Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/be15637d-2ac7-3473-9b5f-176c656b1362.roa
File:                     be15637d-2ac7-3473-9b5f-176c656b1362.roa (raw, json)
Hash identifier:          rO3P7NPiBm4OVdCCqFfp5Rrw+Qo0Q+ZnLuWlBSVHbPQ=
Subject key identifier:   2F:02:35:EA:3D:31:EA:06:A0:0E:52:52:A8:C7:4F:F3:5A:6A:1F:A9
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584A1314DF22142BFDF9E8FD5800
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/be15637d-2ac7-3473-9b5f-176c656b1362.roa
Signing time:             Wed 04 Jun 2025 01:43:10 +0000
ROA not before:           Wed 04 Jun 2025 01:43:10 +0000
ROA not after:            Tue 02 Sep 2025 01:43:10 +0000
asID:                     7029
IP address blocks:        198.1.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:13:14:df:22:14:2b:fd:f9:e8:fd:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jun  4 01:43:10 2025 GMT
            Not After : Sep  2 01:43:10 2025 GMT
        Subject: CN=d0d8a85c-b2c5-4024-beca-8784dc65f64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c4:23:36:59:e9:61:05:93:62:18:db:19:4d:
                    a1:66:3a:a3:e6:bd:3a:87:66:23:92:9e:2e:b3:a8:
                    fc:68:71:70:bb:2f:5e:ec:b3:06:4a:99:75:49:b8:
                    5c:36:03:23:b7:8b:09:c9:30:82:28:64:52:04:df:
                    de:bc:b0:85:e2:ee:7e:44:49:4a:fd:89:ff:0c:41:
                    d0:6f:af:99:aa:d7:d3:ab:2b:ab:a2:62:ae:f1:76:
                    58:f8:94:e7:b4:1c:22:45:49:bc:31:43:07:5e:ac:
                    a2:c4:8d:4d:3f:13:bc:87:e3:9f:6e:a4:5a:85:be:
                    56:f6:c6:21:82:33:92:08:8e:6f:7e:81:4a:2f:37:
                    07:e4:c2:c1:07:0e:ae:8d:d8:6e:85:8e:60:18:1b:
                    ed:43:67:fd:37:e7:e5:ff:f3:4b:7e:99:7e:e7:e9:
                    c6:46:76:b0:a7:fe:31:b8:e3:29:86:90:ba:6c:f6:
                    8f:c8:47:89:16:13:51:75:46:33:cd:3b:32:a4:a7:
                    d2:49:9d:e1:8a:3a:bf:a4:1d:a4:e4:b6:a1:bc:e6:
                    d2:4c:1a:d2:b4:ec:26:dd:e0:41:c1:af:02:c4:21:
                    5d:23:9f:38:62:02:75:16:0d:f2:d4:f3:29:40:5b:
                    de:90:a7:95:55:74:e2:f5:88:17:1d:f1:c8:06:7b:
                    bd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:02:35:EA:3D:31:EA:06:A0:0E:52:52:A8:C7:4F:F3:5A:6A:1F:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/be15637d-2ac7-3473-9b5f-176c656b1362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f6:f5:42:59:2a:15:61:42:f5:10:0a:5d:ef:26:3e:70:01:
         5d:7b:3e:e3:c5:e4:fd:47:36:78:ed:3b:21:8f:e9:27:6f:5f:
         b8:81:9e:5a:96:f8:98:22:50:81:0b:c6:bf:51:97:8a:6b:89:
         a6:52:2d:9e:3b:2c:20:ca:72:60:84:a7:22:2c:43:a7:cd:16:
         e7:32:6d:b5:40:73:5f:cf:cb:83:63:68:b6:86:4d:6b:6e:8f:
         51:ae:a3:bd:2b:74:7f:28:04:96:17:25:6d:c2:f7:94:fc:f7:
         84:14:d0:fd:8e:b5:31:85:68:57:71:6f:f7:c0:09:e2:16:16:
         cb:ec:53:78:c2:84:f2:f0:c8:a9:c2:53:d2:4c:32:94:51:8a:
         1c:6f:e4:83:05:33:f0:1b:d6:e2:1d:50:ce:ab:d8:9c:8e:c1:
         5b:13:12:39:af:bf:96:1e:20:54:69:ba:ae:6e:2d:0f:f1:84:
         03:70:00:d8:1b:a4:9e:19:24:5d:15:8e:29:38:8f:11:38:e5:
         5f:31:61:69:d7:af:06:98:c5:8d:a9:72:6a:92:cd:dc:13:eb:
         8b:0d:cf:99:d4:1a:90:62:67:07:04:cc:eb:b0:11:9b:b5:5f:
         c6:3c:70:12:36:79:8d:c7:1b:8a:e7:8c:2e:19:6e:b8:fc:e7:
         5c:81:3c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:07:13 2025 by rpki-client