Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bc7f7c29-f7ae-39bd-a9ec-d5383d5c39b1.roa
File:                     bc7f7c29-f7ae-39bd-a9ec-d5383d5c39b1.roa (raw, json)
Hash identifier:          UkN3ONCpPpOhFL4LmdfVBUzefBp4EAk516EgtL5p89M=
Subject key identifier:   3B:86:0D:05:5A:B2:BF:C2:0E:BB:80:75:E7:77:9A:4C:92:48:BD:A5
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584B4FE29AAE89F168A4E24D3680
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bc7f7c29-f7ae-39bd-a9ec-d5383d5c39b1.roa
Signing time:             Thu 25 Sep 2025 13:13:08 +0000
ROA not before:           Thu 25 Sep 2025 13:13:08 +0000
ROA not after:            Wed 24 Dec 2025 14:13:08 +0000
asID:                     401776
IP address blocks:        198.1.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:e2:9a:ae:89:f1:68:a4:e2:4d:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep 25 13:13:08 2025 GMT
            Not After : Dec 24 14:13:08 2025 GMT
        Subject: CN=6c013ad6-11cd-47c5-9601-1cd2e81f77b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d4:e2:3d:03:5b:c6:bc:b2:70:cf:12:fd:8f:
                    d0:48:e8:cf:31:03:f1:38:8f:b4:54:ef:ce:37:2c:
                    3c:fa:a4:5c:83:eb:b9:e8:6a:8d:0b:f3:29:4e:07:
                    06:88:b5:45:81:ca:85:1d:37:8d:a4:62:7c:45:8c:
                    e7:c8:f1:9e:b4:1e:6b:3b:46:e6:40:09:87:90:93:
                    76:e3:27:7e:0e:5f:4c:f2:d5:6d:d1:9a:6c:ad:fe:
                    4c:67:f8:dc:a0:2e:7a:52:82:a7:d7:8d:c2:13:b0:
                    35:7f:ce:09:51:6c:ad:0b:98:47:d1:28:ef:c2:1e:
                    7d:1b:56:be:25:ec:c6:72:d0:f1:74:2c:59:f6:3d:
                    31:70:f3:59:f5:d5:75:80:11:ba:be:81:74:99:99:
                    e0:0c:66:ed:07:d3:97:03:6b:6c:c0:e1:9f:21:ad:
                    bf:e2:b4:2b:03:ed:e9:97:83:2e:c7:35:dd:86:a9:
                    81:33:97:b4:64:73:ea:1c:0a:e4:ba:f9:1e:c0:60:
                    c5:f8:4f:36:5c:f8:77:de:e2:48:42:9f:2c:b6:ac:
                    bd:93:ec:0d:a9:ee:51:ab:4a:38:2c:29:ed:d2:04:
                    a3:de:b8:64:6f:f6:80:40:ee:07:af:67:b3:6a:eb:
                    83:38:34:df:6f:90:4c:b9:89:68:11:93:66:67:8c:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:86:0D:05:5A:B2:BF:C2:0E:BB:80:75:E7:77:9A:4C:92:48:BD:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bc7f7c29-f7ae-39bd-a9ec-d5383d5c39b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:25:a6:83:6c:b1:26:43:72:da:6a:28:e9:31:6c:5e:8b:35:
         34:9e:3f:3f:1e:81:20:10:7f:b0:5c:46:64:1a:41:a8:99:ff:
         1a:6a:37:6b:c9:5e:36:db:ee:8e:52:1e:5c:92:8f:d5:90:e4:
         b0:6d:50:79:b5:ab:f5:20:86:6a:3a:41:4f:ea:73:4f:ef:ce:
         65:b1:c1:65:65:8d:3c:66:74:b1:44:a4:ac:52:15:75:ac:ba:
         e3:15:e9:c2:45:c8:0c:63:65:06:e2:9e:43:78:9d:69:36:ee:
         f9:2e:85:73:81:5a:88:4b:0f:fb:1c:e2:78:d7:61:37:ac:ad:
         e8:92:ac:fe:40:d2:55:49:12:91:8a:1c:06:dc:36:8b:b8:ec:
         31:95:54:d6:e9:57:06:d9:78:9a:68:59:17:db:c9:ed:3b:b9:
         90:81:62:c8:fe:2a:8a:4f:c2:97:cd:f5:22:ed:73:ea:e6:7b:
         2b:d2:a6:38:90:54:8e:e4:fc:a6:8e:b3:4c:a2:ac:0c:c8:b4:
         a2:7e:e9:b6:35:7f:74:71:d9:d1:82:6a:b1:36:60:7c:ae:38:
         dd:d1:8b:76:26:11:96:36:9b:e3:36:d1:c7:2b:75:f6:99:58:
         87:8b:b1:63:44:6e:ed:30:3d:71:87:88:c9:9f:94:78:d6:d7:
         ae:26:32:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:36 2025 by rpki-client