Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/70f15ca9-5638-3eb1-85aa-8971a0edbd54.roa
File:                     70f15ca9-5638-3eb1-85aa-8971a0edbd54.roa (raw, json)
Hash identifier:          dbsBkMLPWUvGNt7nweFYpaebWR5F624ZYsi94T48wUI=
Subject key identifier:   C2:4F:EE:29:53:F0:0F:4C:8B:28:0D:99:EE:CB:EC:71:A8:76:83:90
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584AF3BBDD2EBC3FF5B2CD195C00
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/70f15ca9-5638-3eb1-85aa-8971a0edbd54.roa
Signing time:             Sat 23 Aug 2025 13:00:41 +0000
ROA not before:           Sat 23 Aug 2025 13:00:41 +0000
ROA not after:            Fri 21 Nov 2025 14:00:41 +0000
asID:                     7029
IP address blocks:        198.1.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f3:bb:dd:2e:bc:3f:f5:b2:cd:19:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Aug 23 13:00:41 2025 GMT
            Not After : Nov 21 14:00:41 2025 GMT
        Subject: CN=68c3a753-2a80-404d-a457-a522a28f3781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:39:a2:3f:5b:ed:48:e7:96:5c:fb:b2:56:64:
                    c1:a9:09:a2:c2:12:08:74:66:c8:67:72:25:ad:7c:
                    be:cd:69:23:ed:e0:dd:1c:85:4c:d1:51:7a:e8:d7:
                    9b:d3:43:07:2e:0b:47:ed:7d:f2:4e:ec:86:5f:d5:
                    78:c7:07:63:c6:0e:79:49:4d:22:ff:88:b1:83:12:
                    c8:9d:98:01:4d:a7:c3:82:05:b3:6b:36:c2:14:a4:
                    6c:56:66:0c:5e:5f:80:f9:dd:2c:22:3a:16:c6:04:
                    0d:43:99:c2:1a:2c:3a:1f:2e:5e:80:1b:3f:a7:e2:
                    70:e2:c6:d1:95:3a:10:55:8b:b6:34:5b:f2:22:61:
                    28:d1:53:83:ad:5f:3e:6a:b9:68:5e:17:99:11:4c:
                    0a:12:b8:c8:9f:3e:58:97:2a:83:a7:1b:4e:b4:1a:
                    2a:0e:77:9e:ba:03:43:b4:48:2f:6b:65:8a:85:01:
                    a6:35:f5:9e:10:fa:8c:d7:78:78:2f:9e:2a:27:c0:
                    5a:35:02:c7:72:fe:3e:21:46:ec:c9:3a:3f:85:24:
                    7c:6a:2f:f8:e1:0f:89:cc:91:86:a2:cc:5d:6b:f4:
                    25:7b:1d:ec:d8:b9:57:56:52:1d:7f:86:fd:06:a5:
                    3f:26:cc:77:0e:f2:1e:90:e4:01:86:c9:5d:13:03:
                    dc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4F:EE:29:53:F0:0F:4C:8B:28:0D:99:EE:CB:EC:71:A8:76:83:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/70f15ca9-5638-3eb1-85aa-8971a0edbd54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a2:6f:ea:fe:0c:19:07:65:c9:9b:93:63:94:ec:5e:34:97:
         3c:eb:3b:ba:06:ad:8a:12:ed:6e:bb:38:3d:e8:fb:ab:97:77:
         fb:d8:b8:2b:9a:ff:17:eb:13:d1:b4:c3:e1:5e:33:2c:04:14:
         c3:f0:16:e2:1b:ed:1c:31:01:98:7c:40:12:53:a4:7b:b1:c0:
         99:7b:b4:cf:b2:7f:f4:8b:a5:dd:f2:fc:b9:59:f0:be:bd:77:
         e1:c7:89:b4:78:b1:b1:0e:80:8b:22:bd:d6:12:28:f5:97:78:
         d3:b9:cf:da:61:62:da:24:94:5d:4d:f5:03:c7:b9:1b:89:92:
         88:5d:31:7f:b8:21:02:57:09:a0:1b:e6:7b:e2:a2:d4:cf:c5:
         2d:a7:5f:85:1d:e5:4d:32:39:58:85:58:cf:41:c0:78:a7:6f:
         fb:d4:a4:99:58:2c:5b:83:f1:f1:36:dd:09:f6:8b:aa:86:7b:
         15:b0:50:f2:34:60:40:b2:69:f0:7d:4a:65:7f:27:ca:05:02:
         8a:ab:dd:e4:ba:5f:60:82:c0:a4:02:60:b7:53:da:49:1f:80:
         19:d3:e2:f0:8f:52:2b:3f:9d:61:5c:57:11:57:fa:22:ab:82:
         99:7b:71:4e:e8:02:b9:a9:d0:21:95:37:a2:86:50:b8:35:7b:
         11:bc:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:20:10 2025 by rpki-client