Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19952049-addd-3f18-819a-bc46971338b2.roa
File:                     19952049-addd-3f18-819a-bc46971338b2.roa (raw, json)
Hash identifier:          ccL73r8dAv3W2S6H5NllR6W+3oPvs6y1maCV/pYNsSo=
Subject key identifier:   61:34:F7:75:1A:8F:33:C4:EB:E5:2C:C7:E1:76:6A:D7:BE:8E:32:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1199C84CBFCB9B830DA47D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19952049-addd-3f18-819a-bc46971338b2.roa
Signing time:             Thu 05 Mar 2026 15:20:10 +0000
ROA not before:           Thu 05 Mar 2026 15:20:10 +0000
ROA not after:            Wed 03 Jun 2026 14:20:10 +0000
asID:                     396545
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:99:c8:4c:bf:cb:9b:83:0d:a4:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  5 15:20:10 2026 GMT
            Not After : Jun  3 14:20:10 2026 GMT
        Subject: CN=b2bcfca9-7438-4c45-9ee5-d05e01e6eb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:68:3a:7b:d7:b4:25:70:ea:9a:6f:c4:f5:84:
                    34:83:ba:05:11:09:94:4c:4f:85:6b:ef:ce:b1:4f:
                    6f:f5:24:fa:74:6b:3d:24:0b:22:48:a5:d1:b2:9b:
                    cb:c9:ed:62:52:2d:fb:9f:5e:0d:dc:7e:e0:be:52:
                    1d:d9:7b:86:e8:e1:f6:37:4a:a4:62:b2:9f:d6:e1:
                    56:d6:b1:63:e8:ff:e4:12:d5:84:73:c8:92:5d:bd:
                    f4:8a:7c:ad:c2:38:59:40:60:9c:46:03:b8:3b:d7:
                    f9:9e:0d:ee:24:de:41:1f:68:a4:bf:db:ee:4b:76:
                    ec:b5:fd:46:50:d4:c0:ae:df:aa:85:32:d9:f8:45:
                    2a:18:da:18:ea:78:8a:5c:88:d2:ec:6b:25:8c:23:
                    6b:01:d1:c7:9e:34:da:4a:fc:0d:a9:f5:02:b3:88:
                    5e:73:81:f9:2c:39:48:57:70:21:d1:d3:89:c3:27:
                    e6:d7:08:75:15:66:3b:eb:b7:b8:ca:68:0e:70:7f:
                    00:62:d8:93:82:7d:ef:af:c2:ed:7f:3f:31:49:78:
                    90:00:96:34:3d:fb:c7:32:73:a2:72:15:07:b2:f8:
                    16:55:5a:e1:95:0d:16:5e:ac:83:61:74:64:32:3b:
                    dc:96:13:2d:b3:cf:72:5d:f2:a1:69:8e:3c:0d:66:
                    ab:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:34:F7:75:1A:8F:33:C4:EB:E5:2C:C7:E1:76:6A:D7:BE:8E:32:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19952049-addd-3f18-819a-bc46971338b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:e3:b5:8f:6e:cf:6e:aa:bc:cd:4a:1d:57:50:0d:94:03:e8:
         92:c7:92:cd:a4:a0:9f:01:c5:96:f2:1c:61:92:84:05:f1:a2:
         fd:46:ff:d0:ca:79:dc:06:eb:a3:b8:9c:25:f2:ed:18:ca:b7:
         03:09:16:0c:65:ba:01:6f:89:33:f3:9f:f5:bf:1b:e8:bd:58:
         87:37:ad:82:49:a1:b3:d5:2d:0e:5e:ca:a4:f2:9d:97:43:63:
         fe:f3:8b:d5:80:31:e3:34:51:03:a3:6b:f8:75:5c:12:73:f8:
         03:7e:e5:87:39:0e:63:59:9f:a9:c6:50:43:8c:08:58:7b:66:
         76:76:ab:35:3d:9d:f8:52:99:80:5c:7a:89:23:42:5c:88:56:
         73:44:39:34:b1:58:60:73:b8:c5:e7:d1:5a:de:7b:a5:0a:ef:
         6c:dd:f3:a9:d0:b4:cf:9a:fb:28:ee:5e:46:1b:0c:d0:94:be:
         4e:87:3e:9e:fb:05:11:f9:1f:c7:38:9c:1e:d8:ad:e0:cd:b0:
         22:bc:3b:b9:4e:c1:f4:a1:03:10:a0:43:25:af:9e:41:72:a3:
         65:26:db:b0:2f:5d:19:3d:43:79:95:d8:2e:e5:46:f9:28:92:
         76:26:e6:38:5c:f0:49:65:26:59:6a:47:16:c3:0c:e3:2b:7c:
         d5:3a:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:26 2026 by rpki-client