Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/099e82cd-7331-3e03-a175-1c720f5b45bd.roa
File:                     099e82cd-7331-3e03-a175-1c720f5b45bd.roa (raw, json)
Hash identifier:          PXHM7w2OMBNnOzovL8Clai5jL+oUeacWkMuwC07P/tE=
Subject key identifier:   23:1C:30:73:7D:D8:2C:F2:2D:90:C2:D8:E6:B1:AF:B5:52:CE:93:A7
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584B95AAFFB61FF92445A57C5A80
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/099e82cd-7331-3e03-a175-1c720f5b45bd.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     62610
IP address blocks:        198.1.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:ff:b6:1f:f9:24:45:a5:7c:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=ff0f374d-10e5-46ce-ad31-d28813153491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:fd:40:5d:d1:1e:de:72:65:8a:a5:9a:9e:
                    45:56:b4:fb:5a:b7:66:ee:25:6d:69:94:79:78:f6:
                    b5:c2:7e:50:69:e1:a3:1b:09:f2:a7:7b:e9:f7:81:
                    41:ed:49:ff:70:d5:a9:12:56:04:da:af:ad:b6:2b:
                    0a:45:72:6c:36:67:34:2d:58:c2:7f:8e:6e:07:56:
                    fb:da:f2:cb:a4:0a:e4:1a:40:58:c5:cb:14:51:d3:
                    6d:f3:15:07:e9:3a:5c:d5:c7:a5:ed:7b:54:75:83:
                    ac:4b:5f:1e:29:13:42:80:5c:d8:e4:51:8b:b7:14:
                    1b:c2:ce:cf:88:d9:a2:9c:ae:0a:20:e6:c6:7d:4c:
                    ec:4c:43:8c:54:da:84:1a:0b:37:48:76:51:41:7b:
                    15:89:24:55:a0:b7:d0:26:1d:0f:12:b1:3e:bb:c0:
                    10:91:8e:ee:11:1c:67:75:fc:57:0f:2f:2f:2c:be:
                    0b:93:88:6d:fe:e0:9d:48:2e:f7:7c:e4:0e:fc:f6:
                    2d:0a:c3:ff:ca:50:9d:ed:fc:17:f4:9c:56:fc:a5:
                    ca:f3:28:db:8b:8c:27:bf:83:58:fc:f6:94:fa:5b:
                    ea:c7:b6:ff:f0:a8:4a:e8:58:12:ae:6d:82:d7:7d:
                    ef:c7:d2:8b:9a:cb:a5:f1:34:5e:88:b9:e8:6c:3b:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1C:30:73:7D:D8:2C:F2:2D:90:C2:D8:E6:B1:AF:B5:52:CE:93:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/099e82cd-7331-3e03-a175-1c720f5b45bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:8d:0b:06:14:76:c7:1b:12:a5:0e:a2:d4:9c:07:23:45:51:
         fc:d1:d5:57:72:10:33:89:95:f9:cb:0b:90:4d:e5:12:bd:40:
         e1:9b:46:90:86:9e:eb:45:e7:41:34:7f:88:1f:0f:2a:c7:00:
         f0:38:9b:6e:4e:06:0f:4e:fa:24:7a:63:08:60:9b:0a:09:a5:
         16:aa:80:33:bf:11:a4:09:62:cc:8b:58:3e:dd:8e:da:e2:b9:
         04:9c:e2:3b:7b:0a:ea:ab:d4:f6:26:63:c7:6a:d1:01:7e:9f:
         7e:2c:4e:c9:92:ce:ac:2f:6b:c6:13:1c:db:f6:cc:59:e7:fa:
         94:86:3d:9e:8a:3a:4d:07:2b:65:59:ca:4d:55:34:81:f2:e9:
         54:45:ae:2c:4d:89:09:52:3a:cd:6b:35:93:76:86:38:60:6c:
         bd:5b:13:5b:34:79:52:0a:97:99:64:14:79:7a:f5:1f:9a:2e:
         cc:48:af:9b:82:07:7b:47:4a:72:bb:56:6d:3a:80:b8:d0:96:
         7f:ae:4b:6a:de:68:40:f4:45:05:96:f5:68:3e:f0:2f:a3:60:
         99:6e:81:52:41:60:62:ed:39:39:ae:7c:6a:2c:b5:09:90:70:
         57:51:cc:77:8b:61:25:b8:73:ec:4b:66:4e:24:fc:95:6b:28:
         e4:06:7c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:02:23 2025 by rpki-client