Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa
File:                     e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa (raw, json)
Hash identifier:          rQMuM7DR7pwTpShefVIpo1hyT4Ier+VPp0RoAJULuxs=
Subject key identifier:   79:8C:4F:BB:13:DA:A3:D0:8B:7E:0A:D1:75:B1:12:59:83:40:6E:4C
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584F3CE275E0D29D719D66051580
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        198.1.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:75:e0:d2:9d:71:9d:66:05:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=7dbe9cb6-8498-42e4-9ea5-d52809184ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:bf:98:d0:76:34:37:03:55:40:8f:63:bf:
                    ac:cb:0d:15:dc:04:43:49:56:e1:a4:dd:30:b9:47:
                    bd:46:91:30:46:d8:44:2e:ba:99:37:a0:73:01:f7:
                    5c:ff:95:d3:84:f0:2c:65:eb:89:45:41:ba:f7:79:
                    da:bd:3c:6c:26:43:cf:d9:c8:d4:ae:57:aa:b8:5e:
                    3f:94:3c:43:7a:5c:46:dc:d4:3f:43:49:f0:fb:2b:
                    ed:ad:c6:33:c4:ad:4d:c0:46:5b:3e:ef:93:8c:c6:
                    b4:7c:33:3a:5f:64:29:3a:05:67:4a:db:95:c4:52:
                    10:5c:97:12:26:26:5e:76:59:72:32:1a:86:6f:55:
                    35:90:23:c8:2c:79:05:c6:88:e6:4e:47:0d:88:0b:
                    37:7b:56:40:e3:48:14:ed:d5:91:98:e8:70:ed:88:
                    5f:9e:64:21:26:19:f0:a5:42:af:95:57:a9:e7:ae:
                    97:5b:86:82:72:df:8f:22:e5:54:48:b9:d2:1d:59:
                    eb:85:5e:c0:0a:03:9b:37:f4:68:86:19:42:32:23:
                    6f:d9:1a:bf:07:31:af:91:cb:60:1b:77:4a:87:c7:
                    c2:50:33:1c:2b:4a:18:6e:40:1b:1b:43:62:2b:df:
                    2f:50:4d:97:3f:a0:45:88:a9:36:f3:54:b8:32:93:
                    90:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8C:4F:BB:13:DA:A3:D0:8B:7E:0A:D1:75:B1:12:59:83:40:6E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:77:51:4e:ae:06:89:82:3e:5e:35:72:2e:e1:e9:e7:18:bb:
         62:69:10:f6:07:40:d7:ae:5f:cf:bf:f7:c0:8a:86:2b:f4:53:
         0f:48:f1:78:0a:26:e4:8a:15:fc:7e:7e:d2:dc:57:1f:c6:a0:
         3f:6f:24:b8:10:f8:2d:f1:6a:36:89:c8:20:e1:de:f7:e2:8d:
         97:e3:c8:4e:67:d6:09:c2:25:2d:9d:63:13:5f:8f:e8:ed:78:
         f6:7b:af:f2:db:a5:ce:dd:07:21:a5:cc:46:58:ed:70:0d:e8:
         6f:3b:1f:8f:66:25:be:68:50:04:c7:00:13:19:70:7d:25:5d:
         c5:15:c5:05:4c:67:87:ff:e9:b8:9b:94:88:96:43:16:08:1a:
         13:46:a2:00:2b:87:f6:b8:19:63:f1:a7:86:3a:6a:29:2b:16:
         3a:b6:ba:58:0b:1b:d2:c6:5c:6e:fe:d8:58:ab:55:1e:d9:c5:
         d6:4c:a0:f9:4e:4d:ff:92:d6:2a:10:fd:87:bb:c3:c9:75:ba:
         98:91:22:8d:52:47:29:c2:11:00:05:14:ac:da:0e:b6:7d:f2:
         46:bd:ee:ec:0b:af:9f:21:25:a8:15:4b:b4:78:69:d9:be:f4:
         7c:58:c7:78:d2:85:90:cc:07:4e:2c:f0:05:87:3f:ce:92:7b:
         f7:57:be:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884nXg0p1xnWYFFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
N2RiZTljYjYtODQ5OC00MmU0LTllYTUtZDUyODA5MTg0ZWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBW/mNB2NDcDVUCPY7+syw0V3ARDSVbhpN0w
uUe9RpEwRthELrqZN6BzAfdc/5XThPAsZeuJRUG693navTxsJkPP2cjUrlequF4/
lDxDelxG3NQ/Q0nw+yvtrcYzxK1NwEZbPu+TjMa0fDM6X2QpOgVnStuVxFIQXJcS
JiZedllyMhqGb1U1kCPILHkFxojmTkcNiAs3e1ZA40gU7dWRmOhw7YhfnmQhJhnw
pUKvlVep566XW4aCct+PIuVUSLnSHVnrhV7ACgObN/RohhlCMiNv2Rq/BzGvkctg
G3dKh8fCUDMcK0oYbkAbG0NiK98vUE2XP6BFiKk281S4MpOQWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHmMT7sT2qPQi34K0XWxElmDQG5MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZTZlMGJjOTMtNmUxMC0z
YmViLWIzZDctMjc1OGYzNTM4YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADd3UU6uBomCPl41ci7h6ecYu2JpEPYHQNeuX8+/98CKhiv0Uw9I8XgK
JuSKFfx+ftLcVx/GoD9vJLgQ+C3xajaJyCDh3vfijZfjyE5n1gnCJS2dYxNfj+jt
ePZ7r/Lbpc7dByGlzEZY7XAN6G87H49mJb5oUATHABMZcH0lXcUVxQVMZ4f/6bib
lIiWQxYIGhNGogArh/a4GWPxp4Y6aikrFjq2ulgLG9LGXG7+2FirVR7ZxdZMoPlO
Tf+S1ioQ/Ye7w8l1upiRIo1SRynCEQAFFKzaDrZ98ka97uwLr58hJagVS7R4adm+
9HxYx3jShZDMB04s8AWHP86Se/dXvgo=
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:02:17 2026 by rpki-client