Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa
File:                     e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa (raw, json)
Hash identifier:          Qatw9YLWH3b6jj7jukWb+9w4CfYnq617id5IHuLgbIY=
Subject key identifier:   AA:28:5D:FE:87:FE:A9:50:51:87:FF:D0:50:D8:93:5C:73:2C:12:C1
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584A3910766656A535DD9F08E180
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa
Signing time:             Tue 17 Jun 2025 16:15:00 +0000
ROA not before:           Tue 17 Jun 2025 16:15:00 +0000
ROA not after:            Mon 15 Sep 2025 16:15:00 +0000
asID:                     7029
IP address blocks:        198.1.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:10:76:66:56:a5:35:dd:9f:08:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jun 17 16:15:00 2025 GMT
            Not After : Sep 15 16:15:00 2025 GMT
        Subject: CN=4b28845e-311c-4da0-9273-f6de60cf26bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:27:b2:15:26:03:20:e2:ce:46:6c:bf:1f:
                    d7:33:28:ae:4b:a7:6a:e8:12:b2:f4:df:01:46:d6:
                    aa:24:42:68:82:bd:80:a3:94:28:fc:59:5a:c8:60:
                    1f:14:4d:d4:ea:2d:24:71:93:ad:b1:3d:43:2f:61:
                    e2:69:95:23:b4:d4:f8:63:2c:94:b7:19:81:4c:c9:
                    92:67:f5:f0:9f:3c:b5:75:56:38:e4:36:65:32:a6:
                    5d:23:6b:64:53:40:4c:11:40:bd:72:23:22:12:c3:
                    e0:ed:0c:b1:2b:64:16:41:42:20:ff:c7:98:11:7f:
                    2c:5d:7b:f2:d5:88:2c:88:56:46:74:56:f4:6a:0e:
                    3d:9b:ed:54:b4:4f:6e:07:22:9b:5f:d9:14:5c:56:
                    23:ca:9d:46:6b:a1:a4:50:9c:30:43:f4:73:62:29:
                    49:f3:6b:5a:ca:7c:9e:86:4e:a5:c2:09:a6:46:1b:
                    46:4d:a8:97:43:57:0b:80:94:65:86:29:bd:d6:7d:
                    1f:88:b2:15:39:3a:e5:5a:72:21:77:7d:4a:20:5c:
                    8c:bb:09:7f:b7:36:42:89:eb:28:fc:3f:af:15:8f:
                    12:1b:08:d7:15:f8:53:39:41:df:2c:d9:33:e4:26:
                    76:04:a5:e8:85:6a:4b:9e:52:35:fe:14:b9:1b:6d:
                    49:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:28:5D:FE:87:FE:A9:50:51:87:FF:D0:50:D8:93:5C:73:2C:12:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:56:a4:00:4f:9c:0e:6a:6b:4e:3c:83:61:54:0d:1e:b2:94:
         8a:d2:8d:a4:c6:70:be:68:ef:ce:24:bf:d0:01:db:b0:16:67:
         be:45:b1:3e:14:2b:bc:ef:89:e6:ff:ef:fc:38:22:af:0a:77:
         f6:ca:6a:cc:b6:f0:cc:16:a9:00:ba:f8:0b:0d:48:a2:0a:5b:
         4f:80:6d:c2:b2:8a:32:0d:9c:fd:60:a3:79:34:64:7e:0b:fc:
         6c:81:ee:37:2f:e9:bf:00:ad:27:71:78:4f:0a:c6:4a:2c:80:
         28:d5:41:fc:4f:ae:e1:7a:30:16:b9:61:10:96:d6:df:82:06:
         22:fb:46:c0:19:f9:a1:d7:1d:66:1f:ec:23:02:ca:e1:32:8b:
         35:83:35:60:d9:c2:cc:1b:cc:8b:ed:b5:13:55:42:89:d0:db:
         bb:6a:ab:f7:ce:88:f5:10:a3:88:ca:88:f1:15:eb:a4:b9:70:
         e5:b9:4a:8a:31:bc:0a:eb:c9:a0:fe:b2:95:2f:b6:c7:06:9b:
         7b:e3:3d:7c:5f:7b:34:41:97:00:2d:9c:a2:be:02:7b:22:45:
         32:48:08:4c:12:dd:1b:d1:2e:15:9b:92:32:80:f5:6c:fa:16:
         07:9e:fb:72:8a:3b:e6:8d:8e:d5:1e:59:6a:a6:cb:aa:11:f9:
         0f:55:a3:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5EHZmVqU13Z8I4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI1MDYxNzE2MTUwMFoXDTI1MDkxNTE2MTUwMFowLzEtMCsGA1UEAxMk
NGIyODg0NWUtMzExYy00ZGEwLTkyNzMtZjZkZTYwY2YyNmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkknshUmAyDizkZsvx/XMyiuS6dq6BKy9N8B
RtaqJEJogr2Ao5Qo/FlayGAfFE3U6i0kcZOtsT1DL2HiaZUjtNT4YyyUtxmBTMmS
Z/Xwnzy1dVY45DZlMqZdI2tkU0BMEUC9ciMiEsPg7QyxK2QWQUIg/8eYEX8sXXvy
1YgsiFZGdFb0ag49m+1UtE9uByKbX9kUXFYjyp1Ga6GkUJwwQ/RzYilJ82taynye
hk6lwgmmRhtGTaiXQ1cLgJRlhim91n0fiLIVOTrlWnIhd31KIFyMuwl/tzZCieso
/D+vFY8SGwjXFfhTOUHfLNkz5CZ2BKXohWpLnlI1/hS5G21JiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKooXf6H/qlQUYf/0FDYk1xzLBLBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZTZlMGJjOTMtNmUxMC0z
YmViLWIzZDctMjc1OGYzNTM4YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADlWpABPnA5qa048g2FUDR6ylIrSjaTGcL5o784kv9AB27AWZ75FsT4U
K7zvieb/7/w4Iq8Kd/bKasy28MwWqQC6+AsNSKIKW0+AbcKyijINnP1go3k0ZH4L
/GyB7jcv6b8ArSdxeE8KxkosgCjVQfxPruF6MBa5YRCW1t+CBiL7RsAZ+aHXHWYf
7CMCyuEyizWDNWDZwswbzIvttRNVQonQ27tqq/fOiPUQo4jKiPEV66S5cOW5Soox
vArryaD+spUvtscGm3vjPXxfezRBlwAtnKK+AnsiRTJICEwS3RvRLhWbkjKA9Wz6
Fgee+3KKO+aNjtUeWWqmy6oR+Q9Vo5c=
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:24 2025 by rpki-client