Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/cbe4793e-5f75-3f44-82e5-67a9993c321e.roa
File:                     cbe4793e-5f75-3f44-82e5-67a9993c321e.roa (raw, json)
Hash identifier:          lqYug5MWhuSKFVt0x7B+r0RsOP9ZriE/Tds7nRFmktE=
Subject key identifier:   88:0A:A7:48:8B:FB:02:8D:54:32:DA:71:2F:9E:5E:86:2C:E1:7E:21
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584A62FD3BCECB77D287DD234060
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/cbe4793e-5f75-3f44-82e5-67a9993c321e.roa
Signing time:             Wed 02 Jul 2025 16:40:13 +0000
ROA not before:           Wed 02 Jul 2025 16:40:13 +0000
ROA not after:            Tue 30 Sep 2025 16:40:13 +0000
asID:                     29802
IP address blocks:        198.1.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:fd:3b:ce:cb:77:d2:87:dd:23:40:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jul  2 16:40:13 2025 GMT
            Not After : Sep 30 16:40:13 2025 GMT
        Subject: CN=775f5656-d5f0-4c72-a087-7bfb9766017d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:86:df:75:00:ce:30:ac:71:56:e8:49:f3:a8:
                    c5:75:a0:1a:0e:a4:16:4e:b2:87:42:ed:15:16:e6:
                    f2:30:67:90:7c:e1:97:02:2f:a8:2a:79:15:a6:e6:
                    b9:01:bf:9d:13:bd:79:12:da:6a:14:26:81:6d:fc:
                    2e:c2:4d:b5:ff:11:74:e0:68:60:7f:30:32:79:b9:
                    77:02:b0:13:8e:02:01:ec:3b:0b:70:59:dd:b5:6a:
                    34:f5:ad:25:4d:57:14:cf:51:be:ee:0a:11:43:cc:
                    da:4d:33:37:6f:70:66:aa:2c:ed:56:c6:bd:29:d9:
                    ac:cc:3f:29:b1:f2:71:94:ae:7e:52:ce:bb:38:39:
                    61:74:1d:6e:f6:17:71:06:2d:3d:7e:a2:3a:bb:2e:
                    4c:23:cf:a9:7f:dd:c5:56:a2:71:41:2d:16:83:d1:
                    3e:5f:af:cb:10:cb:8d:09:c8:15:f1:a1:06:8d:67:
                    89:65:53:8f:02:03:e3:c1:a4:b8:5b:29:60:13:2e:
                    39:c3:0a:8f:a4:71:78:a3:0c:65:d9:3c:88:d7:f1:
                    04:19:a6:bd:2e:5a:86:61:c7:cf:93:de:54:46:1c:
                    34:24:34:75:1c:be:88:cd:b3:48:73:88:cf:54:ea:
                    4b:bb:69:08:19:66:d8:84:e0:5a:f8:57:4e:9c:13:
                    dd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0A:A7:48:8B:FB:02:8D:54:32:DA:71:2F:9E:5E:86:2C:E1:7E:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/cbe4793e-5f75-3f44-82e5-67a9993c321e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b6:93:7c:7b:66:94:09:5c:86:44:09:dc:21:70:b4:4b:3a:
         58:23:ed:9d:ac:91:fc:2b:00:67:0c:8a:ae:ae:ab:fb:bf:e1:
         b2:0c:0e:44:16:c0:0d:02:8c:a5:1f:cc:7c:11:62:dd:93:64:
         b3:43:46:89:e7:5a:57:7a:fc:86:65:61:3e:8b:9e:e3:31:15:
         d7:ea:7d:54:48:52:ab:d5:02:d0:fa:2f:0f:8e:9a:22:17:4c:
         a8:14:5d:b6:b8:0b:12:c3:a3:e7:a4:64:04:17:4c:da:31:6d:
         68:d8:cd:9a:18:52:aa:dc:2d:86:b7:0f:b2:56:26:4c:1e:2b:
         36:06:5b:58:b8:8a:5a:1b:84:a7:74:28:70:16:2e:37:87:e1:
         99:3a:3e:fe:4a:80:b6:d4:5d:b0:bb:cb:98:51:12:21:ca:ce:
         cb:f3:3f:80:6a:24:ea:77:8d:5a:1c:ec:ee:bf:65:22:a8:79:
         41:4a:2b:b4:d1:e0:87:84:2b:f1:00:e7:85:a7:db:7e:da:1d:
         e3:c5:6f:d2:7d:ae:57:93:13:08:29:0d:91:5a:f8:7c:ec:63:
         98:fe:3c:35:c4:63:eb:2e:1d:e9:ab:c6:89:30:9e:49:ec:9c:
         d3:97:72:4f:cb:71:e4:a2:d9:45:bc:5d:4b:61:20:1f:53:ad:
         b6:2b:eb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 03:25:53 2025 by rpki-client