Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0465f668-086c-33ba-9bf9-e3dfdf71956b.roa
File:                     0465f668-086c-33ba-9bf9-e3dfdf71956b.roa (raw, json)
Hash identifier:          SXbzdnQRCuNIysXgCbW1Hbcnd3I2aKIOjrAiOnTAQuE=
Subject key identifier:   EC:C8:AF:4A:7F:B5:BB:12:23:A4:4C:65:CA:6F:C6:A5:3E:66:44:2A
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584B2A2C5E1C719DD5860915C200
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0465f668-086c-33ba-9bf9-e3dfdf71956b.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     20001
IP address blocks:        198.1.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:5e:1c:71:9d:d5:86:09:15:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=7383d168-d6cb-4793-9491-a1e48da8642d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:92:c6:39:ff:80:2e:d0:62:a9:b2:f0:ee:af:
                    3a:aa:df:82:cf:eb:50:86:b4:88:f6:78:ed:e3:09:
                    3e:68:ff:3a:39:f4:00:5a:a9:86:80:9b:3f:ff:aa:
                    9b:fb:85:7c:e2:46:20:a2:07:11:71:a3:40:53:e0:
                    bd:f9:f8:8f:ba:66:0f:2d:83:c6:a6:3d:26:3c:01:
                    d0:1b:64:05:a6:9e:71:73:27:74:5a:c5:43:14:e6:
                    3d:22:58:6d:96:0f:d2:b9:15:b7:26:af:b2:8f:ad:
                    e7:88:32:de:aa:ec:d9:a8:23:1e:b0:d8:bf:90:d3:
                    3f:c8:42:81:e7:8f:1d:56:15:4c:e1:41:07:88:a2:
                    a6:86:48:4f:43:94:c3:a1:12:0e:18:d1:ed:20:5d:
                    0d:ad:69:0f:a8:06:4a:72:fc:7b:34:cf:b0:43:b0:
                    4e:a5:92:78:a8:d8:99:60:fa:5a:68:70:4a:47:3c:
                    db:10:47:b4:cc:5d:85:36:c6:e8:b0:df:ee:fa:b0:
                    f7:09:56:a1:42:1f:1f:ff:b2:02:bb:75:f6:63:12:
                    02:80:ed:4c:1b:b7:15:57:9d:ad:b4:1a:ef:53:65:
                    ec:2a:7c:db:8e:4b:64:33:20:46:47:40:ec:b4:be:
                    04:05:03:49:71:68:c7:53:ec:94:5f:55:40:08:a9:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C8:AF:4A:7F:B5:BB:12:23:A4:4C:65:CA:6F:C6:A5:3E:66:44:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0465f668-086c-33ba-9bf9-e3dfdf71956b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:3d:22:da:ac:d7:a0:3b:90:86:cf:a8:fe:4c:bd:40:f1:a0:
         81:aa:0c:a8:7f:ec:79:58:78:e8:71:52:b4:80:f6:f6:76:c7:
         e0:1a:96:41:90:81:70:d6:26:83:60:ab:0c:1c:ce:12:34:44:
         d6:56:b2:a1:dc:65:ed:ac:90:4e:26:b6:da:bb:c3:cc:66:86:
         59:ea:be:c9:ca:da:77:e6:fc:25:14:71:93:d7:af:52:41:bf:
         d0:71:9d:80:d3:8e:5b:b6:be:82:9c:79:59:a9:26:ab:55:f9:
         c3:e5:17:ef:d2:3f:55:c8:67:7c:64:0a:3c:1b:70:35:e7:88:
         e6:0d:be:8b:50:c4:9a:aa:0c:b5:b4:4c:62:af:5d:b7:c6:c0:
         4f:cd:b4:bb:e1:65:51:28:84:26:db:93:e4:1a:e7:64:2a:c4:
         67:17:a5:2a:2c:b3:e5:fb:e5:57:d5:dd:18:ef:4e:40:0e:d1:
         91:1f:11:a0:07:58:49:97:88:86:3f:46:23:fe:2f:dc:0c:f3:
         0a:99:a9:cc:96:41:eb:e4:ca:eb:80:b4:0b:dd:61:b7:b8:58:
         f5:d1:48:93:ab:69:0d:e1:1f:8c:23:67:7a:38:42:7c:f7:15:
         fe:35:21:03:3c:44:9f:12:e8:df:99:82:e5:2d:db:3e:bb:a3:
         1f:5f:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:29:17 2025 by rpki-client