Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bea1f117-353b-3e33-a9fc-d4fc8c91a1f9.roa
File:                     bea1f117-353b-3e33-a9fc-d4fc8c91a1f9.roa (raw, json)
Hash identifier:          z/+IlAI++HNV43dxOqxOndI5ObY92EXUPhEbF8c9Qws=
Subject key identifier:   71:DA:15:A7:F6:B9:F3:2E:63:13:50:23:01:86:7E:49:88:35:29:1F
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584E9A7FCA36EBAD39EC1ADEB900
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bea1f117-353b-3e33-a9fc-d4fc8c91a1f9.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        198.1.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ca:36:eb:ad:39:ec:1a:de:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=abbc895e-1545-48e2-a7b0-6671f5f7c0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:ab:62:c3:57:73:41:2b:0d:c8:0e:81:91:
                    9a:d3:2d:a5:c5:67:b8:65:8e:52:0b:23:bf:df:d2:
                    c5:d6:15:96:4c:e6:e4:c8:c8:1d:e1:27:c7:f6:bf:
                    20:29:08:46:e7:74:5e:78:dc:51:93:3c:ee:3e:00:
                    8c:b6:b8:f3:bf:a4:e3:9a:9e:22:79:1a:fe:d3:70:
                    7a:3f:bd:88:81:57:0e:c7:b9:b0:83:ad:e2:65:03:
                    27:7a:b7:29:a3:44:a4:7b:ca:9a:65:ca:67:4b:b8:
                    6d:6b:79:6f:43:5d:9d:f1:aa:fe:48:32:37:91:cc:
                    6c:de:53:f9:b6:d7:24:f4:07:95:66:a8:c2:a5:6a:
                    80:28:a4:75:8d:bb:2d:d1:85:93:d8:59:3f:ed:64:
                    df:f6:6d:7d:83:cb:cf:df:20:93:a4:d8:22:0c:5d:
                    d1:c3:64:2d:06:14:e0:b4:2c:2a:99:65:8b:9f:55:
                    38:7d:5a:89:41:5d:88:ef:87:1c:1c:90:8e:ba:ea:
                    ea:b0:52:65:43:2c:7f:29:31:8a:06:93:1d:ee:03:
                    67:af:7d:ec:8b:40:26:bb:d6:0a:9c:e6:97:fc:2c:
                    7b:04:6c:05:8b:b2:3a:ae:9b:16:79:71:38:05:7d:
                    e1:f0:c6:d0:53:cb:c0:ea:d3:86:f2:91:5e:12:f7:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DA:15:A7:F6:B9:F3:2E:63:13:50:23:01:86:7E:49:88:35:29:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bea1f117-353b-3e33-a9fc-d4fc8c91a1f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b5:31:b2:91:68:24:29:23:06:38:cf:b7:2c:89:6b:9b:30:
         5a:c1:81:55:09:1a:99:4b:3c:e8:08:ff:7e:ad:01:c5:08:76:
         9a:c8:bb:57:80:3f:0b:5e:b4:b7:85:d6:33:68:50:b9:86:bc:
         bc:87:a8:60:8f:6e:14:8f:f8:58:b9:b9:d5:8a:cb:d0:59:58:
         65:32:a3:cd:49:21:54:b0:a7:bb:d8:4a:e2:75:3e:5b:04:67:
         66:13:40:eb:9f:c1:65:48:5b:c7:fd:3c:8c:0b:06:c1:6f:9b:
         b7:b9:99:00:2f:6a:b4:3e:d1:85:97:f8:1f:2a:9b:07:83:f4:
         a6:d1:51:10:20:52:aa:fe:55:f2:8d:a6:3d:f9:64:4b:b3:47:
         4d:db:d1:01:90:1a:b2:25:99:7f:da:cd:bc:5d:92:d7:23:4a:
         80:20:e9:ce:ce:fb:b6:b7:db:18:d7:b0:ae:48:f6:f7:6b:13:
         46:75:95:4a:2e:73:e0:4d:2e:d1:e6:8b:24:a7:0b:1c:47:62:
         90:99:4d:4d:ee:c6:2e:10:e5:bd:bf:e8:6d:a8:a9:bf:ca:85:
         07:d5:55:ee:44:eb:38:e6:ad:fc:6b:cd:b4:3e:ef:73:e4:82:
         ef:ac:87:7a:c1:70:d3:63:ee:be:5e:fa:00:b2:d7:ec:2a:5d:
         33:4d:a5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:51 2026 by rpki-client