Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7d26f253-a5b0-31a0-9b78-bce01b725f01.roa
File:                     7d26f253-a5b0-31a0-9b78-bce01b725f01.roa (raw, json)
Hash identifier:          J7t+fafo9TP55EbuUhg4gVwqaqGE4mdSkGoDy7cY504=
Subject key identifier:   63:9B:BB:0E:54:EF:16:06:93:C8:D6:79:61:32:DF:CB:C8:CF:46:28
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584A3EFE58918883CD967598C180
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7d26f253-a5b0-31a0-9b78-bce01b725f01.roa
Signing time:             Thu 19 Jun 2025 19:13:21 +0000
ROA not before:           Thu 19 Jun 2025 19:13:21 +0000
ROA not after:            Wed 17 Sep 2025 19:13:21 +0000
asID:                     5650
IP address blocks:        198.1.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:fe:58:91:88:83:cd:96:75:98:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jun 19 19:13:21 2025 GMT
            Not After : Sep 17 19:13:21 2025 GMT
        Subject: CN=557d4c97-17c5-4f8c-a7d4-028ff93a30e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a7:f7:81:aa:59:16:b0:21:b7:5a:ed:a7:0f:
                    9c:ff:70:d4:06:72:f7:59:43:12:71:dd:ae:55:94:
                    d6:4b:e0:72:5c:8e:79:96:4c:1b:ed:7d:e1:eb:4f:
                    f3:de:76:bd:e4:1f:8b:61:1f:c2:d3:ad:1e:29:e7:
                    f1:17:1a:6f:ec:19:ea:8a:13:dc:8c:c5:16:86:f4:
                    ee:95:0a:ed:5f:a3:e6:f5:90:7e:87:30:a1:b7:d8:
                    d0:87:b1:b9:3c:00:68:7a:88:39:47:02:c3:ab:ed:
                    60:4d:34:38:fd:62:1d:26:10:bc:b9:95:0e:a1:91:
                    76:bf:8d:9a:3b:d4:17:71:d7:f7:16:5f:44:aa:34:
                    0b:73:a0:75:48:2c:d8:33:18:11:c0:d9:f3:e3:36:
                    d2:d9:49:62:37:f5:74:23:11:09:a4:3f:79:e1:b3:
                    70:a6:11:9c:09:c9:1b:b6:3c:f2:39:96:15:c6:37:
                    5c:62:97:68:14:87:b4:f0:fa:ad:ff:00:13:05:c5:
                    66:0f:f8:e8:8e:ef:f1:25:ac:2a:32:ed:c0:2e:85:
                    86:f3:d2:d7:d3:c8:5f:85:56:ae:b6:22:36:1a:d1:
                    76:d1:9a:c3:2b:8f:f0:0b:ae:8f:70:90:ff:04:86:
                    d4:30:6e:c8:30:16:2d:76:d4:d7:6e:52:0f:fe:7f:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9B:BB:0E:54:EF:16:06:93:C8:D6:79:61:32:DF:CB:C8:CF:46:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7d26f253-a5b0-31a0-9b78-bce01b725f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:3c:0c:9e:14:ae:39:fa:e3:69:18:1d:94:1a:34:4b:33:35:
         fc:c0:8e:dc:b2:2a:5e:15:20:8f:32:1c:d1:18:ef:bc:63:61:
         28:5e:03:e6:1e:a3:4d:19:72:90:e5:0c:c3:75:e4:e3:9f:cb:
         68:1f:1c:3b:05:b9:01:0c:72:63:c7:72:5e:79:b9:5d:77:37:
         74:2b:9b:32:3f:4d:54:88:58:90:e0:70:ee:9c:4c:53:b5:9f:
         72:ab:c6:31:79:72:a2:ad:fa:7b:62:ed:70:c0:74:34:f9:b8:
         52:a1:68:a6:e3:df:74:03:2f:51:2b:b7:1b:c6:58:80:61:9c:
         8c:6b:21:9e:5f:c0:44:42:09:ce:8e:8b:c1:8e:38:86:0e:39:
         8f:ef:96:b8:76:d6:e4:0c:af:9b:c6:80:b0:31:95:11:25:e6:
         f3:f6:50:ac:48:2d:5f:9c:06:7a:68:a1:48:0c:10:b0:de:d3:
         ed:c0:78:98:ba:1a:6d:f5:f6:4e:dd:4b:14:4d:1a:b4:62:61:
         46:50:71:73:6f:87:1a:ad:6a:54:89:2c:08:fa:69:52:65:c3:
         12:31:33:99:5f:ae:b1:e1:24:7b:eb:fc:94:ce:92:f7:30:63:
         1e:ac:7f:69:78:91:9f:32:95:4b:b6:0d:39:28:cd:e7:45:c7:
         f1:30:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:09:46 2025 by rpki-client