Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/044b75b6-4557-3e0e-9380-a6af7ec4b005.roa
File:                     044b75b6-4557-3e0e-9380-a6af7ec4b005.roa (raw, json)
Hash identifier:          DyKyG6zciZMeTciR1YaC6qvRslLF/SBwkFjQXZYisho=
Subject key identifier:   F5:73:AF:2A:13:7D:FE:F8:50:FE:C4:A7:71:B0:96:12:65:67:13:8C
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584CBC4C6DB9165DB53298BA6000
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/044b75b6-4557-3e0e-9380-a6af7ec4b005.roa
Signing time:             Tue 03 Feb 2026 02:00:31 +0000
ROA not before:           Tue 03 Feb 2026 02:00:31 +0000
ROA not after:            Mon 04 May 2026 01:00:31 +0000
asID:                     834
IP address blocks:        198.1.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bc:4c:6d:b9:16:5d:b5:32:98:ba:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Feb  3 02:00:31 2026 GMT
            Not After : May  4 01:00:31 2026 GMT
        Subject: CN=0e75f24f-a026-4d07-a77e-1dc849eaae58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:19:ea:f2:c4:db:34:29:4b:30:f2:2e:7e:
                    b8:3e:79:1b:34:88:37:13:33:ec:c6:a7:87:5f:03:
                    8d:28:85:3f:8c:0b:c9:73:fd:b7:aa:e8:37:c1:d0:
                    7d:a9:29:43:f1:cd:31:3d:63:e3:08:bc:09:a7:05:
                    df:ca:5c:da:df:ba:35:6b:8e:72:51:67:06:82:05:
                    e8:84:24:3a:65:3d:bc:a1:89:52:43:4a:11:5f:dc:
                    c2:04:94:24:61:04:6e:c0:e3:06:3f:6f:1c:31:03:
                    87:ca:50:88:4c:66:04:28:03:47:c4:52:93:d3:f9:
                    ba:f1:72:61:f2:69:2d:23:61:88:e5:43:00:e1:89:
                    c8:08:9b:be:ea:64:d1:10:ca:35:35:8e:71:00:e9:
                    2f:1b:be:72:7c:12:83:73:97:32:15:84:d7:4f:0b:
                    3e:11:0d:cc:f3:e3:85:c7:a5:c0:61:4d:89:8c:36:
                    b5:79:34:9f:84:71:e5:1a:8a:d7:14:24:17:10:5e:
                    b7:70:a4:c9:62:af:46:f2:1b:a6:75:6c:38:35:fa:
                    2b:f9:a1:99:e6:d4:64:6f:b6:86:3a:e4:19:40:75:
                    f9:9f:fa:37:34:c2:9d:12:d4:55:1f:42:fa:25:03:
                    90:7f:7a:25:08:a0:c9:e5:af:c5:cf:6e:b6:5a:a7:
                    b9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:73:AF:2A:13:7D:FE:F8:50:FE:C4:A7:71:B0:96:12:65:67:13:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/044b75b6-4557-3e0e-9380-a6af7ec4b005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:6c:d6:0e:c3:6c:34:76:6a:f7:f2:27:f7:7b:6b:73:a1:f6:
         e0:2a:14:d9:ee:6a:97:28:0f:b9:e1:3b:a0:83:1a:83:72:ee:
         14:17:b2:7e:b3:55:76:02:72:f1:be:9b:63:e8:7f:11:ea:a2:
         ff:f5:db:de:8b:05:31:c1:36:2f:77:c0:59:a1:df:90:d9:0e:
         76:72:69:13:3e:96:f5:f7:72:1d:18:f3:55:09:67:09:f9:5c:
         b3:d3:29:ce:ff:d8:d9:4f:7e:e6:52:d2:61:ac:d7:35:3e:b4:
         ce:90:d7:df:6f:6f:d7:35:7e:d3:ba:6c:13:96:e6:9b:6d:36:
         46:c6:57:c4:69:00:70:62:c7:31:e1:33:a8:35:b2:ac:27:20:
         81:6d:e6:47:4d:b6:ec:1f:58:05:7f:6d:23:8b:ea:61:55:7d:
         3c:c8:17:f9:9f:68:b8:ab:97:26:0b:bc:fc:fe:78:26:ac:86:
         5b:4e:12:d4:2f:90:3a:a1:b9:0b:f7:fc:83:76:6e:34:62:9a:
         66:7c:5c:85:22:10:08:f8:05:da:7e:ad:d2:40:1d:c6:56:13:
         7c:78:a9:2c:96:53:71:72:52:81:a4:1e:be:3b:4a:6c:a2:13:
         41:52:98:69:20:74:36:e3:8d:75:37:93:31:a6:0f:e4:1a:dd:
         55:71:ff:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:23:35 2026 by rpki-client