Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65711465-bc0d-34a7-b816-f9fcf7c50481.roa
File:                     65711465-bc0d-34a7-b816-f9fcf7c50481.roa (raw, json)
Hash identifier:          V4zf/ub1U/It2kmxT3jt+QobqAVwltj3FIFmuaQTS4o=
Subject key identifier:   24:4D:00:6F:A0:DC:A3:B8:D4:CD:0A:66:87:28:D2:99:F6:B1:AC:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1199BE0682D6A2ED5A7FB680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65711465-bc0d-34a7-b816-f9fcf7c50481.roa
Signing time:             Thu 05 Mar 2026 15:20:05 +0000
ROA not before:           Thu 05 Mar 2026 15:20:05 +0000
ROA not after:            Wed 03 Jun 2026 14:20:05 +0000
asID:                     396614
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:99:be:06:82:d6:a2:ed:5a:7f:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  5 15:20:05 2026 GMT
            Not After : Jun  3 14:20:05 2026 GMT
        Subject: CN=b6141bbb-01f6-4633-abc7-be1387f59dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5e:fd:38:85:b1:90:88:a5:4c:01:af:e0:b5:
                    2c:d3:51:d2:a7:97:39:51:4d:13:72:3c:21:f8:77:
                    4c:48:c1:b9:39:48:12:e8:1b:41:5c:d3:5c:64:85:
                    0e:dd:9f:e2:87:27:70:fc:a1:49:70:d3:6a:5c:1f:
                    12:cc:3f:a7:5a:69:a7:99:02:39:1e:24:0a:8e:07:
                    d7:7f:8a:5a:a3:5f:d0:05:0b:46:d2:1d:1f:a1:37:
                    72:3a:c9:08:91:04:38:dc:bf:07:81:e9:ce:00:a4:
                    a9:b4:2c:a8:a9:70:55:1b:4f:07:de:a8:b4:15:77:
                    28:28:32:9e:8f:00:e5:fd:c5:08:c6:cb:15:fa:98:
                    b3:7b:e2:fe:38:60:56:a8:de:0e:ed:d3:24:89:dc:
                    fa:b8:56:1e:65:a6:3f:d2:30:01:21:f8:6d:03:3e:
                    85:0f:e1:b7:4f:7e:37:8a:2a:49:62:f5:d1:02:07:
                    d0:cf:6a:56:1b:f7:73:01:31:78:ff:6a:b1:c0:2f:
                    5a:b7:d2:e8:93:15:a4:e1:35:51:eb:7d:8e:08:49:
                    17:bb:5d:8e:7b:f0:8c:65:df:8c:b5:05:31:43:f1:
                    6b:2d:b8:f6:b7:7b:ef:6c:96:e8:ed:4d:50:ff:c0:
                    5a:2e:bd:19:2c:6f:d0:6c:22:3c:d7:72:2d:d3:dd:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4D:00:6F:A0:DC:A3:B8:D4:CD:0A:66:87:28:D2:99:F6:B1:AC:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65711465-bc0d-34a7-b816-f9fcf7c50481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:4a:4e:5a:65:2d:af:d2:3c:96:10:92:0f:d4:63:61:09:c8:
         56:21:57:3b:6d:2f:23:80:7a:03:0c:87:11:65:27:7f:38:45:
         82:1a:f0:3b:6d:c6:a6:04:b0:b3:77:dc:5b:f1:1b:f8:e3:18:
         d8:bb:0a:6c:09:c7:fd:72:79:92:39:7f:45:5d:6f:0e:39:b4:
         4d:23:58:ba:48:16:1d:3a:f4:7e:a5:c8:46:60:c5:2b:75:0d:
         61:47:fe:8f:c4:af:03:4c:ab:56:4c:97:03:bb:bf:d0:de:dd:
         5c:3b:74:b3:bd:00:18:8e:e9:4d:d7:ef:f0:02:da:b3:97:43:
         74:4f:77:cf:ae:a7:4b:e7:0f:f9:d5:7f:27:cf:88:6d:96:23:
         9b:b8:4f:68:15:78:7b:10:55:e7:a4:80:82:46:a1:98:f7:b2:
         1b:7d:43:6a:24:64:13:80:e1:62:4d:c5:31:96:64:4c:ad:d5:
         98:cf:3a:9e:2b:01:c8:69:b3:c4:a8:3c:15:3c:30:6c:6e:68:
         fc:c7:39:27:b7:ee:2c:04:5e:c8:8f:b8:3c:da:24:47:13:b9:
         c4:70:ab:5b:70:d7:a1:35:9a:bf:34:52:3c:6b:74:39:88:c8:
         ba:ee:3d:c2:05:d3:64:9b:4d:7b:82:ae:5d:00:8f:77:eb:5e:
         cc:b3:e0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:59:01 2026 by rpki-client