Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/e5770168-89c8-3ada-abb9-37ff44f57d94.roa
File:                     e5770168-89c8-3ada-abb9-37ff44f57d94.roa (raw, json)
Hash identifier:          T0cxIysyLKkEJGkWckX+W6/F5s7EeIpG6obz+5c2FqE=
Subject key identifier:   DF:89:32:28:ED:67:37:69:0E:B0:E1:45:22:9D:01:77:DE:3C:F0:B3
Certificate issuer:       /CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Certificate serial:       010D0C9F4328584BB88D13E82B9B30AB242F8E00
Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/e5770168-89c8-3ada-abb9-37ff44f57d94.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        206.195.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:13:e8:2b:9b:30:ab:24:2f:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=c533ea87-9b41-4c15-9781-da29f1c12f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:e5:99:2a:20:f1:bd:1a:9d:6a:e3:9c:34:
                    de:72:98:7c:9c:7f:52:6d:1a:e2:59:d9:72:38:b9:
                    b3:54:31:87:00:e9:46:ca:47:4c:d4:81:cf:ed:75:
                    28:69:1b:29:49:d0:31:1d:e8:c8:4b:0a:0a:8b:4f:
                    fb:b5:7a:22:8a:7c:23:ff:ae:1a:7d:29:b8:c1:b0:
                    70:fd:42:14:54:8a:36:74:62:71:ec:16:07:8b:0c:
                    fd:b7:20:4c:08:f2:5b:2c:0a:d7:5b:e3:6a:9d:8b:
                    75:31:02:4f:37:09:bf:1c:a2:a7:61:5e:a8:e7:d2:
                    35:19:5e:e9:e3:9b:df:41:17:75:e1:d9:ab:1e:b5:
                    65:b4:24:4b:83:90:82:08:76:2f:67:06:88:f2:c3:
                    e3:96:43:0d:d0:fd:81:7c:3e:e8:9a:e4:46:bd:9e:
                    35:bf:68:f6:f3:34:ea:24:d0:2c:a4:a0:3c:93:13:
                    02:b8:9d:01:97:18:a1:ca:2b:b7:92:c3:0b:c8:79:
                    24:73:cc:5b:ee:5b:16:ec:84:ac:2e:ac:1b:e5:86:
                    de:09:e9:d2:2c:af:a5:3d:a7:11:71:bc:9a:af:e6:
                    2a:e4:ed:5c:ec:62:85:a1:6c:35:38:69:33:25:56:
                    df:94:1b:c0:0e:71:b4:62:79:46:3c:f5:3c:42:14:
                    ea:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:89:32:28:ED:67:37:69:0E:B0:E1:45:22:9D:01:77:DE:3C:F0:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/e5770168-89c8-3ada-abb9-37ff44f57d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl

            X509v3 Authority Key Identifier:
                keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.195.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:fc:f6:ad:59:91:b5:a1:fe:46:f8:67:23:50:ca:c6:de:72:
         03:bd:86:20:c2:fe:d8:cd:09:7c:c7:43:01:73:d4:6e:af:a1:
         ae:a3:ca:f7:e3:8b:08:1b:af:28:f7:5c:bb:a2:a2:e1:90:13:
         e1:04:af:89:cf:45:1f:43:b7:7f:2e:6d:ca:ac:e9:fc:eb:ea:
         5a:5d:ad:ac:20:56:0e:18:1e:b4:f5:0c:df:67:82:69:72:18:
         1b:76:e0:87:93:0b:be:d5:93:55:3b:83:75:80:4d:34:35:ee:
         c4:25:58:ea:b4:18:27:51:51:fd:bc:7a:9c:f6:cd:84:48:05:
         3c:47:d8:02:2a:0b:92:e2:04:86:12:df:79:7c:ab:6b:aa:1d:
         9f:05:0c:7b:f0:b4:c3:52:8a:a8:d3:6c:b6:1e:f7:28:0c:f9:
         9b:00:a0:87:f2:04:47:d3:05:df:4e:67:e6:a1:8b:2b:af:c3:
         80:41:5c:9c:0f:d8:5c:01:55:44:d4:5b:6c:0f:d8:46:21:fe:
         6e:2b:8e:a5:94:3f:66:e5:76:23:bd:53:bf:fd:be:cc:b3:cc:
         91:31:8e:db:23:05:74:c8:06:ff:5e:e8:f7:cb:35:0b:c1:0e:
         2c:e4:4d:6a:9b:ac:4c:ae:42:38:60:08:ee:74:38:e6:9b:eb:
         70:79:89:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:37 2025 by rpki-client