Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/93f8fba0-820d-3a60-91c6-75327fa5f909.roa
File:                     93f8fba0-820d-3a60-91c6-75327fa5f909.roa (raw, json)
Hash identifier:          Wsu/5U3SLExqL8/Cl1LsE0TCE/IWuuOCpTSJDwRDJoE=
Subject key identifier:   F8:3D:95:33:CD:4F:BD:AB:3A:44:35:A4:D4:22:BD:3C:C6:8D:31:C1
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584AB387F4BD16ED1385142AA730
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/93f8fba0-820d-3a60-91c6-75327fa5f909.roa
Signing time:             Thu 31 Jul 2025 13:04:23 +0000
ROA not before:           Thu 31 Jul 2025 13:04:23 +0000
ROA not after:            Wed 29 Oct 2025 13:04:23 +0000
asID:                     834
IP address blocks:        198.1.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:87:f4:bd:16:ed:13:85:14:2a:a7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jul 31 13:04:23 2025 GMT
            Not After : Oct 29 13:04:23 2025 GMT
        Subject: CN=441dda9b-320b-4cad-99cd-e5bc07b494e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cb:5b:b2:d6:1c:53:7a:da:8e:25:26:46:8f:
                    39:f2:f7:09:c0:cd:1f:1d:b1:49:59:32:f0:c9:d5:
                    d9:30:6c:fb:25:59:db:79:1d:86:12:54:64:9f:6b:
                    db:03:0a:21:1c:16:24:9d:f1:2b:e0:2e:11:9e:02:
                    b5:90:e1:42:a5:b5:6d:95:46:25:b2:0e:14:36:8f:
                    6e:39:72:b0:75:54:d9:6a:cc:cf:65:0f:e6:8b:27:
                    11:77:f8:df:b8:65:3f:9c:83:1f:dc:bf:28:97:8f:
                    7e:95:95:f7:59:7a:d9:74:56:24:d4:f7:f4:73:13:
                    7e:b6:0b:c7:fc:55:44:09:6c:94:1a:56:d5:34:9e:
                    49:cb:15:27:ee:7e:d1:01:a6:24:4a:ec:7b:08:fd:
                    6d:dc:60:72:91:f7:dd:74:6c:3b:ec:45:55:29:d9:
                    2f:a2:66:e6:a2:a4:51:6c:8c:93:5c:e7:32:bb:6a:
                    9a:79:10:cf:bb:e1:b9:79:4b:f5:84:39:6e:01:a1:
                    97:57:93:8a:b7:a7:ab:a0:a6:15:86:57:0f:82:31:
                    b7:35:8f:e8:f5:34:4d:fb:f4:52:f5:84:b7:ae:18:
                    2e:7c:c6:55:0b:7f:ba:85:0e:6d:3a:2a:84:cd:bf:
                    68:a5:bc:1e:d9:ce:9d:50:69:c0:d8:04:07:4d:74:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3D:95:33:CD:4F:BD:AB:3A:44:35:A4:D4:22:BD:3C:C6:8D:31:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/93f8fba0-820d-3a60-91c6-75327fa5f909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fc:e8:5b:91:92:dc:20:d9:52:a1:e8:c1:8e:09:12:6c:02:
         85:a8:bb:39:3d:05:af:69:0a:af:e9:c8:1a:30:7c:2c:a7:19:
         c9:b5:d5:9a:38:1b:91:f1:89:79:4d:b3:ad:96:12:da:e8:e4:
         77:9e:88:8c:a5:eb:9e:97:52:41:9c:c1:b2:ce:77:c7:19:45:
         e2:11:19:e3:d2:1b:c4:21:a7:79:3a:10:24:29:90:5a:44:16:
         1e:ad:61:37:68:76:a6:4f:1f:31:4e:4f:24:6c:12:17:91:26:
         6c:4a:c8:b4:87:4b:75:ee:ba:81:c3:1a:df:6a:54:aa:42:20:
         39:91:6f:d8:aa:5a:db:72:ea:47:d6:6f:09:5d:35:8b:c3:f1:
         a2:c4:4d:31:fb:45:f6:93:ba:a2:79:b2:95:1a:4f:d7:9e:b5:
         fb:68:3b:88:b7:c0:39:56:82:d1:a7:3d:66:e9:b6:7c:6b:da:
         29:78:1a:41:49:67:31:b4:af:c3:c2:a7:73:d3:b9:04:4f:90:
         46:dd:63:86:67:e0:75:c9:74:77:18:d0:2a:af:b4:19:09:f4:
         95:aa:91:88:2a:db:2e:06:48:9f:0d:9a:b0:44:02:12:27:d3:
         4f:c5:08:01:7d:f4:e1:86:a3:b2:ba:40:14:b9:3d:cb:eb:64:
         67:c1:4d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:08:53 2025 by rpki-client