Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f278ab13-d2b3-3697-b18e-f15ad9ad5d72.roa
File:                     f278ab13-d2b3-3697-b18e-f15ad9ad5d72.roa (raw, json)
Hash identifier:          94VK6fzdZOmcpK2YJc6RNr8dmpxUnrC2JvHuV3Im2AI=
Subject key identifier:   45:C4:C9:54:BB:ED:D8:32:4E:93:BF:28:BA:4A:3A:30:46:F0:6C:F0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584BBE4035915AFB0DF51F2EE3C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f278ab13-d2b3-3697-b18e-f15ad9ad5d72.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     834
IP address blocks:        206.206.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:35:91:5a:fb:0d:f5:1f:2e:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=cd94cd60-dd65-4daf-a9b7-880bf79505ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:7e:09:00:da:89:e3:4d:1e:c8:3f:d5:56:
                    2b:2b:ba:8c:a0:bc:d5:1e:97:24:9e:00:d1:94:b0:
                    58:dc:00:66:9f:0a:ab:9e:0c:12:23:18:2c:f3:66:
                    de:32:c8:76:ed:b5:62:3b:a7:81:a3:6e:19:c3:bd:
                    68:9f:24:cb:cd:d9:dd:1e:46:20:cd:ea:61:18:cc:
                    e0:4e:b4:60:bf:35:1a:d3:6e:63:f5:c3:ca:c1:6c:
                    39:93:51:a3:a1:7a:0f:74:6b:92:64:d4:25:b9:97:
                    b4:07:b9:c6:39:84:3f:cc:1a:96:d0:35:5b:86:9d:
                    72:a4:89:39:24:a1:53:31:46:56:9a:32:da:82:60:
                    83:64:67:79:1c:b7:e1:6c:32:b9:e0:c1:90:9d:3c:
                    6e:91:c8:87:a5:fd:f8:45:75:a1:fd:2f:f7:86:e3:
                    0b:e1:a0:71:db:10:7d:04:37:37:7d:bf:70:0e:15:
                    0f:78:97:50:d5:6c:2d:d2:15:05:6a:44:7c:75:42:
                    6e:ff:31:5f:7c:eb:5a:e6:e8:3c:96:e8:63:69:49:
                    49:84:a2:7a:3d:1c:2f:49:00:48:63:70:af:6a:38:
                    72:64:8f:88:d7:0d:8e:df:f9:5a:dd:99:71:08:74:
                    28:a6:69:89:2e:54:00:70:82:86:9c:c9:26:2b:ae:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C4:C9:54:BB:ED:D8:32:4E:93:BF:28:BA:4A:3A:30:46:F0:6C:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f278ab13-d2b3-3697-b18e-f15ad9ad5d72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:19:58:ce:f6:d6:8d:7a:e2:4a:5e:c0:a3:51:40:bb:f6:d1:
         93:62:cd:c7:0d:c7:d0:be:8d:a0:73:92:92:d9:d9:28:a5:80:
         f0:6e:c8:2b:c9:66:fc:23:8d:7b:e6:46:d4:83:03:1d:1e:c2:
         bf:4c:9c:ff:56:43:06:eb:02:ca:10:53:d2:34:7e:82:af:9d:
         46:70:1f:f4:e4:55:2f:82:3d:16:5f:74:68:96:ea:f6:e0:9c:
         ee:c8:ee:d4:f0:3e:54:de:9f:a7:7f:ea:19:68:51:f0:12:ba:
         99:a9:94:52:fd:6c:0a:56:ab:23:21:36:28:01:4d:e8:93:bd:
         f4:05:bb:5a:3e:03:17:29:d4:ed:a8:79:35:49:49:f9:18:e9:
         6c:d3:b9:71:ec:ff:8e:54:14:80:05:c2:ee:00:ba:af:95:35:
         bd:5e:68:9f:7a:15:5f:8c:b7:9f:b7:23:79:2d:47:85:68:6d:
         b1:d7:91:2e:97:ea:c6:56:50:c8:f5:43:52:5c:e0:bd:eb:57:
         39:6b:b9:a9:0c:c5:c1:eb:be:bb:20:1b:2f:eb:80:d0:7b:df:
         31:75:cc:7c:ac:f7:db:ad:02:15:4c:ca:df:14:90:8b:57:50:
         14:2b:9c:bf:f5:d4:31:ca:83:b6:db:f0:19:05:04:0f:69:5a:
         c1:31:a0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:42:50 2025 by rpki-client