Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e0fc6865-dd46-3890-8502-ec541cc5c403.roa
File:                     e0fc6865-dd46-3890-8502-ec541cc5c403.roa (raw, json)
Hash identifier:          YEgzYEerp4GRpG/yiYrcZSrcWX3UugTNVhJA9x1yGjo=
Subject key identifier:   DB:09:97:52:C1:08:1B:FD:40:E5:9E:11:8A:B3:F7:23:F7:38:F2:3F
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584A82AB52AC94438971D7A3E940
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e0fc6865-dd46-3890-8502-ec541cc5c403.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     9232
IP address blocks:        198.1.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:52:ac:94:43:89:71:d7:a3:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=6f2d6658-4c58-48b4-9e8a-ecdeee8b8078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:70:e4:e0:4c:fe:3b:28:4c:73:11:83:6e:
                    a6:67:41:74:a7:7d:dd:ec:32:3a:8e:98:c3:4c:85:
                    8d:f4:03:58:72:66:ea:42:46:fc:12:8b:f1:dd:a2:
                    f1:64:57:4a:54:0a:36:bf:99:80:14:73:ff:8a:ac:
                    f7:c8:b7:a1:2e:29:ea:8d:40:26:c5:36:d9:82:45:
                    ed:95:09:54:31:75:c0:e8:65:b2:0a:51:d4:1b:28:
                    d5:47:15:40:93:2c:f5:4b:ac:ff:a2:62:79:50:b7:
                    4a:f6:28:d9:a9:55:c9:c1:dd:43:49:55:e6:fe:3e:
                    ce:3a:ca:c6:5e:bf:e6:9e:c3:95:ac:9c:fa:8a:3c:
                    8f:9d:e9:e7:0f:62:69:00:dd:05:cc:a7:d3:c8:98:
                    55:eb:29:2b:c7:f4:40:a8:89:aa:99:98:25:9e:14:
                    61:c1:01:3e:ed:39:0b:71:c1:5e:ec:b4:fe:26:06:
                    7d:15:25:31:90:e1:5d:44:3d:52:49:9c:5a:b9:eb:
                    ee:64:39:24:30:de:ab:2f:97:3e:54:03:32:59:a0:
                    c8:8d:29:0e:7e:ab:82:51:3d:33:51:2b:51:37:04:
                    28:75:4f:b4:90:11:32:aa:8b:56:6e:74:4a:42:e7:
                    27:d8:97:fa:4e:95:53:f7:9d:f5:bc:ad:b4:35:c5:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:09:97:52:C1:08:1B:FD:40:E5:9E:11:8A:B3:F7:23:F7:38:F2:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e0fc6865-dd46-3890-8502-ec541cc5c403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fe:c8:3e:da:5a:76:59:6d:ba:82:98:4f:8c:60:e7:1d:a4:
         e5:34:2e:7b:0c:e7:46:67:a7:86:02:6c:48:17:1e:97:b5:29:
         9d:d5:f5:2d:d6:5c:9c:a4:9b:9a:53:4a:60:af:bc:cc:ea:c6:
         d0:3a:19:ce:4d:54:7f:a6:ce:0b:07:de:fe:2a:37:9d:46:ea:
         39:9e:65:fc:23:8e:02:a4:75:21:49:ba:a6:08:34:d8:e5:21:
         77:8a:19:7a:5a:ad:6e:71:44:a4:81:11:b2:81:42:7a:25:b7:
         44:1e:7e:a9:7d:31:bc:55:2b:56:60:98:ab:d1:dd:40:ab:75:
         04:4e:cd:1f:ba:93:ba:7e:66:b0:fd:1d:c5:bd:06:3a:6f:1e:
         94:38:75:8c:b0:e7:d0:d5:a3:ec:9a:36:cc:e7:50:23:d4:0d:
         1b:56:63:85:f6:8c:5a:e4:48:4c:1e:00:14:84:56:53:4c:51:
         80:8e:62:c3:91:af:35:ee:4b:ff:ed:bd:47:43:f9:e3:9f:2a:
         3b:18:7a:99:70:6b:be:48:81:b2:0e:cc:73:9e:dd:4d:08:a8:
         6f:88:8d:5a:95:bf:38:1b:38:0f:e0:3a:88:2d:e1:d5:cf:9d:
         5c:b7:6a:f8:17:d7:25:b9:46:1f:6f:2b:56:9a:a9:22:e1:ed:
         74:0d:ec:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:30 2025 by rpki-client