b047-3381-435e-873c-49bf8eec46b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:94:a7:33:24:4e:7e:05:ec:9e:9c:b4:ad:
                    03:34:4e:cb:d6:e2:f5:51:b7:c3:2b:c5:d5:c8:df:
                    e0:06:28:21:e9:01:20:cd:d5:69:11:67:25:25:d8:
                    8e:f5:46:b8:77:b9:0b:33:1e:79:77:d0:30:5b:3b:
                    06:fc:44:f5:be:9e:fe:cd:db:39:7a:9a:15:77:34:
                    65:7b:a2:a9:ac:0a:d1:9d:90:61:06:f4:ad:1f:8d:
                    d1:66:59:4e:f0:52:1d:64:02:c5:23:db:47:cc:12:
                    0d:33:79:4a:85:24:1e:2c:65:1d:4d:9e:04:81:63:
                    57:df:2b:73:cd:98:0d:d7:24:35:ba:54:fa:35:23:
                    ba:38:e0:5c:75:c7:68:85:e9:83:de:46:73:78:d5:
                    d5:69:a8:12:c2:2d:49:30:6f:8b:fc:eb:de:43:e5:
                    f5:0f:bd:b0:01:0e:2a:22:a4:9a:c3:c5:86:02:33:
                    59:f0:77:3d:b8:bf:28:d9:3d:26:b8:f2:ad:2b:fc:
                    14:2c:f3:db:a3:bc:61:dc:9c:5d:be:cd:b9:6a:c9:
                    e4:d1:70:6e:cd:9c:a6:38:51:e8:a8:c6:da:c0:59:
                    a5:aa:38:4d:7a:de:f6:1b:9e:8a:15:16:6c:e1:b0:
                    37:36:13:61:a6:8e:23:39:18:d3:28:45:34:30:90:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:44:88:77:3B:BF:50:94:CF:80:F0:F1:5F:29:0A:1C:07:5D:82:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ce4b79a2-2bbc-38fb-a3b2-3516f2d23a82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2b:df:29:24:1f:e0:2a:ed:e0:eb:3f:17:e2:0b:67:fa:35:
         46:03:76:02:33:3c:cf:9c:f3:88:81:69:92:91:77:5e:db:c2:
         f6:94:1e:98:63:45:c0:fa:f3:b8:93:ea:42:c6:a3:0c:a8:8b:
         11:3d:53:b8:e7:51:3c:54:1c:c2:d9:00:70:9f:84:05:b2:0c:
         0f:2f:74:44:e5:4c:10:9d:17:41:64:e1:97:a2:42:3c:04:46:
         fb:94:6e:2e:41:92:a6:c7:16:b4:9e:12:e4:9a:ae:57:8d:3c:
         7a:30:f0:75:35:85:75:d7:7c:3f:ce:fa:3c:da:44:3f:f3:e1:
         f3:1f:58:a6:88:6a:59:3b:26:08:cd:28:08:02:33:8f:14:9d:
         aa:69:97:d8:e7:d2:ca:e7:de:bd:ca:ae:2c:dd:aa:fd:45:55:
         e8:64:60:2d:f2:f7:fd:3a:05:4b:40:ad:ca:e5:33:13:58:6f:
         ce:3e:6c:1c:4b:f6:18:f6:fd:7a:3c:2f:87:1b:de:73:82:4b:
         43:c1:ef:39:c5:9c:75:cd:22:a7:71:4a:62:5b:dc:a7:df:20:
         aa:f6:c4:97:79:7e:99:fc:21:a0:26:a4:da:d6:62:fb:2c:ab:
         ee:f0:98:bf:97:7e:dd:e2:1e:3c:e3:88:f5:6c:a3:52:fa:b9:
         3d:f1:0d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:52:48 2026 by rpki-client