Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bea1f117-353b-3e33-a9fc-d4fc8c91a1f9.roa
File:                     bea1f117-353b-3e33-a9fc-d4fc8c91a1f9.roa (raw, json)
Hash identifier:          IOQ7RIPHGcZ2q1DELmSTVrEVuozCRE67ZQEADAjWrn0=
Subject key identifier:   A6:D0:76:72:3E:CA:93:2F:01:27:B3:56:71:5A:0B:2C:62:3E:D1:DD
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584B196C0CC4EEE646A1D7368000
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bea1f117-353b-3e33-a9fc-d4fc8c91a1f9.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     22516
IP address blocks:        198.1.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:0c:c4:ee:e6:46:a1:d7:36:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=d8e7d090-3b36-4d57-8328-f508dad5769e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:54:16:99:e9:22:f4:c2:6e:98:e4:88:57:d7:
                    bd:48:ea:87:d7:7b:90:9b:08:f3:40:5b:4e:d3:2a:
                    ef:1b:b0:89:ad:4e:53:17:7e:1d:6e:db:d9:30:ee:
                    5b:b7:86:0d:9b:ad:52:8d:eb:28:6c:f6:1f:d2:73:
                    9e:3f:2a:6c:71:be:8b:8d:48:df:b2:90:88:be:7d:
                    34:5a:27:fc:22:e8:4f:45:08:56:57:b9:97:c3:cd:
                    c3:1f:17:16:2d:12:fe:dd:2f:51:b9:18:a6:2a:38:
                    15:2c:78:99:a9:73:f7:86:10:34:02:dc:14:94:1e:
                    0b:54:62:9e:fa:73:13:f4:3b:68:74:3d:ce:e9:a3:
                    af:c3:b7:e3:d7:f5:17:05:e1:b1:e8:b3:b9:65:40:
                    11:3b:0f:06:95:8d:d6:fc:0c:18:1b:c1:e0:ed:c9:
                    f2:93:69:4b:86:19:53:c8:1a:fe:3b:d5:c5:98:2d:
                    c6:7c:73:6f:e0:ad:58:70:9c:51:09:61:ae:e7:e6:
                    ed:02:a0:85:9b:a4:8f:db:0e:4b:90:c8:ee:4f:19:
                    fa:4f:7e:21:b8:83:87:13:7b:89:ce:92:68:ab:a1:
                    37:48:18:f5:a8:f4:3f:29:a2:92:dc:22:12:b0:45:
                    7b:52:4c:06:26:db:4c:1d:f4:55:27:96:23:ea:da:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D0:76:72:3E:CA:93:2F:01:27:B3:56:71:5A:0B:2C:62:3E:D1:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bea1f117-353b-3e33-a9fc-d4fc8c91a1f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:53:d5:f6:1d:91:59:4b:5e:55:58:04:45:c8:c4:76:ca:2b:
         2f:ef:f6:8d:13:3e:06:d6:08:e1:42:80:66:56:9f:c2:a6:8c:
         42:e4:d7:e6:1b:52:27:bd:b4:b0:04:a0:8b:49:ba:a9:ed:5e:
         47:95:0e:a4:5d:77:0f:67:1f:35:60:b6:70:42:7b:f2:7f:53:
         d0:c4:04:1b:3d:c5:f3:1f:1a:4e:0b:be:da:d5:35:15:ce:48:
         f4:a3:5d:14:a1:6e:a3:ec:56:54:46:5b:af:8a:f6:fb:63:07:
         27:13:0d:3f:ad:41:9c:ea:9d:84:e0:3d:05:61:9f:19:c3:97:
         d1:84:16:89:27:f4:f9:af:6e:30:86:be:e7:90:b3:62:5c:c3:
         5e:be:98:79:ce:65:87:b9:e5:ca:78:8a:7c:f0:f4:53:e9:a2:
         a8:c9:85:c1:d3:b2:c2:3e:70:af:c4:38:49:cf:9e:36:20:bb:
         55:bd:4e:8b:bf:7b:da:a9:27:29:92:79:84:ef:b4:9a:a9:35:
         4f:e4:44:ea:b6:77:9a:bf:b7:d7:fb:83:84:81:34:62:89:44:
         6f:9e:d7:cd:1f:c7:e0:47:28:0c:70:54:7f:5c:88:80:26:a8:
         e8:e4:b1:88:c9:2a:f1:8e:e2:8a:10:4c:36:eb:fa:0c:53:f6:
         4a:21:f7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:56:02 2025 by rpki-client