Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/364b00a2-92b9-3dfa-854d-026de388c293.roa
File:                     364b00a2-92b9-3dfa-854d-026de388c293.roa (raw, json)
Hash identifier:          mRMli3y4oHzP8kIiR5w5F5S3o5pb4+p56DRB7kaTMis=
Subject key identifier:   68:C3:D1:AC:30:9F:7C:34:E8:ED:3A:C9:2B:3B:01:26:22:BC:5C:AE
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584FAF58ADC4B136B9B61C4E1100
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/364b00a2-92b9-3dfa-854d-026de388c293.roa
Signing time:             Sat 31 Oct 2026 13:00:13 +0000
ROA not before:           Sat 31 Oct 2026 13:00:13 +0000
ROA not after:            Fri 29 Jan 2027 14:00:13 +0000
asID:                     55201
IP address blocks:        198.1.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:af:58:ad:c4:b1:36:b9:b6:1c:4e:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Oct 31 13:00:13 2026 GMT
            Not After : Jan 29 14:00:13 2027 GMT
        Subject: CN=3fb1d21f-a297-407e-8b0b-45d90cb870e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a3:4a:6f:d7:f3:2c:d6:6b:f6:1d:c5:57:f8:
                    57:25:67:a2:d5:05:7f:2e:42:cb:ec:1d:2d:c2:e2:
                    3c:06:cb:8c:39:58:9a:6f:5f:d5:19:91:01:63:ee:
                    c5:22:23:ea:26:ab:b0:5f:00:bf:4b:e4:a5:f9:42:
                    00:37:67:7a:8f:31:5d:3c:e5:42:ec:a6:7c:2e:c0:
                    d6:c9:f3:98:23:78:94:79:35:67:b5:96:f6:62:3a:
                    f5:f5:ec:7b:99:27:0e:bf:a7:9d:6f:1d:f7:6a:27:
                    3e:e2:46:b5:b7:83:22:e3:8f:d6:16:f8:4d:d7:f5:
                    27:01:ba:9f:1d:45:42:36:98:e2:f3:3e:d2:12:d0:
                    db:1e:12:6a:76:bd:8e:89:60:78:34:b4:bf:29:01:
                    58:1e:b2:9f:6e:f6:60:44:94:03:14:8c:19:a7:fb:
                    aa:dd:45:33:27:c2:f2:b3:2c:c8:1d:24:3a:8c:73:
                    4c:7c:fc:ba:85:d7:36:35:f7:1f:84:91:ff:bf:12:
                    24:d8:fc:7f:a3:a2:61:b9:60:9e:16:c8:0b:ce:02:
                    ed:b1:a8:b9:e1:2a:26:c2:ed:72:74:d7:06:15:0b:
                    60:46:17:94:03:91:c5:2f:c5:7d:09:b6:fc:85:15:
                    74:c3:ef:38:84:af:49:60:93:25:3c:04:ba:5f:e3:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C3:D1:AC:30:9F:7C:34:E8:ED:3A:C9:2B:3B:01:26:22:BC:5C:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/364b00a2-92b9-3dfa-854d-026de388c293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:2b:b7:e9:11:c4:9a:7d:77:9f:27:e3:26:21:e7:9f:cc:07:
         44:6c:16:be:e1:28:3c:2c:02:3b:65:31:d0:77:8a:99:5a:cb:
         1c:02:21:c5:ee:00:87:d4:74:d1:fb:68:a5:1c:23:e7:ec:13:
         a1:cd:c0:db:42:ee:da:6c:1a:2a:d0:50:a2:74:c6:b8:b4:3f:
         90:55:33:06:6d:54:c5:79:8c:1b:3a:02:27:2c:d6:51:a8:c2:
         f3:3a:87:82:c6:1e:27:b6:a8:e5:0a:c1:34:b5:d7:88:29:d2:
         a5:87:c1:e0:b4:9b:c7:0e:95:e7:1b:21:88:53:0f:4d:46:0f:
         c6:3f:25:83:93:69:f1:17:85:bb:7e:97:8f:e2:af:07:b1:1f:
         6e:52:e3:00:1c:bb:ba:da:96:d5:36:f7:cb:46:cf:61:9a:fc:
         81:dd:22:03:b7:d5:7c:12:b5:a2:ec:96:df:7d:52:d5:12:6f:
         04:3d:80:a9:a0:18:fe:38:54:55:10:25:54:9a:73:42:76:76:
         7f:57:d9:c5:91:71:41:21:12:3c:89:c6:bb:d6:b8:0b:d3:27:
         22:83:c4:cf:6b:90:51:b0:c2:b4:d6:51:d9:a3:b4:5d:3f:db:
         e1:c6:ec:57:67:ca:50:9b:00:03:fb:20:e7:a9:ed:e5:d0:34:
         6f:bb:ab:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+vWK3EsTa5thxOEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI2MTAzMTEzMDAxM1oXDTI3MDEyOTE0MDAxM1owLzEtMCsGA1UEAxMk
M2ZiMWQyMWYtYTI5Ny00MDdlLThiMGItNDVkOTBjYjg3MGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqNKb9fzLNZr9h3FV/hXJWei1QV/LkLL7B0t
wuI8BsuMOViab1/VGZEBY+7FIiPqJquwXwC/S+Sl+UIAN2d6jzFdPOVC7KZ8LsDW
yfOYI3iUeTVntZb2Yjr19ex7mScOv6edbx33aic+4ka1t4Mi44/WFvhN1/UnAbqf
HUVCNpji8z7SEtDbHhJqdr2OiWB4NLS/KQFYHrKfbvZgRJQDFIwZp/uq3UUzJ8Ly
syzIHSQ6jHNMfPy6hdc2NfcfhJH/vxIk2Px/o6JhuWCeFsgLzgLtsai54Somwu1y
dNcGFQtgRheUA5HFL8V9Cbb8hRV0w+84hK9JYJMlPAS6X+PdLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjD0awwn3w06O06ySs7ASYivFyuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMzY0YjAwYTItOTJiOS0z
ZGZhLTg1NGQtMDI2ZGUzODhjMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHIrt+kRxJp9d58n4yYh55/MB0RsFr7hKDwsAjtlMdB3iplayxwCIcXu
AIfUdNH7aKUcI+fsE6HNwNtC7tpsGirQUKJ0xri0P5BVMwZtVMV5jBs6Aics1lGo
wvM6h4LGHie2qOUKwTS114gp0qWHweC0m8cOlecbIYhTD01GD8Y/JYOTafEXhbt+
l4/irwexH25S4wAcu7raltU298tGz2Ga/IHdIgO31XwStaLslt99UtUSbwQ9gKmg
GP44VFUQJVSac0J2dn9X2cWRcUEhEjyJxrvWuAvTJyKDxM9rkFGwwrTWUdmjtF0/
2+HG7FdnylCbAAP7IOep7eXQNG+7q0o=
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:51:42 2026 by rpki-client