Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d530230e-9e1b-3027-9062-9049eebb48ef.roa
File:                     d530230e-9e1b-3027-9062-9049eebb48ef.roa (raw, json)
Hash identifier:          12/M6q3Bp4IUE+OaPctJIR0k+zY/ORUd2eBGTpKN9is=
Subject key identifier:   1F:55:D9:D3:55:0C:24:24:DA:C5:D1:D9:23:A6:20:70:73:7C:13:AB
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584A0A9FD12460E2CDA36405ACE0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d530230e-9e1b-3027-9062-9049eebb48ef.roa
Signing time:             Sun 01 Jun 2025 01:00:49 +0000
ROA not before:           Sun 01 Jun 2025 01:00:49 +0000
ROA not after:            Sat 30 Aug 2025 01:00:49 +0000
asID:                     64267
IP address blocks:        198.1.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0a:9f:d1:24:60:e2:cd:a3:64:05:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jun  1 01:00:49 2025 GMT
            Not After : Aug 30 01:00:49 2025 GMT
        Subject: CN=13794d8e-833e-4514-a77d-7047c0933201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:72:db:aa:8a:2a:90:7c:43:30:9b:1a:ca:96:
                    5b:56:81:72:dc:ee:da:25:02:dd:bf:c7:86:c3:7c:
                    08:b4:01:4a:28:49:4b:4f:46:27:d7:e6:86:b6:10:
                    55:52:bf:c8:99:02:9b:d5:d2:2d:03:91:1c:45:11:
                    48:ef:6e:b8:dd:08:b1:77:7b:b8:90:9e:22:ff:27:
                    3f:1b:a5:0c:8b:d6:86:dd:a6:b6:f0:44:07:2c:55:
                    54:0a:31:35:25:d8:0b:29:73:11:89:c9:6f:46:42:
                    bf:5a:1b:98:4c:0d:18:d0:be:12:f0:0b:d0:d2:08:
                    68:c4:de:4d:4f:f6:0c:82:9f:58:e0:46:e8:dd:d5:
                    26:e9:0d:d5:71:c4:be:91:ca:8c:07:56:49:f4:b5:
                    cb:20:0d:a2:82:e2:64:f4:b3:04:72:3e:21:50:5f:
                    f7:11:ed:cc:fc:1c:cb:30:54:83:0f:60:13:e1:be:
                    b0:99:a5:4a:0d:98:37:a8:18:43:7e:ce:fc:d6:10:
                    52:97:de:1e:63:0e:45:88:fd:8e:50:fa:6d:8f:d6:
                    a8:0c:9b:40:51:f5:da:0a:ba:30:d7:7d:46:23:6d:
                    1f:33:62:e6:bd:6e:ee:20:7b:26:07:da:a1:96:96:
                    f0:56:22:ee:ac:57:a3:44:0e:45:aa:5a:ba:50:42:
                    39:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:55:D9:D3:55:0C:24:24:DA:C5:D1:D9:23:A6:20:70:73:7C:13:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d530230e-9e1b-3027-9062-9049eebb48ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:0f:8c:0e:3b:36:05:3d:6d:9f:11:86:ae:0b:f7:c8:e3:de:
         ae:d1:5f:f8:f8:4e:b2:7c:15:12:8f:89:3a:91:ea:23:a8:63:
         85:cd:43:2b:42:29:a9:a4:58:d2:ce:df:f5:6e:76:a8:8e:ce:
         fc:87:c2:92:d4:3a:c5:be:4d:21:28:bd:46:6b:93:0d:3c:b5:
         2e:e4:f0:7d:7d:73:f9:30:d4:97:b7:43:dd:13:37:3e:f8:c6:
         31:59:8d:43:21:a7:fa:49:5e:ed:0b:84:ad:1f:5a:73:39:d3:
         c9:88:f3:6c:a8:fd:38:36:bd:1f:40:a5:a7:2a:3c:7d:a4:29:
         a3:0a:cb:6a:12:08:6b:45:41:c8:8c:d0:bc:8e:64:53:52:e9:
         4b:94:cf:8a:10:94:b8:1a:d1:8d:1f:2c:ec:ff:78:50:b9:59:
         82:c1:d0:2b:e1:33:85:60:7d:23:7f:d3:63:47:2a:30:81:cc:
         8c:7d:c2:35:97:93:d6:dd:85:67:91:f0:f3:8d:38:9b:7c:f6:
         24:eb:02:86:97:e7:0c:11:b2:29:8a:8d:97:5e:15:fc:41:7b:
         fb:b4:74:71:1a:3f:83:a4:ed:b8:01:e2:f5:08:38:bc:48:18:
         eb:72:87:8b:f6:ce:fb:b9:24:8e:7c:ad:c5:ba:61:19:7c:48:
         78:b8:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:10:06 2025 by rpki-client