Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c0afab4d-abc9-3ba5-9a66-65840642f0dd.roa
File:                     c0afab4d-abc9-3ba5-9a66-65840642f0dd.roa (raw, json)
Hash identifier:          Pecj/pqnHpbEJcF9xp+7PQMIcx7aPdXqeTvoggtCvVM=
Subject key identifier:   58:61:26:BB:18:F8:08:FC:C4:28:33:AE:B3:02:A3:C7:48:5A:7E:A6
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584B4D12266DC2C4FF88707C7980
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c0afab4d-abc9-3ba5-9a66-65840642f0dd.roa
Signing time:             Wed 24 Sep 2025 13:01:31 +0000
ROA not before:           Wed 24 Sep 2025 13:01:31 +0000
ROA not after:            Tue 23 Dec 2025 14:01:31 +0000
asID:                     205886
IP address blocks:        198.1.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:12:26:6d:c2:c4:ff:88:70:7c:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep 24 13:01:31 2025 GMT
            Not After : Dec 23 14:01:31 2025 GMT
        Subject: CN=cfe961d4-82e8-472b-a6e2-9f8fd831d157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:27:a9:f8:67:45:19:32:20:d6:2f:8f:5d:6d:
                    97:a6:46:9f:41:7b:04:4b:12:4a:24:0b:6e:4a:ff:
                    35:f2:0a:2c:e1:d7:4c:88:d8:40:cc:1f:0c:22:69:
                    5c:01:a0:00:0f:b1:dd:e6:9f:60:b2:7d:85:54:42:
                    5e:51:71:aa:b9:e1:1d:81:c8:00:b4:96:5b:7b:90:
                    71:5e:a4:39:43:c2:e5:0c:04:6c:bc:d1:03:44:1f:
                    78:81:e5:4d:b4:fa:d7:ca:eb:89:48:8f:ba:cc:46:
                    ac:13:90:11:3b:6a:4d:52:92:c2:20:b3:fb:05:78:
                    63:48:ca:0d:2a:a8:df:15:77:c4:aa:33:b9:93:1f:
                    c5:c1:f0:00:15:5d:a3:07:32:fa:45:20:6a:67:9d:
                    64:4f:89:4f:dc:52:89:78:9b:b7:9e:17:ee:50:e8:
                    4b:e8:de:91:cd:50:f2:b2:38:96:52:33:a3:62:8a:
                    7b:48:f1:69:c9:fb:ef:60:7a:17:30:b0:65:54:c2:
                    82:7a:d3:16:b2:f5:4d:d3:0d:2e:8b:97:40:ff:ea:
                    bf:e5:db:f8:34:30:31:98:32:55:45:f2:63:08:a7:
                    2d:b2:97:cb:53:1c:b7:d6:c7:16:55:b0:3b:8f:69:
                    2d:9b:6b:6f:7f:6f:e1:76:18:02:2d:bf:bd:59:0f:
                    be:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:61:26:BB:18:F8:08:FC:C4:28:33:AE:B3:02:A3:C7:48:5A:7E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c0afab4d-abc9-3ba5-9a66-65840642f0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:98:c5:eb:48:4b:08:1a:43:e3:08:fb:bc:db:c5:b1:1d:ba:
         96:f4:88:cb:c7:01:cf:31:c0:94:a8:66:e5:a9:7c:09:8f:cb:
         e2:d2:96:3e:e0:4a:2c:13:ad:49:9d:1c:3b:e9:c0:ed:43:7a:
         e7:48:75:eb:a0:12:ab:a5:d3:b4:35:d3:f5:e4:39:b9:cb:8e:
         89:23:b4:01:90:6d:b6:84:51:2f:25:b6:21:08:6d:f5:61:fb:
         29:1b:81:90:a2:8a:df:8c:0a:42:9a:11:d6:7a:10:bd:91:bd:
         9d:31:93:9e:0a:51:44:17:96:27:82:c0:fb:53:f4:dd:94:42:
         09:78:28:d3:2b:92:6b:f1:2c:9b:f3:f0:11:c1:e5:78:22:35:
         5c:82:c1:dc:7a:46:ae:ed:74:d2:88:c0:95:c3:75:07:15:9c:
         0a:ae:cd:ef:80:29:35:67:b8:42:c6:3d:d4:cc:62:38:4a:d7:
         b2:6c:4e:59:e2:dc:3d:5b:a7:1a:80:d1:f7:72:57:04:58:ab:
         2d:15:48:8f:50:04:2c:e1:41:35:f3:92:dd:48:03:90:75:74:
         31:e1:01:88:32:54:11:84:bf:cd:dd:d5:ca:fe:1a:b6:78:2a:
         da:63:ca:79:6d:c5:d2:f4:7b:c5:b7:9f:cf:d8:0a:6f:d1:13:
         ca:f8:08:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:37 2025 by rpki-client