Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a94cab63-0633-34d0-891a-5201e88ed83c.roa
File:                     a94cab63-0633-34d0-891a-5201e88ed83c.roa (raw, json)
Hash identifier:          LXiJ1zZIMG0mAzN612e32530O7l/MTITxjNMjD72bLk=
Subject key identifier:   5D:D4:27:DA:EE:4B:37:06:14:C9:7E:DC:22:96:52:8C:B9:91:42:3D
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584AF3BBDCF88557F52911986480
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a94cab63-0633-34d0-891a-5201e88ed83c.roa
Signing time:             Sat 23 Aug 2025 13:00:41 +0000
ROA not before:           Sat 23 Aug 2025 13:00:41 +0000
ROA not after:            Fri 21 Nov 2025 14:00:41 +0000
asID:                     7029
IP address blocks:        198.1.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f3:bb:dc:f8:85:57:f5:29:11:98:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Aug 23 13:00:41 2025 GMT
            Not After : Nov 21 14:00:41 2025 GMT
        Subject: CN=2eb45d1d-367e-4609-bcca-8acb53741ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:2a:bb:a8:7f:ee:68:5d:5c:2d:ac:54:07:
                    d6:be:7f:d3:c3:c7:14:7f:c1:79:40:c9:53:19:08:
                    5b:8a:2e:f2:b5:f2:1a:c6:17:16:29:e8:e9:4b:b5:
                    bf:da:ae:82:73:10:89:00:b8:ae:d5:5f:df:94:12:
                    04:52:11:25:4e:4e:ae:e8:59:e8:85:76:24:3f:00:
                    7c:6b:06:9b:17:ea:28:6f:a1:8e:81:73:47:df:2f:
                    46:1f:5c:03:90:2e:b3:4f:28:73:d3:8a:af:97:dc:
                    b2:e4:72:84:43:78:ff:77:ce:b3:2e:ca:32:f5:c8:
                    1c:b9:c8:cc:46:02:b5:66:04:30:12:55:44:c7:83:
                    8e:e4:1c:13:15:df:84:23:74:12:52:95:99:63:d3:
                    e4:ac:d3:14:c0:a5:13:e9:de:7e:2a:d1:76:8e:be:
                    72:07:62:90:60:fb:82:12:ee:d9:b2:39:c7:3f:b4:
                    fe:8c:64:af:94:51:ea:ec:e7:b4:3f:45:b5:64:3c:
                    49:24:f8:77:1a:2c:96:12:06:d9:5e:6a:5a:7e:bb:
                    5c:2b:3a:c0:02:66:e2:24:4d:21:85:0c:31:d6:3d:
                    c1:1a:5f:a7:d6:41:91:e6:d3:ae:91:a4:11:37:7c:
                    88:5b:48:34:6a:fa:e5:fa:86:81:9e:11:60:b2:9b:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D4:27:DA:EE:4B:37:06:14:C9:7E:DC:22:96:52:8C:B9:91:42:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a94cab63-0633-34d0-891a-5201e88ed83c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:3a:a5:3a:d2:ae:84:65:64:d8:a1:ee:56:ca:30:ef:f2:84:
         30:23:07:f1:cc:6e:70:ee:6c:40:c4:77:56:a5:4e:17:48:43:
         87:1b:1b:4e:aa:95:70:07:ca:73:8f:7a:bd:f5:7d:24:04:72:
         bf:b8:61:7e:7d:68:69:02:0b:ee:e5:35:3f:2a:b3:b6:3a:65:
         37:fc:0c:58:b2:7a:e3:b2:7f:79:db:d6:7e:b2:36:9e:ec:29:
         4b:03:76:1d:79:76:f6:88:3a:01:61:4e:52:56:5d:08:9a:ac:
         10:ec:68:50:4a:9d:4e:5e:33:52:52:14:46:2c:d3:91:5f:ff:
         76:0f:05:ac:68:61:b2:0e:08:86:36:65:e2:5b:5b:79:c8:64:
         48:ce:f7:21:45:55:7d:85:9d:f3:89:e9:64:28:c3:cf:71:a3:
         38:38:e7:c8:0e:90:53:04:f3:6d:ed:b2:ba:40:d9:e9:3b:ac:
         4f:2e:d2:cd:ca:3c:a9:f0:77:85:a3:02:34:5e:3c:9d:71:b8:
         7b:14:9c:94:f4:84:ad:ea:b1:35:b1:11:7e:a7:13:e1:fb:4d:
         4d:a3:e7:a8:c0:df:f7:ba:22:76:18:ed:0a:2c:86:7b:4a:9f:
         22:99:19:cf:39:79:40:08:a7:5c:1e:85:64:c4:5f:49:26:8d:
         ab:6d:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:07 2025 by rpki-client