Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8c2fb4e4-b30a-3653-9a68-aae31f9bfbd3.roa
File:                     8c2fb4e4-b30a-3653-9a68-aae31f9bfbd3.roa (raw, json)
Hash identifier:          5Ld3dA/RveWf5z+eNlseXXOmZ/R0doCgFCnhunHOptc=
Subject key identifier:   C7:43:FC:07:34:42:54:8F:EA:7F:C7:D3:52:B8:B3:78:E6:45:D5:E2
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584A7A4B608DE9C705E53BB83880
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8c2fb4e4-b30a-3653-9a68-aae31f9bfbd3.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     21949
IP address blocks:        198.1.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:60:8d:e9:c7:05:e5:3b:b8:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=bca151fd-2d56-4f8c-afb9-0266ccb31f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:ed:3d:53:37:1e:a8:71:a8:a8:9a:71:8a:
                    ab:fc:b2:80:56:96:4c:5c:34:19:77:0e:81:0a:fe:
                    b7:bd:53:07:a8:78:aa:38:ba:fe:c0:66:c2:18:98:
                    bb:24:0f:22:92:6d:37:12:d7:0f:60:fb:11:0c:66:
                    4a:b9:63:77:45:5f:54:91:ea:cb:56:4a:19:15:a3:
                    46:ed:19:d2:19:c0:f2:46:df:04:ab:46:bb:31:34:
                    aa:51:b7:69:c4:02:aa:c0:24:aa:a0:b7:9a:c8:1c:
                    3c:19:f5:f7:fb:6a:ac:42:53:0a:fb:24:da:13:f4:
                    75:5e:ef:70:6e:ab:ea:dd:ba:60:b6:7a:52:06:65:
                    c1:32:6b:8b:e9:78:1b:26:30:74:5a:91:13:0a:99:
                    ea:d9:e2:49:5e:da:16:fd:09:25:c8:38:6a:70:55:
                    e5:06:a3:58:48:bb:e7:e1:89:5e:79:ab:11:0f:9f:
                    f6:f3:ad:19:ba:2f:ab:ec:fe:8c:de:e4:8c:4f:55:
                    80:ca:8e:2e:50:72:67:8c:bc:f3:96:e8:0a:f2:fa:
                    12:f9:66:cd:ba:af:22:6c:66:49:ce:b6:80:cc:28:
                    25:f8:7b:4f:0b:81:0c:4d:5e:aa:37:4d:8c:77:fe:
                    1e:79:ec:87:37:66:72:af:b4:f3:f5:ca:cc:29:b5:
                    6c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:43:FC:07:34:42:54:8F:EA:7F:C7:D3:52:B8:B3:78:E6:45:D5:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8c2fb4e4-b30a-3653-9a68-aae31f9bfbd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ca:66:74:e7:b3:aa:c9:26:85:a8:7b:bf:a5:1d:f4:b6:5b:
         50:c1:e0:7b:93:da:9f:3e:5f:01:af:19:c2:6d:f4:fc:3c:a7:
         b4:b3:4e:d5:33:32:55:08:66:e2:01:1b:3b:42:e2:1b:01:e9:
         46:6f:58:5f:7f:3e:54:e3:3c:90:1c:20:09:c1:a7:be:b2:03:
         dd:c6:a9:df:5f:69:d7:50:be:c9:72:60:96:70:91:2f:1b:97:
         03:fa:38:99:1a:01:d2:18:90:0d:e9:22:64:df:0a:58:3e:bb:
         81:10:90:b8:20:1d:77:1b:24:6e:df:2b:a7:74:3f:b5:52:07:
         3b:e7:ac:45:f9:01:9c:84:14:5f:3f:e2:8a:cf:0d:75:66:b3:
         4d:61:0d:08:00:6e:4c:4c:be:52:cd:f4:75:89:80:d4:99:30:
         08:e8:bc:2d:ad:bb:a5:6a:cd:44:0c:a1:1c:a3:4b:a3:27:56:
         b6:af:b7:93:35:7e:9c:56:b9:3d:e1:30:7d:5e:94:f4:34:b7:
         e6:94:49:d8:65:6a:1a:9f:77:cd:5b:6c:e7:a4:d2:5d:60:31:
         fc:5e:31:71:dd:cf:0e:37:6c:64:9e:ef:d5:c4:e3:c7:68:4d:
         38:03:02:40:01:59:a1:3d:1b:81:10:7b:b3:5e:52:d8:5f:14:
         71:f8:91:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:28:21 2025 by rpki-client