Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/044b75b6-4557-3e0e-9380-a6af7ec4b005.roa
File:                     044b75b6-4557-3e0e-9380-a6af7ec4b005.roa (raw, json)
Hash identifier:          8pF6ntXMRqi0L9L8Dfdm2JMSaiBZ+HIrWZPTCPnRZx0=
Subject key identifier:   6E:AF:86:8A:20:D2:F8:B9:0D:36:26:CE:12:FA:15:65:14:09:5F:F3
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584E7D2F7E295BC9AD63F72C3D00
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/044b75b6-4557-3e0e-9380-a6af7ec4b005.roa
Signing time:             Mon 13 Jul 2026 21:00:12 +0000
ROA not before:           Mon 13 Jul 2026 21:00:12 +0000
ROA not after:            Sun 11 Oct 2026 21:00:12 +0000
asID:                     834
IP address blocks:        198.1.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:2f:7e:29:5b:c9:ad:63:f7:2c:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jul 13 21:00:12 2026 GMT
            Not After : Oct 11 21:00:12 2026 GMT
        Subject: CN=e765d50a-6017-4f24-b1bb-663b7a2cc9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:51:b0:16:ce:34:bb:f4:65:f9:81:0c:66:
                    bf:d4:22:ef:36:76:dd:50:23:9c:14:42:15:13:0a:
                    df:83:bb:96:c1:d3:17:8d:14:59:6f:e4:77:e3:a0:
                    1c:02:1c:aa:cd:79:eb:be:0c:dc:8a:58:7f:7f:4d:
                    2f:b1:0e:bd:c5:5f:f3:3b:aa:b6:43:84:17:90:f7:
                    dc:8d:13:33:2e:fc:6a:d6:c1:f0:fb:ad:94:9e:ec:
                    29:6b:0d:70:9f:e6:90:2a:8c:23:f2:97:a8:d4:39:
                    1f:8d:c8:f5:a8:77:9f:43:da:91:b5:b1:9f:67:83:
                    fe:49:8c:ef:06:70:e5:d4:29:f5:f1:77:ad:2b:ab:
                    b2:71:cf:30:a6:60:f9:61:ef:3a:09:9c:f0:03:16:
                    a0:ec:d5:79:a4:ae:91:bb:89:66:b1:67:60:2c:7b:
                    4a:0b:5d:72:9e:d4:66:aa:96:d8:02:04:75:5e:5f:
                    42:c9:97:56:f1:ff:1b:10:b9:39:65:e5:bb:43:9b:
                    a4:f3:fb:97:b4:9d:fc:88:db:a3:d2:50:11:b2:0c:
                    28:6b:e8:43:c7:99:f5:fa:ba:3d:0a:3a:49:44:b5:
                    e4:08:a3:91:74:42:ec:04:5b:39:f8:84:87:0f:c4:
                    85:5a:47:60:2d:c7:5f:1a:86:5f:77:64:86:3b:84:
                    53:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AF:86:8A:20:D2:F8:B9:0D:36:26:CE:12:FA:15:65:14:09:5F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/044b75b6-4557-3e0e-9380-a6af7ec4b005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:56:13:b5:08:5e:73:ca:b8:f8:50:a3:36:5a:9e:f7:78:bc:
         fa:82:d1:d9:45:eb:c3:be:32:1f:fc:4e:8d:33:69:b1:ea:d5:
         61:46:47:28:2f:5b:91:30:61:a5:18:a8:21:da:85:fc:23:7f:
         93:63:bb:8e:e8:ed:f0:90:c7:b6:77:4f:17:e6:cb:5d:c4:71:
         f5:53:e8:0a:ea:23:ae:f1:eb:b4:c8:5f:e4:f2:5a:77:27:76:
         a1:c0:7e:b7:b4:03:cd:86:36:9c:20:a6:3b:4c:5c:fd:32:eb:
         19:4b:36:b8:3f:69:58:a4:95:39:3f:bc:9a:d0:44:aa:d1:f5:
         f8:eb:39:b8:7a:bb:05:64:93:a4:b2:7c:43:db:8d:15:8b:69:
         9b:5c:e3:73:6d:36:a6:65:c8:25:6a:ea:a4:8d:42:70:a2:0f:
         dd:3d:26:df:fa:80:d1:2a:97:57:c2:a5:75:53:68:7f:f3:13:
         5b:84:db:2c:31:03:9d:76:13:83:07:0e:51:d8:5e:68:d0:8f:
         43:96:b8:60:c3:ea:45:4d:f5:18:cd:0f:7c:68:71:51:bb:72:
         0a:3d:ab:00:56:60:9a:1e:78:ff:ad:84:df:ca:bb:09:b2:cc:
         12:b2:fa:1e:4f:dd:31:95:b0:dd:3a:61:77:32:b0:49:c5:55:
         ab:ef:35:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE59L34pW8mtY/csPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI2MDcxMzIxMDAxMloXDTI2MTAxMTIxMDAxMlowLzEtMCsGA1UEAxMk
ZTc2NWQ1MGEtNjAxNy00ZjI0LWIxYmItNjYzYjdhMmNjOWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsclRsBbONLv0ZfmBDGa/1CLvNnbdUCOcFEIV
Ewrfg7uWwdMXjRRZb+R346AcAhyqzXnrvgzcilh/f00vsQ69xV/zO6q2Q4QXkPfc
jRMzLvxq1sHw+62Unuwpaw1wn+aQKowj8peo1Dkfjcj1qHefQ9qRtbGfZ4P+SYzv
BnDl1Cn18XetK6uycc8wpmD5Ye86CZzwAxag7NV5pK6Ru4lmsWdgLHtKC11yntRm
qpbYAgR1Xl9CyZdW8f8bELk5ZeW7Q5uk8/uXtJ38iNuj0lARsgwoa+hDx5n1+ro9
CjpJRLXkCKORdELsBFs5+ISHD8SFWkdgLcdfGoZfd2SGO4RT2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG6vhoog0vi5DTYmzhL6FWUUCV/zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMDQ0Yjc1YjYtNDU1Ny0z
ZTBlLTkzODAtYTZhZjdlYzRiMDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNWE7UIXnPKuPhQozZanvd4vPqC0dlF68O+Mh/8To0zabHq1WFGRygv
W5EwYaUYqCHahfwjf5Nju47o7fCQx7Z3Txfmy13EcfVT6ArqI67x67TIX+TyWncn
dqHAfre0A82GNpwgpjtMXP0y6xlLNrg/aViklTk/vJrQRKrR9fjrObh6uwVkk6Sy
fEPbjRWLaZtc43NtNqZlyCVq6qSNQnCiD909Jt/6gNEql1fCpXVTaH/zE1uE2ywx
A512E4MHDlHYXmjQj0OWuGDD6kVN9RjND3xocVG7cgo9qwBWYJoeeP+thN/Kuwmy
zBKy+h5P3TGVsN06YXcysEnFVavvNZ0=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:03 2026 by rpki-client