Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7e0650d0-458f-374e-afd2-1976a9954e2d.roa
File:                     7e0650d0-458f-374e-afd2-1976a9954e2d.roa (raw, json)
Hash identifier:          Fg9vNGd7E3cdpWYKAlLjl2OosbbU4w6A2FajuE3j2tA=
Subject key identifier:   D2:B4:37:7A:2D:39:D0:47:F3:72:BD:6A:27:E6:37:BD:CB:3F:D5:71
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584E9A7FB3AEF875A03A4289F600
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7e0650d0-458f-374e-afd2-1976a9954e2d.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        198.1.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:b3:ae:f8:75:a0:3a:42:89:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=0c38370d-c78b-43f5-b332-18aabcb7ede7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6b:a1:1f:e7:d2:62:d8:ea:d1:df:1a:da:3c:
                    d8:84:5f:a5:9c:7b:7c:db:86:c5:7a:c8:5f:87:9d:
                    cf:3d:3e:1e:fc:b2:c5:22:78:47:60:5c:ea:15:11:
                    a7:97:de:cd:55:05:01:3f:d3:7a:ed:05:0f:04:b3:
                    9b:c5:af:a0:33:7c:26:d1:76:4a:89:81:94:fd:7a:
                    ab:53:f8:1d:ed:82:d1:18:46:2c:10:a7:7a:92:64:
                    50:28:ef:75:82:09:f8:44:9d:f2:f0:c2:73:81:89:
                    73:04:ff:11:26:ed:bc:9e:8f:cd:c5:12:cc:76:42:
                    32:f7:94:84:88:69:6a:0d:56:d0:25:f2:67:ad:1d:
                    0f:b1:b7:bb:b6:b7:03:6d:45:76:87:d9:93:8b:84:
                    34:fb:ff:19:cd:8f:db:b2:79:38:75:21:72:5d:6e:
                    44:4d:68:99:c9:d8:e0:90:3d:28:17:f9:21:26:7d:
                    e4:e1:48:48:e5:ea:43:0d:7f:96:59:5f:ad:58:a6:
                    22:6b:5c:66:0c:06:11:fc:0c:99:ec:20:98:d0:f7:
                    46:f4:8a:69:7f:ef:30:01:cb:f4:2b:a6:ce:d5:73:
                    48:dc:46:90:e7:59:eb:f2:a3:71:3c:c0:a8:3e:3c:
                    74:ea:ec:9b:e5:ad:df:3f:9f:94:71:ab:b3:e8:23:
                    77:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B4:37:7A:2D:39:D0:47:F3:72:BD:6A:27:E6:37:BD:CB:3F:D5:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7e0650d0-458f-374e-afd2-1976a9954e2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:61:91:08:a9:ba:32:f7:f4:0a:7a:e7:80:06:05:c1:18:6a:
         81:64:a0:70:30:4c:73:f4:41:02:a0:26:a8:83:3d:cb:30:14:
         10:7a:ec:61:6c:dd:e6:a5:15:fe:a1:71:75:78:c2:25:56:61:
         59:e6:0a:b7:70:2e:ab:20:9a:c4:27:c2:af:ac:7f:4d:f0:7f:
         19:7a:2d:c0:33:74:9d:df:5f:8f:2d:bb:ba:af:14:00:73:d3:
         9d:f0:25:c3:a1:58:26:f2:9a:42:38:d0:81:2d:63:45:3b:3e:
         ef:37:d8:14:6c:c4:5b:fb:53:bf:f8:ee:e3:65:91:8b:7e:75:
         64:3b:4e:82:ec:4c:db:ee:b9:ef:ce:cf:d3:51:71:c9:b8:fa:
         21:06:21:9c:83:84:dc:96:3b:68:7b:ee:8a:3b:47:a5:ea:54:
         ef:3c:37:ff:b1:fd:f0:7a:f5:23:0f:eb:01:29:08:4a:b8:dc:
         1b:e8:92:a1:19:19:42:22:7e:79:ab:a8:a2:9e:5a:46:17:91:
         37:30:c4:ac:40:bc:4d:3a:51:c3:26:c0:e4:4f:4d:0f:67:da:
         58:28:1d:67:e4:71:af:af:38:c5:b9:20:19:06:f5:62:32:14:
         8c:ea:9f:60:e4:66:ab:1d:bc:6e:35:2f:1d:17:1a:33:53:7d:
         a5:3e:6b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:01 2026 by rpki-client