Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/94788d12-0d3e-3007-a2f8-953cb3e95d86.roa
File:                     94788d12-0d3e-3007-a2f8-953cb3e95d86.roa (raw, json)
Hash identifier:          Egofc2SkN2GFQwB4/wRYwilPQ2ElBRZAdNbYbPTrvmI=
Subject key identifier:   BE:36:38:C0:1B:0C:45:D2:8B:2E:AC:25:3A:53:BE:73:F3:98:27:D9
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584AF3BBDD164E9B12E294251500
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/94788d12-0d3e-3007-a2f8-953cb3e95d86.roa
Signing time:             Sat 23 Aug 2025 13:00:41 +0000
ROA not before:           Sat 23 Aug 2025 13:00:41 +0000
ROA not after:            Fri 21 Nov 2025 14:00:41 +0000
asID:                     7029
IP address blocks:        198.1.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f3:bb:dd:16:4e:9b:12:e2:94:25:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Aug 23 13:00:41 2025 GMT
            Not After : Nov 21 14:00:41 2025 GMT
        Subject: CN=b43517f4-0bfb-4101-b209-4ab353f6dbf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:97:a7:f8:a1:48:6b:8a:03:be:ed:19:1d:
                    44:b3:5f:f2:a5:db:db:e8:a9:c8:07:05:0a:83:86:
                    43:c2:82:56:52:40:e0:86:4d:b3:1e:2b:6c:e1:f3:
                    c3:99:be:19:eb:59:72:ea:09:b0:aa:9e:d3:18:32:
                    29:79:4e:59:2f:b5:96:2f:26:36:02:cb:75:12:55:
                    56:46:8c:c5:2d:d3:0a:7c:e9:ce:41:2b:79:99:22:
                    1d:de:48:12:59:74:24:b8:ca:85:ee:42:c6:c9:11:
                    21:c2:2c:01:1d:c3:68:28:5f:1e:85:5a:ed:44:56:
                    f6:c4:3a:e1:61:f5:75:68:fe:bd:07:4c:3d:c4:29:
                    0f:6e:c5:cf:7d:a1:6c:5e:c8:b5:3f:75:2e:eb:9b:
                    99:97:81:bc:81:80:06:80:19:40:b1:5b:a8:f2:e0:
                    b4:62:37:7a:fc:2a:b9:5b:29:26:2f:29:32:99:6d:
                    c3:a8:04:92:71:0a:20:81:f3:db:e8:fd:b5:c3:74:
                    cb:ee:ef:d6:c1:83:ba:30:3f:3b:48:c8:b1:aa:74:
                    9b:0b:87:07:ec:df:e0:ae:8b:70:ce:a6:07:9b:dd:
                    bb:43:fb:ef:0f:2a:a7:6d:c5:66:f8:8e:47:5b:a4:
                    e2:6f:42:87:29:37:9a:83:18:2d:f2:fb:e4:0a:a2:
                    b3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:36:38:C0:1B:0C:45:D2:8B:2E:AC:25:3A:53:BE:73:F3:98:27:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/94788d12-0d3e-3007-a2f8-953cb3e95d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e5:01:13:4e:6e:b0:d2:37:e9:ce:21:9d:d2:47:94:26:e5:
         3a:9b:86:41:20:15:84:86:fe:40:ba:c4:26:9a:dd:d6:01:39:
         29:06:42:ea:b9:9d:18:2a:08:ea:eb:40:c9:e0:03:2d:e0:95:
         de:07:f8:98:de:eb:a5:b7:13:d3:41:cc:7a:e2:3a:c7:84:04:
         a0:54:1f:c1:9f:50:9d:da:67:ab:5e:8b:bb:e6:00:6b:06:00:
         9c:51:c2:6d:d2:28:50:99:aa:3b:62:8d:a6:03:fd:cd:e6:d7:
         ad:37:fc:ac:79:90:50:e6:0c:7f:40:7b:e8:9a:d7:78:f7:4a:
         08:1c:d0:76:22:93:4a:42:79:38:e9:83:62:17:ff:f8:92:a7:
         68:37:94:f3:a3:1b:62:be:c1:87:9a:13:a1:32:49:84:d6:4a:
         d2:4f:9a:31:4d:97:7b:60:8a:89:e2:18:8d:36:2c:1f:f5:95:
         bb:86:ad:77:ae:8c:85:4e:f9:d1:09:f6:b3:db:2a:36:c8:d0:
         6a:6f:8c:69:0f:42:cf:93:be:ed:23:f5:14:70:01:7c:31:73:
         75:8e:8b:28:52:0d:66:20:f3:b9:98:29:7f:4d:f2:e9:e1:40:
         d2:02:72:f4:df:33:6b:5f:25:ba:6e:1d:22:3a:2e:a2:a1:75:
         3c:81:09:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErzu90WTpsS4pQlFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI1MDgyMzEzMDA0MVoXDTI1MTEyMTE0MDA0MVowLzEtMCsGA1UEAxMk
YjQzNTE3ZjQtMGJmYi00MTAxLWIyMDktNGFiMzUzZjZkYmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh6Xp/ihSGuKA77tGR1Es1/ypdvb6KnIBwUK
g4ZDwoJWUkDghk2zHits4fPDmb4Z61ly6gmwqp7TGDIpeU5ZL7WWLyY2Ast1ElVW
RozFLdMKfOnOQSt5mSId3kgSWXQkuMqF7kLGyREhwiwBHcNoKF8ehVrtRFb2xDrh
YfV1aP69B0w9xCkPbsXPfaFsXsi1P3Uu65uZl4G8gYAGgBlAsVuo8uC0Yjd6/Cq5
WykmLykymW3DqASScQoggfPb6P21w3TL7u/WwYO6MD87SMixqnSbC4cH7N/grotw
zqYHm927Q/vvDyqnbcVm+I5HW6Tib0KHKTeagxgt8vvkCqKzYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL42OMAbDEXSiy6sJTpTvnPzmCfZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvOTQ3ODhkMTItMGQzZS0z
MDA3LWEyZjgtOTUzY2IzZTk1ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrlARNObrDSN+nOIZ3SR5Qm5TqbhkEgFYSG/kC6xCaa3dYBOSkGQuq5
nRgqCOrrQMngAy3gld4H+Jje66W3E9NBzHriOseEBKBUH8GfUJ3aZ6tei7vmAGsG
AJxRwm3SKFCZqjtijaYD/c3m1603/Kx5kFDmDH9Ae+ia13j3Sggc0HYik0pCeTjp
g2IX//iSp2g3lPOjG2K+wYeaE6EySYTWStJPmjFNl3tgioniGI02LB/1lbuGrXeu
jIVO+dEJ9rPbKjbI0GpvjGkPQs+Tvu0j9RRwAXwxc3WOiyhSDWYg87mYKX9N8unh
QNICcvTfM2tfJbpuHSI6LqKhdTyBCfA=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:47:17 2025 by rpki-client