Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cec5a89-9dc4-345a-a603-16a46196d0d4.roa
File:                     5cec5a89-9dc4-345a-a603-16a46196d0d4.roa (raw, json)
Hash identifier:          L00EAESs7Sszhgepoi+Zj3p0R2zXuJzJf8reD3kMr2U=
Subject key identifier:   5F:83:A6:6B:FD:D7:01:03:6C:DB:8D:48:4C:90:C3:B7:DD:B6:A3:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1199C06974333AB8CB68FA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cec5a89-9dc4-345a-a603-16a46196d0d4.roa
Signing time:             Thu 05 Mar 2026 15:20:06 +0000
ROA not before:           Thu 05 Mar 2026 15:20:06 +0000
ROA not after:            Wed 03 Jun 2026 14:20:06 +0000
asID:                     396606
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:99:c0:69:74:33:3a:b8:cb:68:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  5 15:20:06 2026 GMT
            Not After : Jun  3 14:20:06 2026 GMT
        Subject: CN=76d8984f-2bf9-41c4-8097-1a59208796da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5f:87:fe:d8:28:0f:99:12:48:a8:ba:5a:66:
                    e5:7a:88:48:6e:e9:22:cf:a9:85:0b:d7:eb:89:ae:
                    29:cb:9e:08:77:f0:c5:d6:e1:87:7d:aa:1f:b1:ec:
                    e9:cf:59:e7:af:cf:6c:30:74:a3:26:7c:06:00:1b:
                    1f:73:08:fd:a6:36:2a:89:49:af:b8:9b:65:78:a3:
                    e9:f3:a7:38:da:f8:bf:5e:69:25:63:54:79:08:aa:
                    75:bf:b7:b3:85:96:f7:ca:3b:b0:ee:3b:25:04:3a:
                    17:d3:de:a5:9e:21:69:5c:02:c4:9f:81:ed:0e:a7:
                    58:24:5f:91:af:9e:60:f6:46:fa:cc:da:00:73:66:
                    f5:fc:fd:38:7f:a5:32:db:fe:3b:89:c6:7f:28:0d:
                    c1:d1:9f:24:e4:d5:af:26:2b:0f:63:a6:7d:89:17:
                    3e:15:49:35:ad:35:e1:12:cd:53:a7:3b:0e:c2:fd:
                    27:51:47:55:fe:16:2f:f8:a5:02:1b:e3:c4:8c:3b:
                    4c:12:08:d5:74:37:33:15:3c:35:24:cb:86:9e:38:
                    a7:62:e1:f3:41:71:0a:d2:49:d7:84:2a:6a:31:ff:
                    aa:ba:a7:d0:59:9a:9d:82:20:c0:3c:05:05:3d:d5:
                    01:8f:34:91:cc:58:ea:c3:97:ab:53:ad:82:27:db:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:83:A6:6B:FD:D7:01:03:6C:DB:8D:48:4C:90:C3:B7:DD:B6:A3:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cec5a89-9dc4-345a-a603-16a46196d0d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:0c:7e:6d:35:ba:97:04:c0:0e:89:74:61:70:f3:83:84:ad:
         e0:98:3f:c5:79:ac:c9:b1:8b:67:8d:8e:ed:4d:ca:d1:2a:56:
         9b:86:b3:37:57:4a:0d:6c:02:22:53:24:c6:4c:19:0f:bc:42:
         3a:95:5e:42:e7:cb:71:7a:7c:d3:d0:df:f1:e6:3a:8d:10:48:
         2b:e1:02:b6:33:d5:a6:d1:cf:4a:40:98:68:69:24:eb:c7:43:
         7a:e3:23:03:24:f7:c1:82:01:ed:c8:94:03:75:97:45:3a:e8:
         04:47:1f:e5:c3:91:71:ae:ca:bf:8b:57:6d:8a:24:b1:46:74:
         f0:19:b1:34:74:c6:dd:15:64:ac:11:bc:17:1b:10:9a:e3:d8:
         35:66:59:e8:f6:19:3d:93:bb:c0:3e:06:33:d3:d7:52:a3:13:
         c0:4a:ca:87:9f:e8:7d:67:11:ea:a7:c0:6f:d3:80:e3:22:a7:
         af:b3:2f:2b:41:94:4d:05:42:de:17:5a:19:91:97:28:91:0a:
         9b:67:c4:8c:a0:1a:a6:15:e5:2c:10:9c:b3:97:21:3b:22:88:
         e7:76:a0:94:7b:4f:5e:e3:0d:74:65:51:94:33:42:7e:d0:cc:
         3b:e9:01:0f:f2:65:96:f1:78:40:79:09:88:87:53:a8:63:70:
         b7:19:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:03 2026 by rpki-client