Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bbe046b4-c0e1-3a5e-bbcd-9fb4cdc1fb34.roa
File:                     bbe046b4-c0e1-3a5e-bbcd-9fb4cdc1fb34.roa (raw, json)
Hash identifier:          gxl/yV6quJRB6Ol2emkdqnh+qSrM3DNMI1WgJYAL6GE=
Subject key identifier:   BD:D8:D4:85:39:F8:BA:37:61:F8:6E:96:19:E3:B0:CB:C6:B1:98:CA
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584EFAED6DDF56CD92323366C8C0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bbe046b4-c0e1-3a5e-bbcd-9fb4cdc1fb34.roa
Signing time:             Thu 27 Aug 2026 21:58:59 +0000
ROA not before:           Thu 27 Aug 2026 21:58:59 +0000
ROA not after:            Wed 25 Nov 2026 22:58:59 +0000
asID:                     30236
IP address blocks:        198.1.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fa:ed:6d:df:56:cd:92:32:33:66:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Aug 27 21:58:59 2026 GMT
            Not After : Nov 25 22:58:59 2026 GMT
        Subject: CN=c557742d-951b-4702-8a72-74efafb3660a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:f5:8e:eb:5e:e0:2e:c7:7e:91:1f:90:68:
                    a9:5f:65:f0:4d:2f:12:f7:d9:7d:ee:35:ac:87:0e:
                    3b:7e:9a:f9:ca:e8:cc:c0:bb:cc:30:8c:d4:25:6d:
                    22:f9:9e:91:54:6e:b6:8f:68:8b:0f:60:2d:ee:40:
                    e3:77:2f:e8:cc:f7:02:fe:72:e3:f8:a6:3b:0f:56:
                    de:98:f6:e7:6a:7a:1f:21:73:2d:a9:cc:c0:97:8e:
                    a5:4e:5b:bb:75:38:0c:80:bd:b2:55:d7:a4:a9:81:
                    43:e1:2d:b8:7c:28:cd:b7:c2:6c:12:a8:b3:2d:4a:
                    f4:b8:cd:9d:2f:2d:cf:1d:3c:01:39:e9:6a:6a:2c:
                    ca:4d:a8:23:6d:f6:92:83:16:93:77:2b:d4:f4:e6:
                    ef:3a:f1:06:2b:69:b2:3b:0d:37:bf:d7:a4:56:41:
                    e9:90:db:fe:c0:85:3d:9f:75:ee:da:b6:ab:79:5c:
                    41:d8:13:05:b2:09:c8:26:79:d7:c2:3a:f4:fc:d1:
                    17:73:8e:bc:a5:94:4d:e5:9f:87:65:ec:aa:12:a1:
                    5b:63:d8:6f:17:32:1e:e1:31:01:2a:63:ed:16:37:
                    40:a9:00:dc:f3:37:0a:3a:42:7a:02:f9:ea:85:b7:
                    55:1a:6d:f7:e6:48:fc:ed:09:33:61:68:1d:3c:8f:
                    73:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D8:D4:85:39:F8:BA:37:61:F8:6E:96:19:E3:B0:CB:C6:B1:98:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bbe046b4-c0e1-3a5e-bbcd-9fb4cdc1fb34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:4a:07:f4:8b:9c:dd:9b:83:52:3c:86:86:1b:12:b8:db:33:
         f3:ac:7a:8d:6e:62:39:38:f6:c3:49:e6:6c:25:6e:51:56:22:
         9e:73:e6:2d:0c:91:50:b6:82:20:f4:d0:1e:a1:f3:43:2f:8b:
         a3:74:b0:9f:32:73:d6:ba:6b:b4:96:f2:e2:27:95:f2:41:da:
         c3:ab:53:bb:a7:4c:d4:d9:5a:e9:b3:39:30:c4:61:5d:d1:1b:
         87:24:4b:39:6a:ad:66:8e:be:04:41:24:86:94:95:6c:22:8d:
         39:18:5c:15:30:62:48:96:f9:9c:17:4b:a0:95:14:5a:f0:7d:
         69:72:17:72:7f:b5:a7:82:c3:68:f0:d8:88:e7:56:0a:53:00:
         8d:ea:77:69:5f:24:d2:a1:d6:3b:36:65:75:36:af:07:ad:c8:
         fa:2f:d9:c6:83:58:75:f7:fe:01:04:bc:0d:7e:65:47:86:ed:
         53:ac:e8:28:42:4d:bc:a0:69:4f:cf:f1:3e:ba:14:e1:92:d6:
         15:8e:02:f0:3a:45:c2:1a:3f:2f:60:f9:e8:7d:8a:0d:d3:51:
         2b:15:93:aa:18:d1:55:15:31:6e:f9:84:d0:94:27:da:9c:66:
         6d:e3:08:26:c7:05:b4:cf:cd:4b:47:81:e5:eb:90:a6:74:34:
         6b:25:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:06 2026 by rpki-client