Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef0050c0-8aa7-36b4-bac5-551957984623.roa
File:                     ef0050c0-8aa7-36b4-bac5-551957984623.roa (raw, json)
Hash identifier:          Ea/HHOyyHCDKxgu9fz1S1ckCEH5fAV7xVfzDYp7fyes=
Subject key identifier:   9E:18:87:91:3C:11:B4:31:E6:17:F7:47:4B:28:2F:5D:2B:31:2B:C1
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584A18953E77D2B445895743E680
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef0050c0-8aa7-36b4-bac5-551957984623.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     49981
IP address blocks:        198.1.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:3e:77:d2:b4:45:89:57:43:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=3d140740-57a6-4876-bc07-1301e9ff8b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:56:fa:8e:c1:e9:a0:f8:37:50:e1:44:09:96:
                    ec:09:c5:7c:c7:17:5c:32:e8:52:86:fc:c0:bb:9c:
                    a0:05:72:b2:89:8d:7d:c0:98:c2:9c:17:8f:23:ba:
                    45:eb:cf:0c:ca:bc:fc:e8:fd:bf:12:89:db:db:1f:
                    63:7f:15:7e:73:44:ed:e2:e4:cd:a0:2c:3e:8b:0d:
                    c5:8a:28:68:b3:86:01:7d:36:5a:5e:1c:62:ef:a3:
                    c2:84:b4:13:ae:91:00:16:70:ed:81:60:15:a4:5a:
                    71:f9:e6:88:67:f7:c7:ad:cc:96:1a:e7:82:d5:a4:
                    d6:5f:24:ba:bb:84:67:6d:2d:b3:bd:11:c8:e2:49:
                    8d:40:09:10:7b:d5:9f:3b:c2:28:8d:5a:9f:a5:14:
                    06:5f:05:7b:79:a5:d8:45:d7:8a:f5:b4:55:c5:8e:
                    28:69:49:02:e8:27:ea:d2:99:8b:be:8d:4a:8f:d8:
                    a2:3e:c7:99:2d:06:b8:a1:13:b5:2c:d7:ab:0e:0f:
                    d9:5d:06:33:61:b0:5f:9d:13:ec:ad:e6:91:ae:99:
                    c2:e2:cf:5f:b9:c9:0e:04:ab:ea:da:da:86:c2:60:
                    b5:79:de:34:b5:a8:6d:c8:80:aa:f4:da:42:11:23:
                    2a:57:f1:d6:f2:a2:36:9e:b3:d3:9a:08:a4:6f:39:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:18:87:91:3C:11:B4:31:E6:17:F7:47:4B:28:2F:5D:2B:31:2B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef0050c0-8aa7-36b4-bac5-551957984623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ed:bb:be:6e:db:f3:5c:c2:fd:95:f9:8e:44:b7:b3:4f:72:
         6c:c7:f5:65:28:df:7f:0a:51:87:7c:59:23:d5:ab:32:b2:14:
         40:74:d5:b0:d7:78:68:2a:00:d7:d6:a2:f4:e7:93:7c:8a:d2:
         d2:23:34:ba:3e:b8:88:52:07:0d:94:97:de:aa:04:9c:d6:e2:
         29:c2:81:1f:d5:79:1c:11:a4:39:8c:57:63:4b:06:db:2a:80:
         20:50:51:6e:24:0a:4d:3e:41:3b:78:c6:3b:d7:24:58:29:2f:
         84:29:ea:26:27:fc:4e:a2:6e:d4:c2:fb:a4:b0:16:a6:33:2c:
         0c:fa:66:8d:61:f0:ab:a7:29:a6:48:b4:76:cf:b2:7f:f4:e1:
         37:3f:28:91:80:0a:55:f6:74:b0:25:a3:b7:2f:75:b8:7f:28:
         58:2f:6d:69:1f:5a:b9:40:a5:2f:55:74:7a:2b:99:c2:3d:2d:
         aa:3c:cc:a4:a5:32:3e:52:df:df:9c:aa:8e:33:ce:37:58:b9:
         32:89:76:d2:1c:85:fe:3e:e7:44:ff:c1:ba:33:c8:2f:02:17:
         a4:44:5e:b7:c2:6e:d0:bc:eb:19:81:18:20:21:e4:88:71:bf:
         4f:a9:a3:97:fe:f0:ea:36:b7:5a:ff:05:f0:b1:ec:12:65:a4:
         ec:1b:49:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:42:22 2025 by rpki-client