Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef0050c0-8aa7-36b4-bac5-551957984623.roa
File:                     ef0050c0-8aa7-36b4-bac5-551957984623.roa (raw, json)
Hash identifier:          vENlL73Tyz7fp7z6sUNnU83IVOqJ26G3lAmH2ervQIs=
Subject key identifier:   17:19:E3:DE:2C:20:C1:9E:04:0D:A3:1F:23:D6:C8:80:80:BE:29:9F
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584AF95137013B72EB9DC8EB7F80
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef0050c0-8aa7-36b4-bac5-551957984623.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     49981
IP address blocks:        198.1.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:37:01:3b:72:eb:9d:c8:eb:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=537bff97-7035-4360-b101-1ee3dae3f2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:43:2a:86:ec:de:eb:56:ea:c1:77:50:48:93:
                    1d:89:3d:c9:0c:17:49:27:b7:56:e9:ea:2d:a1:cd:
                    d0:8b:d2:2c:35:74:e3:6d:65:c1:80:b9:ee:19:67:
                    a0:06:26:c0:03:62:89:bd:23:0c:b8:db:c9:dd:b4:
                    11:30:43:91:92:4b:cd:26:a4:c6:86:ee:a6:e8:9a:
                    78:54:89:16:25:b7:92:5f:8f:c1:bb:6e:91:96:56:
                    fc:e8:66:bf:af:a8:ae:2d:59:12:c2:d5:b8:4a:c6:
                    ae:2d:e2:0a:bd:09:96:67:dc:c4:37:30:68:c2:79:
                    4d:30:1c:da:53:52:af:22:e5:3f:19:24:7d:70:10:
                    f3:9f:0c:17:e9:a0:93:4b:06:76:4e:82:18:13:7c:
                    aa:bc:02:79:32:0f:e7:a1:0b:ee:21:2c:0e:fe:a7:
                    5d:f0:9c:dc:8b:7b:d4:5c:b3:99:e7:33:11:59:da:
                    f6:47:27:7a:2c:ce:a9:94:d9:a2:32:2c:71:c4:4f:
                    17:15:11:04:4b:65:b0:6a:78:10:ca:a9:b9:aa:b7:
                    94:ad:ab:92:a7:18:98:86:f9:42:d0:58:e7:37:ed:
                    62:b7:f7:49:04:dc:e5:67:cb:78:25:bd:b2:fe:e6:
                    1c:45:c1:e8:cf:7a:7e:00:14:c6:e6:1f:93:6b:26:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:19:E3:DE:2C:20:C1:9E:04:0D:A3:1F:23:D6:C8:80:80:BE:29:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef0050c0-8aa7-36b4-bac5-551957984623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c9:c3:ef:cb:0b:96:5e:cd:5b:12:9c:d9:3b:3d:65:ee:e1:
         44:c5:eb:b5:f7:42:e3:dc:02:5e:1e:e7:12:c8:98:98:ec:d7:
         61:db:6f:23:96:fe:02:5a:09:f0:20:8e:08:d2:9f:36:bb:e1:
         12:d1:ff:a1:09:f6:1c:85:65:d7:79:f6:56:97:5b:12:a3:fd:
         01:02:35:03:c3:ac:06:52:37:39:42:50:85:a0:42:94:84:e9:
         ad:a6:82:3f:5a:ff:ef:58:81:41:8c:64:29:6c:6f:39:c5:b4:
         31:4f:2d:d9:ce:5a:a9:dc:54:4a:ed:da:49:a0:91:a6:19:35:
         e4:18:05:10:5a:c0:f6:a3:1d:2d:60:3e:12:54:2e:78:a0:06:
         08:fd:36:d0:8c:62:40:74:da:dd:f4:e4:8b:89:c3:cc:64:95:
         f6:47:75:f3:9b:13:a0:ab:ac:48:fb:db:60:7a:36:bc:18:87:
         02:0a:ec:c5:ae:5c:1b:ef:c2:60:92:35:e6:f4:99:9c:a0:28:
         d8:fd:2c:8a:74:d0:61:ed:6c:11:aa:ac:f5:b9:86:b5:bf:de:
         21:67:43:17:82:8d:76:21:38:20:94:04:bd:6d:20:d5:84:ad:
         c2:2b:ce:e3:f0:c9:1f:0f:80:e0:bc:21:3e:34:fa:b3:9b:cf:
         d1:2e:6a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 09:52:06 2025 by rpki-client