Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c1519ebe-84ed-3c8d-bd81-ffa4f154c25b.roa
File:                     c1519ebe-84ed-3c8d-bd81-ffa4f154c25b.roa (raw, json)
Hash identifier:          WXu8o6SXQP+dIj+yRBk+pVUdMJx+I8TYJiUtjxt2PzA=
Subject key identifier:   63:7E:07:79:65:C5:63:EF:48:64:F1:FC:EA:04:23:7D:C9:80:CC:2F
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584E9A7FB2D02ACB4F8951021700
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c1519ebe-84ed-3c8d-bd81-ffa4f154c25b.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        198.1.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:b2:d0:2a:cb:4f:89:51:02:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=94802b4f-c9e0-45ee-8179-840482d095a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:78:9e:c9:da:0f:1d:c8:2b:3c:00:f7:22:
                    bc:4a:24:6b:c2:84:fd:4d:99:38:a7:ed:4e:df:17:
                    a9:1b:18:2a:f7:8f:9d:1c:a6:1e:8c:57:d0:9b:4d:
                    91:dc:0b:61:53:a8:ff:fb:39:51:a5:de:b6:8c:55:
                    f7:b0:c2:b1:f4:81:e7:77:bb:99:65:9b:a6:91:48:
                    60:eb:43:da:5a:67:eb:1e:f7:df:9f:70:66:a3:58:
                    69:13:14:56:c1:68:a3:2a:e0:bd:76:0c:9e:22:38:
                    fe:48:3a:e3:e7:19:32:3d:09:df:57:45:2c:84:e8:
                    63:87:ff:f8:c7:4a:8e:bb:89:2b:52:dc:74:1b:23:
                    09:cd:0d:11:5c:ee:3c:6c:8a:d3:77:1f:eb:14:0c:
                    63:3e:1a:65:7d:a4:50:35:86:4e:22:f2:18:70:b7:
                    d6:09:03:ca:a9:b3:3a:3d:c7:8e:8e:d9:39:10:7e:
                    05:74:7f:e3:39:ca:d5:20:7b:fc:71:f1:ca:25:a6:
                    d7:61:a8:a0:d7:a2:54:e1:28:4b:eb:f7:0e:c2:36:
                    5f:bf:aa:8b:77:17:90:61:d4:11:ac:35:86:f2:ca:
                    e9:a7:5d:0b:b0:98:10:ad:f5:a1:a3:40:c2:2a:17:
                    a1:70:49:89:d7:c3:9d:1e:45:c3:d6:a8:d9:f8:3a:
                    06:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7E:07:79:65:C5:63:EF:48:64:F1:FC:EA:04:23:7D:C9:80:CC:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c1519ebe-84ed-3c8d-bd81-ffa4f154c25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f4:ea:80:58:b2:53:5d:20:60:1c:77:76:82:ee:ab:68:27:
         93:e5:ac:6c:3e:e9:48:97:4c:10:72:28:a4:bd:48:5b:9f:2c:
         df:b7:2e:02:68:63:ac:aa:3f:6f:0c:67:07:6b:f5:78:1e:25:
         41:aa:42:11:4c:3b:e3:e5:07:82:02:18:40:b5:22:31:53:8e:
         ec:6a:53:89:3f:86:40:81:13:28:e0:b1:4f:a3:bc:46:a5:59:
         69:9b:4f:e8:a1:48:97:1f:be:b6:25:eb:9c:00:d8:e9:3a:f0:
         f3:f7:6a:42:7c:c9:7d:74:fe:83:52:c9:04:80:a7:d6:91:cd:
         49:9c:81:96:4e:9a:fc:ae:58:f0:fa:ab:c9:2b:f0:52:af:2b:
         6e:6e:5e:f4:9d:f9:18:2b:91:ed:47:9f:22:f2:2b:1d:86:73:
         ad:18:e1:49:9c:1e:98:c3:d9:fc:b9:e3:bc:03:4c:7d:54:e7:
         70:eb:70:8f:cd:bd:15:d9:de:0e:6c:f1:5c:8c:c0:5d:3a:29:
         da:1c:cc:e8:75:a9:99:ce:52:b6:7f:68:dd:8b:87:0e:1e:f4:
         35:2d:ab:74:9d:f5:b5:29:0c:8c:61:b3:ab:b2:bb:3f:91:87:
         de:3c:78:ba:f1:15:2b:1f:e7:72:63:76:b4:ee:a7:5d:d0:a3:
         6c:81:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:16:06 2026 by rpki-client