Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f364bcbb-ef79-305d-937b-3cf78cfb160e.roa
File:                     f364bcbb-ef79-305d-937b-3cf78cfb160e.roa (raw, json)
Hash identifier:          B9gBGhPAyj3xCktrtPHoTGzMwv5TVQ6sBhUgCfO3vWQ=
Subject key identifier:   CB:4F:95:51:0B:B1:DD:73:94:FA:F5:4A:1A:A6:AE:1B:B1:BE:03:21
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584B8DFCD0D6C34F8D5B8CE70340
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f364bcbb-ef79-305d-937b-3cf78cfb160e.roa
Signing time:             Fri 17 Oct 2025 19:06:04 +0000
ROA not before:           Fri 17 Oct 2025 19:06:04 +0000
ROA not after:            Thu 15 Jan 2026 20:06:04 +0000
asID:                     834
IP address blocks:        198.1.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:fc:d0:d6:c3:4f:8d:5b:8c:e7:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Oct 17 19:06:04 2025 GMT
            Not After : Jan 15 20:06:04 2026 GMT
        Subject: CN=bc99ba69-55d7-4e5c-b0ce-565ca60590c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:43:43:57:4f:ef:a9:f6:7a:43:2d:4d:c9:bc:
                    b3:be:2f:a7:ca:47:00:3f:fa:07:13:1e:d8:c9:d8:
                    62:3a:25:0a:24:d4:89:57:20:61:6c:54:44:a7:32:
                    10:33:57:d8:34:4f:1d:5d:8a:b1:71:cf:60:ba:70:
                    e0:05:db:01:0b:2a:8c:ca:ad:d8:90:cd:fb:c3:59:
                    e9:b8:d4:7d:15:b7:b1:9b:2e:49:56:18:2c:c6:b0:
                    da:3d:a1:4c:6f:1d:8c:4d:0a:bc:5e:8a:9c:ed:fe:
                    a2:d1:8d:87:a1:16:0b:b1:0a:37:56:83:0f:85:24:
                    45:17:fa:72:34:31:b5:3c:1c:47:d3:cb:4e:58:03:
                    95:6e:56:be:22:0a:04:ac:74:4e:ac:71:6f:80:14:
                    fb:d9:d1:d7:f7:a6:d8:c9:2a:4e:28:22:83:06:79:
                    22:f8:7e:22:4d:df:a8:34:3b:d8:1c:d1:b1:37:2b:
                    7f:d2:c8:47:d6:af:8b:47:d8:b1:38:a6:f0:7f:92:
                    56:41:6c:2e:a8:df:3b:78:55:8e:48:f9:23:7c:1d:
                    29:cb:0b:d8:18:84:28:66:97:fa:36:21:2f:f1:bb:
                    de:9a:01:13:17:a6:13:e6:f0:b9:92:9d:dc:ca:81:
                    fa:8c:c5:63:ba:5b:1a:81:37:2e:01:c6:aa:34:c3:
                    30:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4F:95:51:0B:B1:DD:73:94:FA:F5:4A:1A:A6:AE:1B:B1:BE:03:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f364bcbb-ef79-305d-937b-3cf78cfb160e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a5:ce:fe:5e:12:68:4e:5a:6a:bc:b2:ed:8a:c0:f0:e8:7f:
         28:c9:1e:58:22:2b:76:b8:51:d5:72:f0:45:5b:da:52:5f:35:
         9d:57:e6:9b:bf:ba:72:77:65:c0:71:6b:0b:77:e1:91:b1:86:
         3e:a9:61:35:1b:21:d0:d9:30:b6:78:2c:e9:5a:ad:be:c0:94:
         88:47:8b:d2:ea:a6:77:ee:29:fc:4c:a5:9f:42:14:7c:1c:20:
         fc:6d:89:5f:91:85:31:82:35:38:b1:53:37:3a:40:d1:21:97:
         b9:08:db:b3:5e:fe:e9:9c:ae:e2:1e:6b:51:cf:9a:e4:f5:5e:
         24:c6:8a:c0:3b:35:86:ff:b2:15:27:1b:65:b3:b1:48:f7:ba:
         70:ac:29:48:2b:78:c2:83:9e:2e:b5:3b:48:d3:de:f3:6c:4c:
         89:d6:7e:16:74:cc:6b:16:a4:ef:31:d5:67:51:b2:b3:48:09:
         bc:2c:46:f3:64:fc:b5:47:29:72:88:10:6d:47:94:a7:fb:ca:
         c1:2d:f7:55:3d:81:8b:4e:a5:2a:a8:70:ea:2d:c2:77:39:2c:
         5c:00:95:13:8c:da:26:5f:33:19:05:4d:c7:fb:c0:c4:20:58:
         f5:64:62:ca:b3:72:19:42:1f:75:7e:c7:32:8d:dd:4a:5c:00:
         31:27:03:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuN/NDWw0+NW4znA0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI1MTAxNzE5MDYwNFoXDTI2MDExNTIwMDYwNFowLzEtMCsGA1UEAxMk
YmM5OWJhNjktNTVkNy00ZTVjLWIwY2UtNTY1Y2E2MDU5MGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjENDV0/vqfZ6Qy1Nybyzvi+nykcAP/oHEx7Y
ydhiOiUKJNSJVyBhbFREpzIQM1fYNE8dXYqxcc9gunDgBdsBCyqMyq3YkM37w1np
uNR9Fbexmy5JVhgsxrDaPaFMbx2MTQq8Xoqc7f6i0Y2HoRYLsQo3VoMPhSRFF/py
NDG1PBxH08tOWAOVbla+IgoErHROrHFvgBT72dHX96bYySpOKCKDBnki+H4iTd+o
NDvYHNGxNyt/0shH1q+LR9ixOKbwf5JWQWwuqN87eFWOSPkjfB0pywvYGIQoZpf6
NiEv8bvemgETF6YT5vC5kp3cyoH6jMVjulsagTcuAcaqNMMwmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtPlVELsd1zlPr1ShqmrhuxvgMhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZjM2NGJjYmItZWY3OS0z
MDVkLTkzN2ItM2NmNzhjZmIxNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIWlzv5eEmhOWmq8su2KwPDofyjJHlgiK3a4UdVy8EVb2lJfNZ1X5pu/
unJ3ZcBxawt34ZGxhj6pYTUbIdDZMLZ4LOlarb7AlIhHi9LqpnfuKfxMpZ9CFHwc
IPxtiV+RhTGCNTixUzc6QNEhl7kI27Ne/umcruIea1HPmuT1XiTGisA7NYb/shUn
G2WzsUj3unCsKUgreMKDni61O0jT3vNsTInWfhZ0zGsWpO8x1WdRsrNICbwsRvNk
/LVHKXKIEG1HlKf7ysEt91U9gYtOpSqocOotwnc5LFwAlROM2iZfMxkFTcf7wMQg
WPVkYsqzchlCH3V+xzKN3UpcADEnA2E=
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:44 2025 by rpki-client