Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c9e87812-20e4-397a-abc7-4419fbaaa308.roa
File:                     c9e87812-20e4-397a-abc7-4419fbaaa308.roa (raw, json)
Hash identifier:          1REUARE9PwW8nVxt2Izz97G3XdnjWZht7Jobojo49mA=
Subject key identifier:   BE:93:F0:B6:4A:95:DB:84:40:8B:4A:4F:B2:E3:CE:00:19:EC:66:20
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584B47769DA103747B4873D8FE80
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c9e87812-20e4-397a-abc7-4419fbaaa308.roa
Signing time:             Mon 22 Sep 2025 12:49:05 +0000
ROA not before:           Mon 22 Sep 2025 12:49:05 +0000
ROA not after:            Sun 21 Dec 2025 13:49:05 +0000
asID:                     25198
IP address blocks:        198.1.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:76:9d:a1:03:74:7b:48:73:d8:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep 22 12:49:05 2025 GMT
            Not After : Dec 21 13:49:05 2025 GMT
        Subject: CN=97c0ece1-de7d-42dd-a969-a3536b9d9c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d9:26:78:c3:df:b1:07:ce:40:9d:fb:e8:a0:
                    21:8d:3f:6b:76:a5:be:57:80:21:d2:20:39:cf:b1:
                    e0:34:b8:2f:18:27:99:ed:6a:32:e7:ec:af:e9:12:
                    fe:77:86:68:4d:29:08:2c:d7:30:10:9c:39:33:f0:
                    26:d5:cf:29:fc:73:09:18:a5:5b:08:fe:8e:d1:54:
                    ab:bb:20:e0:d7:e9:ca:dc:6b:87:14:be:a0:62:11:
                    66:68:1c:6d:c6:c4:e9:81:d3:91:4d:b1:12:a3:13:
                    a3:99:85:ad:0f:7f:a5:58:1a:c2:c0:e2:24:c6:c9:
                    58:4c:6d:f3:d4:4e:da:bd:24:0f:74:35:c7:5b:bd:
                    12:0a:d8:c5:8a:2a:82:49:7c:d8:b2:7d:fb:a8:a6:
                    95:cc:d7:c8:a1:72:5e:09:60:54:56:c0:91:77:ba:
                    c0:3c:64:ad:f8:70:a7:59:e8:79:e0:53:60:47:72:
                    34:df:b3:22:4f:5d:bf:36:52:c7:83:cc:ce:0a:cd:
                    a3:46:a4:56:90:60:d9:5f:a6:64:0d:2d:20:fc:81:
                    73:ef:9a:60:61:31:be:57:be:a8:7a:ff:22:ed:da:
                    86:7e:2a:a0:e8:bc:8b:83:81:76:c5:6d:12:8e:61:
                    5d:02:63:8b:13:e2:02:49:ff:96:78:a7:3c:3b:9e:
                    2b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:93:F0:B6:4A:95:DB:84:40:8B:4A:4F:B2:E3:CE:00:19:EC:66:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c9e87812-20e4-397a-abc7-4419fbaaa308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:63:d5:55:de:ee:94:72:95:55:02:78:05:01:d6:b9:a2:70:
         53:eb:2e:10:fd:65:0a:81:5b:76:5d:32:9b:9b:ad:a0:bd:f0:
         1b:ea:50:b3:95:90:84:c5:b2:de:c0:b8:93:5c:6e:94:4c:d8:
         4e:5a:f9:4e:b1:66:ab:33:6f:6f:ae:54:a8:36:e2:72:92:94:
         f9:8e:7d:be:91:d9:48:67:42:5c:31:29:19:be:82:9b:dc:ba:
         f5:c2:02:31:29:ef:f9:9f:94:b7:73:0a:ab:7b:36:ee:fa:d1:
         ee:ef:83:63:55:92:47:19:49:c3:f1:96:63:4b:15:71:01:8a:
         08:79:4b:ec:4a:20:b2:4b:ed:52:ac:9c:13:e5:30:d4:e4:92:
         34:a2:35:4e:9f:d8:77:6f:05:cf:20:7d:0b:75:26:70:b5:e8:
         0c:bb:6f:22:c0:0c:8c:ec:fb:49:f5:01:8c:17:34:ba:c3:d2:
         19:1d:83:43:ff:8e:81:78:56:fc:e6:ff:c9:63:ed:b8:56:31:
         23:43:05:a2:78:4f:95:e0:c1:cc:e7:36:a9:4b:96:66:b6:8e:
         37:bc:f0:05:42:27:aa:ac:af:75:f5:0f:2b:0a:2f:6d:b5:27:
         11:c6:b8:ed:41:29:14:35:26:be:18:56:2c:dc:97:a2:95:26:
         57:51:ca:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:33 2025 by rpki-client