Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3c31877-dad2-39b4-a7ef-2037f5489018.roa
File:                     a3c31877-dad2-39b4-a7ef-2037f5489018.roa (raw, json)
Hash identifier:          L8mBmCFWZYBc9w2UEV3Cv/2E2Hfe5/nCuX8Uv203gsc=
Subject key identifier:   73:43:34:01:08:E1:AA:98:EE:FE:DB:F5:7F:9E:70:DC:93:89:21:48
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584D8AC5419A07AD905F72BA5600
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3c31877-dad2-39b4-a7ef-2037f5489018.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     55201
IP address blocks:        198.1.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:41:9a:07:ad:90:5f:72:ba:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=0a36587e-bcec-4e37-be3c-15d03ead0906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:30:38:bd:fe:6f:e3:ff:1f:01:ec:0a:72:
                    7e:fa:a3:24:2b:28:e7:9f:21:f9:59:81:6f:2c:83:
                    63:ee:4e:11:5e:31:1e:3b:d9:49:ed:e4:b3:61:9c:
                    9f:b8:f9:b4:6a:71:0b:15:ba:97:69:75:ff:3c:24:
                    05:68:dc:78:8f:4f:2d:2d:15:cf:b4:47:8c:77:3b:
                    66:a1:10:5f:18:19:97:2c:af:eb:d2:5a:3b:c9:e3:
                    b8:1c:82:3c:45:d3:78:51:e1:52:4e:2b:22:ad:b0:
                    fd:15:24:b1:c5:13:c2:2e:bb:2f:d9:6b:62:2b:15:
                    37:3b:e4:c5:a6:da:2a:3a:07:88:2f:f6:10:ac:86:
                    b4:0e:cd:bd:c4:dd:b7:6f:01:91:1f:8d:a5:ed:0a:
                    6d:72:a1:c9:b0:df:cd:f2:a1:5d:b9:39:24:a9:86:
                    8b:fc:0c:86:b8:8a:60:19:44:3b:e2:f1:2c:3a:ec:
                    56:75:89:d6:64:c7:6c:03:02:11:1e:61:90:ef:af:
                    79:0e:fe:6d:14:2a:a8:54:07:11:b3:8d:5e:a8:fb:
                    bb:52:6c:19:32:0d:56:a3:3a:1b:46:a4:8f:2e:33:
                    b3:d3:2c:1d:8f:ab:e4:98:bc:ac:b1:ee:e7:c5:96:
                    0c:1b:9f:73:74:e3:86:d7:14:06:08:c9:57:e3:d3:
                    6d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:43:34:01:08:E1:AA:98:EE:FE:DB:F5:7F:9E:70:DC:93:89:21:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3c31877-dad2-39b4-a7ef-2037f5489018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d6:cc:71:9a:93:4e:07:ff:a9:11:2e:74:3b:40:40:0b:63:
         fd:75:21:fe:35:d8:07:2d:2e:c8:fc:83:ca:75:af:80:56:19:
         2d:ec:c8:6d:05:42:97:ff:10:6c:a2:d2:32:af:c2:e6:07:81:
         f2:39:5c:6b:e4:16:8a:40:22:4f:14:8d:21:47:01:b8:d5:42:
         05:63:02:c2:1e:ec:87:63:be:63:e6:66:8b:21:1a:4f:a0:00:
         f5:28:1d:a2:98:e0:48:60:67:1f:2e:09:2d:86:d8:54:53:70:
         5d:cd:0c:36:66:26:33:ad:90:95:70:92:31:7d:70:93:86:5f:
         f5:0d:15:e8:96:f6:f0:aa:06:65:3d:72:2c:eb:96:19:74:8a:
         d1:f8:88:47:a9:c6:39:a4:7e:86:71:a3:35:5e:37:df:e2:7a:
         63:98:83:14:9e:72:bd:bf:56:fc:cb:5d:72:f2:88:15:94:3e:
         fe:ff:d4:8b:5c:d7:b6:82:63:e5:9a:d4:df:35:e2:df:89:30:
         a8:a2:80:35:1d:48:02:cc:1f:9c:3b:a3:d1:51:a7:a7:83:b6:
         e0:09:7a:2e:a7:30:27:8a:67:8b:37:69:24:4c:2e:f5:3a:fd:
         d0:65:d4:e5:b6:7b:8e:22:ef:7d:d3:be:34:c6:b0:7b:bd:6d:
         e3:62:d9:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUGaB62QX3K6VgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk
MGEzNjU4N2UtYmNlYy00ZTM3LWJlM2MtMTVkMDNlYWQwOTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VQwOL3+b+P/HwHsCnJ++qMkKyjnnyH5WYFv
LINj7k4RXjEeO9lJ7eSzYZyfuPm0anELFbqXaXX/PCQFaNx4j08tLRXPtEeMdztm
oRBfGBmXLK/r0lo7yeO4HII8RdN4UeFSTisirbD9FSSxxRPCLrsv2WtiKxU3O+TF
ptoqOgeIL/YQrIa0Ds29xN23bwGRH42l7QptcqHJsN/N8qFduTkkqYaL/AyGuIpg
GUQ74vEsOuxWdYnWZMdsAwIRHmGQ7695Dv5tFCqoVAcRs41eqPu7UmwZMg1Wozob
RqSPLjOz0ywdj6vkmLysse7nxZYMG59zdOOG1xQGCMlX49NtbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHNDNAEI4aqY7v7b9X+ecNyTiSFIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYTNjMzE4NzctZGFkMi0z
OWI0LWE3ZWYtMjAzN2Y1NDg5MDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACjWzHGak04H/6kRLnQ7QEALY/11If412ActLsj8g8p1r4BWGS3syG0F
Qpf/EGyi0jKvwuYHgfI5XGvkFopAIk8UjSFHAbjVQgVjAsIe7IdjvmPmZoshGk+g
APUoHaKY4EhgZx8uCS2G2FRTcF3NDDZmJjOtkJVwkjF9cJOGX/UNFeiW9vCqBmU9
cizrlhl0itH4iEepxjmkfoZxozVeN9/iemOYgxSecr2/VvzLXXLyiBWUPv7/1Itc
17aCY+Wa1N814t+JMKiigDUdSALMH5w7o9FRp6eDtuAJei6nMCeKZ4s3aSRMLvU6
/dBl1OW2e44i733TvjTGsHu9beNi2bg=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:07:07 2026 by rpki-client