Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/044b75b6-4557-3e0e-9380-a6af7ec4b005.roa
File:                     044b75b6-4557-3e0e-9380-a6af7ec4b005.roa (raw, json)
Hash identifier:          4HEIPqYylEqEfHrqo0fdXtYfY/v1tDh+hW2vh8m4AmA=
Subject key identifier:   B6:F4:53:E0:80:6B:86:1B:D0:C9:8D:60:ED:3C:D5:89:83:6A:B2:AB
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584F1F924A6BD5E0A689C5E8F680
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/044b75b6-4557-3e0e-9380-a6af7ec4b005.roa
Signing time:             Thu 10 Sep 2026 01:00:12 +0000
ROA not before:           Thu 10 Sep 2026 01:00:12 +0000
ROA not after:            Wed 09 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        198.1.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:92:4a:6b:d5:e0:a6:89:c5:e8:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep 10 01:00:12 2026 GMT
            Not After : Dec  9 02:00:12 2026 GMT
        Subject: CN=22a5ecd2-030f-4f6f-baf0-581df4a3806f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:dc:bd:d9:e1:d0:2e:b1:d2:e0:14:2c:45:
                    a7:1f:fd:14:75:22:1c:c6:de:e7:ae:a8:dc:36:54:
                    32:68:ec:e8:5b:c7:b6:d8:67:45:39:66:f3:06:c4:
                    87:7d:dc:39:75:bf:f9:18:65:39:fe:43:82:32:72:
                    92:5e:c9:d5:fe:40:f0:b6:b8:d5:af:e6:92:3a:35:
                    63:f6:c1:d8:ee:91:b3:b1:ec:9f:d6:a4:62:97:1a:
                    44:bd:f2:87:95:4e:12:80:9e:1a:8d:ed:d6:84:f6:
                    0d:33:85:8d:46:a4:f6:d2:50:81:ee:c4:5a:6d:68:
                    af:f4:dd:a7:4e:1f:e1:e0:11:29:70:c9:25:50:8b:
                    17:dd:67:be:f6:c4:ea:86:20:4d:b1:9e:98:b2:1f:
                    a6:cf:72:bf:6b:50:14:18:d7:05:44:26:3c:61:e5:
                    0d:78:a7:fd:7d:25:08:e3:a0:7c:47:19:d3:a0:85:
                    d9:af:e9:ca:39:9d:da:45:95:eb:5b:0c:b8:a5:06:
                    da:97:8a:e4:7b:0a:8e:29:c4:e1:36:89:b6:90:49:
                    c9:10:d0:a5:9e:58:70:95:83:6b:44:e6:80:49:d3:
                    b1:7f:ea:14:f5:e0:c2:19:4c:8d:9b:4d:f3:cb:cb:
                    ac:17:51:fe:8d:41:28:cc:fa:a5:2f:ab:bd:ae:e1:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F4:53:E0:80:6B:86:1B:D0:C9:8D:60:ED:3C:D5:89:83:6A:B2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/044b75b6-4557-3e0e-9380-a6af7ec4b005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:45:f8:66:4e:7b:5e:ad:3b:bd:ea:db:ae:c3:57:ce:29:d9:
         bd:12:a0:37:f6:8f:d3:ce:9b:a4:82:37:82:af:9c:77:ac:7c:
         c4:96:5d:9a:fd:12:39:3c:1c:3f:4e:05:82:22:a1:b2:02:91:
         e9:8d:8b:92:21:32:eb:39:55:95:a2:86:69:c0:fe:9a:89:ff:
         29:cb:ed:d6:4f:a2:6f:b4:7d:42:9b:aa:6b:0b:fa:ba:a3:01:
         24:91:e9:88:23:77:e6:0f:4f:43:ed:a6:34:af:96:b3:f9:d6:
         a8:7a:f5:5d:30:bb:3c:58:fb:c3:5c:9a:65:ac:46:d0:0a:9d:
         89:f3:ce:48:fa:55:96:9f:1d:51:04:e5:af:3f:71:55:5f:39:
         e1:e6:f1:97:94:34:50:73:7d:38:2f:f8:4f:f2:2b:fa:af:39:
         f2:2d:2d:dc:06:92:9b:6b:f1:4f:84:47:00:53:6f:a3:8f:36:
         a4:36:42:0b:6b:73:8e:c0:24:81:6a:78:e8:1a:f0:0e:83:f8:
         6a:3b:3a:85:7b:79:dd:ef:52:34:a5:e6:4a:76:43:8c:5a:21:
         17:96:40:d5:71:77:85:48:d6:e6:e5:f8:0b:ea:ba:79:8b:da:
         ac:31:15:af:75:fe:88:0b:6c:78:3d:48:e0:cc:b7:b3:3d:1d:
         0a:42:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:08:21 2026 by rpki-client