Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/464cbfe4-17c8-34a2-b561-d075de6b0da1.roa
File:                     464cbfe4-17c8-34a2-b561-d075de6b0da1.roa (raw, json)
Hash identifier:          BM0sEogMoXJ/IpighwHAZyk2mBVhgC0O5vkebVsETpY=
Subject key identifier:   FF:CC:5E:FD:B4:BC:1F:93:C6:FA:98:02:05:32:3B:A6:7D:1F:CF:70
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584B8F1160FF98FD1AA981DC2B00
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/464cbfe4-17c8-34a2-b561-d075de6b0da1.roa
Signing time:             Sat 18 Oct 2025 04:23:19 +0000
ROA not before:           Sat 18 Oct 2025 04:23:19 +0000
ROA not after:            Fri 16 Jan 2026 05:23:19 +0000
asID:                     834
IP address blocks:        198.1.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8f:11:60:ff:98:fd:1a:a9:81:dc:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Oct 18 04:23:19 2025 GMT
            Not After : Jan 16 05:23:19 2026 GMT
        Subject: CN=d5dd5ad7-32bf-437b-8032-72e15ff143d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:8f:ce:53:09:6e:8b:b6:53:0c:6b:d4:33:
                    80:55:7e:29:e0:21:b9:8c:cb:0f:c4:f0:77:0a:3b:
                    dd:6f:5b:20:92:c6:c8:7f:03:76:2f:e0:b3:b6:84:
                    ba:96:1c:f0:0b:0a:57:51:57:65:1f:ce:ad:2d:02:
                    1d:f3:5d:ed:87:3a:92:0d:e5:f0:f2:bc:5d:e0:89:
                    b9:cc:92:8f:bf:5e:58:97:a1:bc:6c:5f:31:da:17:
                    82:b7:f5:7c:e9:5c:1e:cb:09:7b:af:8f:f9:4f:34:
                    01:37:69:5b:30:0e:4a:96:6e:38:a4:6f:69:f9:71:
                    c8:ef:a3:b6:42:a2:67:bc:d6:2e:bc:41:01:ff:45:
                    9c:ae:e5:40:3c:22:2a:ff:b8:3c:67:e3:0e:6c:9d:
                    d3:d7:bd:e4:82:96:f0:c0:35:4e:a7:92:0a:86:d2:
                    34:0e:fe:65:80:f9:b0:9d:57:55:7a:2e:ae:b5:48:
                    e6:1a:40:7a:bf:8d:7b:77:38:02:14:28:a3:6a:4e:
                    22:68:67:2e:2a:45:5d:34:5a:25:6f:17:64:25:cc:
                    07:1d:f9:3e:3c:bb:8d:61:df:54:33:7d:eb:a3:4f:
                    a5:56:00:ec:82:ca:3c:77:e3:b6:39:c1:68:d3:04:
                    ce:4b:1f:e8:05:59:1a:c4:ba:fa:4e:5f:2e:1d:b1:
                    80:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CC:5E:FD:B4:BC:1F:93:C6:FA:98:02:05:32:3B:A6:7D:1F:CF:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/464cbfe4-17c8-34a2-b561-d075de6b0da1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:36:ed:11:08:b6:c3:e9:30:3a:a8:08:0b:2b:91:fe:50:82:
         58:b6:8c:69:02:66:22:be:9b:bd:a7:3f:8d:f0:47:42:e1:75:
         94:1b:7e:81:8b:19:63:84:1d:56:06:7a:a7:1c:09:4f:84:85:
         6b:b8:35:9e:12:4c:01:8d:a1:84:e1:de:ff:e1:06:74:60:30:
         45:cf:41:db:57:ee:21:bd:0d:a4:90:dc:bb:94:21:ea:5b:a9:
         bf:9f:96:ae:b9:6d:d9:bb:9b:90:21:2c:3e:c0:d0:71:fa:37:
         50:d6:34:9e:19:8b:22:22:84:0a:b4:d7:00:82:b0:df:23:b3:
         c2:64:93:e3:95:2d:96:54:b8:5e:17:b0:b4:d5:f8:00:71:5f:
         73:89:b7:c2:1a:4d:ba:f8:78:5e:e7:4f:ac:a5:12:6a:bc:fe:
         2a:d9:f1:c7:c7:35:a3:74:b2:0a:db:fd:e2:20:3d:ce:21:58:
         e3:a4:68:54:c8:8b:08:d0:c3:49:c8:1a:13:4e:0a:79:8f:83:
         9b:2a:a8:b9:40:7d:85:d3:76:5e:1b:e3:6c:9a:8d:55:f0:20:
         ff:28:5c:da:97:2b:48:51:3c:20:bd:a2:54:25:49:08:e4:9d:
         4d:66:60:ba:5d:1d:15:01:e1:0c:3e:6d:47:1b:b5:19:d5:bc:
         d9:26:46:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuPEWD/mP0aqYHcKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI1MTAxODA0MjMxOVoXDTI2MDExNjA1MjMxOVowLzEtMCsGA1UEAxMk
ZDVkZDVhZDctMzJiZi00MzdiLTgwMzItNzJlMTVmZjE0M2QyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVuPzlMJbou2Uwxr1DOAVX4p4CG5jMsPxPB3
Cjvdb1sgksbIfwN2L+CztoS6lhzwCwpXUVdlH86tLQId813thzqSDeXw8rxd4Im5
zJKPv15Yl6G8bF8x2heCt/V86Vweywl7r4/5TzQBN2lbMA5Klm44pG9p+XHI76O2
QqJnvNYuvEEB/0WcruVAPCIq/7g8Z+MObJ3T173kgpbwwDVOp5IKhtI0Dv5lgPmw
nVdVei6utUjmGkB6v417dzgCFCijak4iaGcuKkVdNFolbxdkJcwHHfk+PLuNYd9U
M33ro0+lVgDsgso8d+O2OcFo0wTOSx/oBVkaxLr6Tl8uHbGA5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/MXv20vB+TxvqYAgUyO6Z9H89wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNDY0Y2JmZTQtMTdjOC0z
NGEyLWI1NjEtZDA3NWRlNmIwZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABY27REItsPpMDqoCAsrkf5Qgli2jGkCZiK+m72nP43wR0LhdZQbfoGL
GWOEHVYGeqccCU+EhWu4NZ4STAGNoYTh3v/hBnRgMEXPQdtX7iG9DaSQ3LuUIepb
qb+flq65bdm7m5AhLD7A0HH6N1DWNJ4ZiyIihAq01wCCsN8js8Jkk+OVLZZUuF4X
sLTV+ABxX3OJt8IaTbr4eF7nT6ylEmq8/irZ8cfHNaN0sgrb/eIgPc4hWOOkaFTI
iwjQw0nIGhNOCnmPg5sqqLlAfYXTdl4b42yajVXwIP8oXNqXK0hRPCC9olQlSQjk
nU1mYLpdHRUB4Qw+bUcbtRnVvNkmRq4=
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:47 2025 by rpki-client