Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/1fdbd5b7-955d-3e66-a82c-48250bee21b0.roa
File:                     1fdbd5b7-955d-3e66-a82c-48250bee21b0.roa (raw, json)
Hash identifier:          9Oow+A4GD5CL/fPykd+U6yzE/ERNgxUR1/K2vlP2l+Q=
Subject key identifier:   F5:55:5F:A1:22:4F:21:FE:6B:5A:DB:87:B3:11:93:09:3C:5E:96:E0
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584B21CC3FD666D38A5B4369B180
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/1fdbd5b7-955d-3e66-a82c-48250bee21b0.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     151373
IP address blocks:        198.1.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:3f:d6:66:d3:8a:5b:43:69:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=d86e9e2f-5869-460a-9f98-ed97c7098346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:48:ac:4b:5b:e7:0e:b1:9c:69:ff:cb:f2:94:
                    13:ef:98:43:21:08:9f:27:43:74:66:01:14:0e:d2:
                    56:2b:fc:69:14:52:33:48:3d:f6:a1:e2:2f:61:8f:
                    27:ea:36:2a:e6:a5:48:6c:e5:f5:71:27:f1:18:d1:
                    35:ff:73:6c:d2:3d:bd:11:dc:2a:68:76:53:9a:03:
                    aa:05:27:c7:41:13:df:6c:8f:46:cb:01:19:48:6e:
                    e6:db:e7:ff:37:fb:51:da:06:83:e6:b2:2b:74:ce:
                    c3:6d:7e:c0:f3:75:69:0c:13:f4:a3:0f:41:27:73:
                    4c:e7:da:33:a7:1d:9a:a6:91:85:e0:e8:be:be:8e:
                    e1:27:39:4f:aa:02:bb:7a:b9:76:47:9b:23:39:0b:
                    75:fb:b9:09:e7:f1:18:9b:fa:4a:c1:c2:60:80:32:
                    b8:38:97:a6:3c:7b:c1:80:40:37:34:00:de:68:04:
                    24:c3:c8:7a:b8:08:b0:aa:82:38:c5:68:68:3b:ad:
                    9b:b7:84:f9:66:f3:ec:17:81:2b:a1:f5:0a:e0:e3:
                    b8:0b:04:5d:34:45:43:6d:bd:3a:e8:7c:98:14:84:
                    5a:8a:62:8d:e2:ec:68:91:61:25:6b:75:b9:27:9b:
                    dc:ec:41:07:44:6c:0a:a4:65:72:2a:91:11:07:0b:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:55:5F:A1:22:4F:21:FE:6B:5A:DB:87:B3:11:93:09:3C:5E:96:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/1fdbd5b7-955d-3e66-a82c-48250bee21b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a9:a5:19:a0:c2:af:68:c2:51:46:4a:a3:02:bd:02:3a:d5:
         7e:42:00:53:dc:0d:41:66:0c:74:a7:b7:08:46:2b:ca:cd:45:
         10:e4:8b:01:ba:3f:b3:95:f9:68:05:54:32:db:0d:21:85:e3:
         f9:04:ec:b3:9f:1d:ce:d2:a5:dc:79:d1:68:6e:91:0e:c9:51:
         04:6e:86:64:18:54:3c:17:e1:d5:75:88:52:97:65:4c:ed:dc:
         57:af:8d:60:6a:ce:68:87:16:f6:6c:d2:eb:0a:61:cd:40:10:
         5d:82:6d:eb:70:61:08:cc:0e:73:4a:40:bb:e6:3b:2f:39:14:
         6a:8d:ce:a9:06:ca:73:b2:3b:a0:d1:64:42:b4:9b:ab:d7:9e:
         0a:a5:d6:c0:62:6f:58:80:79:53:54:f7:08:ca:43:ae:43:7b:
         6f:50:0b:4a:79:01:70:f7:fa:d9:03:6a:7d:bd:76:82:54:11:
         7d:52:a2:f1:3b:57:07:7e:9e:4e:90:bf:72:ca:4f:89:d9:be:
         08:01:b1:7d:a1:1f:7f:32:24:cc:68:9f:f4:d8:71:b3:03:e2:
         4e:92:fb:a8:28:dc:87:6f:62:55:cd:2f:5e:71:df:07:e1:00:
         af:83:76:36:e7:d5:22:2b:39:0a:ba:b3:d9:71:b7:60:06:e5:
         69:d4:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:48:42 2025 by rpki-client