Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa
File:                     e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa (raw, json)
Hash identifier:          oM6rmVW/yRFtlap1KQ/yhsZAgXpCto17clsUUEm0EBs=
Subject key identifier:   EC:B8:65:C6:40:CE:AF:C3:66:55:3C:99:CB:33:FE:03:95:36:6F:2F
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584E9A7FAA26F046DC3B02096A40
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        198.1.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:aa:26:f0:46:dc:3b:02:09:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=b47c25e9-6bdb-4f92-9aeb-7e85d8befb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:2b:b4:82:18:30:49:15:18:92:e1:a5:f4:
                    e1:f0:3b:36:b8:a8:14:78:b3:09:3d:96:ea:85:21:
                    2d:03:3e:db:c8:e1:f5:c4:26:93:1c:d0:50:16:5f:
                    00:8d:1a:c6:80:54:d9:f6:d1:f4:d4:d4:31:d5:30:
                    ad:41:4b:8b:95:57:64:55:c4:8d:e9:ff:fa:2c:26:
                    41:61:79:2a:78:47:37:91:72:8d:55:4c:b9:75:32:
                    0e:26:45:79:34:78:03:6f:37:96:0a:b0:e8:41:48:
                    92:11:68:cd:e8:fb:37:bb:fb:26:4c:62:d9:1c:8b:
                    eb:d7:69:19:01:b4:fe:52:40:3c:e2:22:f5:90:bf:
                    d3:02:f5:2d:d9:9b:a3:29:7f:23:61:e4:53:b7:bd:
                    92:4c:3e:3e:5c:bd:98:a1:30:29:05:2c:26:2b:37:
                    5d:17:27:39:d6:ae:ce:1b:08:99:da:f2:90:a2:3a:
                    88:b5:20:89:38:5f:3c:6d:69:bb:5c:65:8e:a4:3f:
                    df:67:3a:a8:a6:34:75:63:bc:86:a4:ec:27:74:f8:
                    55:a1:02:bb:36:0a:fa:3d:28:67:81:22:80:1a:54:
                    67:8f:3f:18:0b:7e:d5:e0:4d:e9:0b:82:22:b1:5e:
                    d8:9e:f3:a3:70:14:3c:68:3f:3f:10:ad:11:57:a6:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B8:65:C6:40:CE:AF:C3:66:55:3C:99:CB:33:FE:03:95:36:6F:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:af:8c:88:c2:b2:ff:a9:36:fb:55:2d:f0:31:a2:6f:e0:a5:
         48:9b:b4:0e:93:99:92:6a:89:fb:05:4b:ea:0e:1d:a7:76:d7:
         f5:e0:89:6e:3e:93:b9:bd:62:84:05:9e:32:a7:79:dd:40:81:
         3c:35:9f:e9:eb:d1:4b:5b:6e:8e:46:c8:75:80:5e:e6:13:ce:
         9b:82:65:43:04:32:e7:41:cd:55:37:a0:1a:90:59:47:7d:86:
         c0:93:99:fc:dd:95:37:00:f2:ac:87:b0:2c:14:2f:cc:72:4b:
         09:ef:52:11:95:58:ab:6f:de:da:a8:91:ea:d8:00:78:68:20:
         87:3d:da:c0:53:84:3b:bc:71:4c:a4:6d:eb:07:db:7c:28:0f:
         c8:30:5a:e4:a1:86:c0:e0:ca:6b:6a:3e:cb:52:e1:9c:0d:e3:
         c4:b1:76:60:61:ba:fb:d7:cf:f1:74:7a:a7:de:f4:1f:1b:e3:
         f5:26:ca:38:ed:00:47:67:22:91:f9:9b:ec:dc:d7:03:27:fa:
         04:7d:8b:d8:2d:03:11:22:37:f3:64:45:15:34:dd:37:fb:e3:
         be:58:a7:ae:8a:b3:61:ed:9e:41:f6:22:3b:10:81:12:29:ad:
         f8:27:90:29:b7:47:63:0c:07:d9:6b:f0:99:e8:9b:82:a9:8c:
         02:89:5d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:48 2026 by rpki-client