Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/29331063-b6de-3190-821c-97efc0da0d1d.roa
File:                     29331063-b6de-3190-821c-97efc0da0d1d.roa (raw, json)
Hash identifier:          YN4e9poe/zsDzoq/fbRM8tXJf6aoGaKcoKso8Ifj/5A=
Subject key identifier:   3A:4A:3D:3E:1E:0C:85:7F:41:12:74:54:0B:93:CA:80:3D:1C:88:63
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584F3CE280E44B246B15229DC800
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/29331063-b6de-3190-821c-97efc0da0d1d.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22516
IP address blocks:        198.1.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:80:e4:4b:24:6b:15:22:9d:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=92ec9e57-ae2b-4be6-ba6d-03d57e688e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:81:22:e0:69:1d:83:7e:0e:43:18:ab:ac:
                    d5:ef:d0:53:32:27:eb:69:de:a4:d2:a9:6b:ab:7d:
                    1c:e1:af:ce:05:bc:8c:01:d1:b5:6e:e2:76:b5:7c:
                    db:d4:9a:09:d6:6f:43:f7:1d:0e:fc:c7:a7:8c:a9:
                    49:bb:63:bf:8b:f0:d5:6f:3a:8c:36:d9:6d:fb:c7:
                    f5:9a:36:2a:64:56:aa:fe:92:38:dd:91:cc:a3:b3:
                    af:45:5f:2f:2b:e0:52:c2:2a:0e:f3:cc:00:36:00:
                    a9:25:b5:38:c2:11:a5:1d:18:c9:dc:6f:33:4a:c7:
                    c3:b4:c7:da:0e:05:b4:77:03:f7:a8:a7:d5:e6:c6:
                    7c:f5:55:ce:a7:27:f3:40:ad:14:fa:66:ca:09:0f:
                    27:7f:95:05:fa:d0:2c:59:21:e7:41:60:54:46:d7:
                    3b:aa:34:47:1a:4d:28:2b:d0:82:f3:f1:08:5b:9b:
                    1b:2b:54:d4:c3:bf:f7:f8:5d:16:15:57:48:52:1b:
                    5c:c4:39:19:8d:fb:2a:60:77:ed:e3:e4:7d:3b:2b:
                    ff:cb:49:61:28:70:0e:ff:c1:7d:a7:3d:f2:a4:46:
                    bd:93:02:c6:db:ec:b7:8f:99:7a:b1:ff:67:8a:6d:
                    42:8c:95:97:5a:84:16:ba:83:82:7c:d2:9e:e9:e9:
                    e5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4A:3D:3E:1E:0C:85:7F:41:12:74:54:0B:93:CA:80:3D:1C:88:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/29331063-b6de-3190-821c-97efc0da0d1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:dd:e6:56:54:11:e1:5e:39:3a:93:d5:83:d5:20:38:dd:f2:
         6d:d5:d1:79:a3:d6:6c:a6:3d:82:ac:16:0d:90:e0:66:13:2a:
         77:d0:e9:24:2c:86:2e:f8:27:26:88:46:4b:81:88:4c:ab:c6:
         e7:57:44:5a:80:9a:1b:5d:d1:3d:be:23:5e:5a:d2:25:68:45:
         66:4f:96:6c:30:6b:6c:6f:14:4d:51:50:4e:44:ce:2b:95:28:
         62:df:9c:01:ab:05:1f:e8:2e:6e:f2:cc:5a:df:e0:03:22:20:
         2b:62:60:c3:1e:27:4f:52:42:e7:34:e4:84:b7:87:7a:cc:d9:
         37:46:bc:6b:6f:c1:f9:ab:bd:90:d8:d7:66:95:ae:6d:0e:e0:
         bf:15:56:69:35:54:17:7f:99:dc:69:0d:6f:57:4b:e2:fb:4a:
         18:40:df:ac:75:9e:03:e5:f1:88:30:aa:ca:18:95:f8:dc:7d:
         d7:5b:48:eb:9d:79:94:70:f1:30:e9:22:95:6f:84:11:7a:aa:
         a0:4e:78:02:8e:16:66:7a:b4:f5:50:8d:e4:c2:af:bd:7d:40:
         d1:2e:20:8d:41:23:f5:9d:90:0c:89:14:e6:67:b2:cd:de:7b:
         f7:4f:f1:5d:71:4a:76:59:40:a1:12:e2:8a:5f:f9:6c:08:ca:
         a9:e7:bb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:54:59 2026 by rpki-client