Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7c3a7827-cfb0-35d1-a851-39a1d6611095.roa
File:                     7c3a7827-cfb0-35d1-a851-39a1d6611095.roa (raw, json)
Hash identifier:          QoIe2kAYuKNtvKm5AiN+Rf5ret4/MtXSRkmz7MbQmbg=
Subject key identifier:   0B:1C:65:B8:41:65:47:2E:47:9E:B0:5A:05:B0:CF:96:9E:02:11:E8
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584A7BB81AD7B1A7E7D203F083E0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7c3a7827-cfb0-35d1-a851-39a1d6611095.roa
Signing time:             Fri 11 Jul 2025 13:16:08 +0000
ROA not before:           Fri 11 Jul 2025 13:16:08 +0000
ROA not after:            Thu 09 Oct 2025 13:16:08 +0000
asID:                     5650
IP address blocks:        198.1.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b8:1a:d7:b1:a7:e7:d2:03:f0:83:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jul 11 13:16:08 2025 GMT
            Not After : Oct  9 13:16:08 2025 GMT
        Subject: CN=4c4d48ab-bead-4343-8a3c-00729879650c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:8a:86:b9:29:28:53:a4:d3:90:64:a8:73:
                    c8:20:0b:be:51:96:9d:0d:4d:1e:9f:0b:be:2d:dc:
                    3b:dc:8a:db:81:d9:da:cb:1b:40:0b:9d:3b:b4:be:
                    a4:00:c1:ae:11:97:9d:0c:97:a8:70:ef:aa:c5:67:
                    9a:59:99:05:b5:1d:c6:1a:51:cd:b4:93:99:bd:4d:
                    12:7c:af:cb:f9:d7:03:b2:f9:06:9b:ad:7f:2f:51:
                    ab:a6:ff:3b:e7:75:b6:61:a2:e5:bb:56:d6:b0:95:
                    56:7f:98:52:59:6d:bd:83:2a:8e:d8:81:3b:81:72:
                    2f:ae:55:62:ae:b4:2a:80:16:62:72:3d:f5:df:f3:
                    7f:ec:3d:a2:f3:bb:3e:91:a0:6f:4d:b9:9a:e8:0e:
                    41:26:37:14:b9:fb:b7:dc:a8:7e:a0:31:f7:29:22:
                    92:00:97:b2:c6:ae:65:42:7d:f4:d5:cb:8f:5c:a6:
                    4f:ad:a1:36:29:27:fe:47:52:de:71:31:ac:78:15:
                    8f:3c:50:08:58:79:e2:1a:df:9a:7c:9e:76:f9:c8:
                    54:0a:4e:e1:a1:af:56:25:d8:ea:be:f6:78:fe:58:
                    71:76:d2:e0:b2:3e:4a:d4:db:d6:b2:dd:88:ee:a0:
                    83:6a:69:52:4e:ce:37:3e:8a:15:a6:e6:b6:9a:38:
                    79:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1C:65:B8:41:65:47:2E:47:9E:B0:5A:05:B0:CF:96:9E:02:11:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7c3a7827-cfb0-35d1-a851-39a1d6611095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:78:c8:a5:6b:83:75:e4:b4:f5:7f:b3:29:23:dd:4f:a8:e7:
         67:c0:c4:9d:1e:8f:a1:91:69:d8:9e:46:0f:88:36:e9:f6:10:
         92:98:2e:42:36:48:14:ce:0d:f8:7d:ef:32:c2:ba:d1:80:7d:
         94:eb:f7:5f:41:59:8d:34:d1:fd:7f:7a:0e:5b:9f:44:01:33:
         73:b8:43:16:7e:57:5d:d1:2c:4d:a1:07:57:30:73:f7:df:cb:
         3c:43:0d:f1:72:e4:34:2a:a2:d1:92:75:9a:89:de:77:ff:22:
         4a:e2:c9:ca:e0:4d:fd:ef:80:05:77:f5:36:34:23:c4:e9:27:
         f2:fe:c6:39:70:52:1e:2f:46:43:e1:f1:ee:05:16:47:dd:e5:
         9a:08:48:94:4b:f0:4f:e6:6e:12:64:57:d5:0a:f2:9a:73:44:
         93:2e:05:c3:74:d1:7d:5a:db:3c:21:16:4a:7f:f8:53:4f:80:
         f9:b7:b6:f4:59:bb:c0:17:65:19:77:ae:00:c7:56:37:3b:89:
         c7:6c:0c:d9:69:b4:0d:34:5a:12:35:37:fd:45:18:c1:fa:8b:
         d1:76:5b:4d:da:3c:8b:78:65:db:d5:0c:e1:a5:20:b7:a6:ce:
         1e:86:bf:5a:f1:ce:41:10:46:f3:f1:06:88:4d:5a:2a:be:1b:
         b4:17:0c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:11:57 2025 by rpki-client