Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c42e0d2-48e9-369b-b879-1dc26f6de0bd.roa
File:                     6c42e0d2-48e9-369b-b879-1dc26f6de0bd.roa (raw, json)
Hash identifier:          d0wk7np9O35LtZLndi1QzMnaFB4rC5Mwvrd7xaq60Z0=
Subject key identifier:   91:48:19:37:D8:0F:90:88:FA:76:36:4D:19:9E:EA:E0:75:DD:70:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498717CBE5CF98FA2A154B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c42e0d2-48e9-369b-b879-1dc26f6de0bd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36630
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:17:cb:e5:cf:98:fa:2a:15:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3b4e3e3c-33ed-4eb3-aea2-847036352828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:97:c5:06:97:05:82:8a:31:1b:2f:35:72:2d:
                    0f:21:a8:c6:65:5c:e2:c2:dd:31:a7:63:be:8c:d4:
                    9a:3f:a6:53:69:3a:67:2e:d1:08:0d:b5:a2:16:52:
                    36:fe:e6:4b:42:b6:91:d5:44:24:ee:08:c1:9c:63:
                    90:e7:03:7d:fc:a9:d0:61:44:bc:44:b8:e7:58:78:
                    3f:58:bb:59:8a:9e:be:3a:0a:39:54:76:3f:3e:f1:
                    dc:3e:8b:5d:99:86:20:2e:a8:b3:64:a6:48:89:6f:
                    6e:0d:75:87:1c:60:cf:3c:7a:20:d7:63:fa:be:4b:
                    dc:1f:36:29:c6:21:fa:65:00:9c:a6:5a:2b:67:3b:
                    14:e7:35:22:f7:0b:c4:52:4a:b0:88:94:5d:dc:d1:
                    73:a4:cd:62:87:cf:4f:d6:82:f4:a9:1e:f3:08:09:
                    b6:94:d6:af:bc:78:f2:48:d6:b5:28:2f:5e:de:b8:
                    e7:cd:c0:dd:d1:89:99:66:6a:37:89:c9:04:59:8b:
                    a8:c6:3e:f4:1e:f0:00:9c:b6:ce:49:39:18:e5:d3:
                    44:ae:49:be:c0:bc:57:fc:d3:87:e1:21:35:02:a6:
                    fc:e1:7b:86:3b:fa:46:26:4c:58:3a:04:2d:67:b2:
                    ea:ff:5d:06:81:27:09:88:74:5d:54:b7:d8:89:54:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:48:19:37:D8:0F:90:88:FA:76:36:4D:19:9E:EA:E0:75:DD:70:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c42e0d2-48e9-369b-b879-1dc26f6de0bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f1:d7:b4:a8:6d:65:b3:5e:60:05:ca:41:c7:ee:a6:e2:28:
         08:f4:ae:af:cb:ad:34:6f:39:b9:62:4f:41:25:46:e4:d0:74:
         3e:ff:19:12:50:a3:cd:4d:b4:39:d0:49:2e:55:7f:05:a9:ee:
         22:b9:fb:5f:32:e5:94:85:d0:39:40:16:42:a6:10:d2:e0:e8:
         01:10:93:f1:2e:91:b2:18:64:bc:57:88:02:66:19:da:64:9e:
         c4:61:b8:a5:da:70:1a:aa:39:cd:f3:17:8e:c6:80:b3:44:fd:
         e7:53:3c:0e:f8:68:36:61:8d:ce:bf:19:7b:44:88:bb:0e:10:
         1b:be:03:a2:f6:c7:44:ce:27:1c:44:2b:6f:6e:0c:b3:29:26:
         9f:f1:21:54:da:f9:d4:8c:a2:78:82:e2:68:5f:cf:a5:99:28:
         6c:a7:31:ea:3f:e0:86:c2:6e:ec:ae:23:f3:93:2a:d3:12:16:
         00:51:a5:75:46:5e:aa:71:36:93:46:af:42:da:d6:8b:96:4d:
         00:96:5e:eb:fb:8d:79:d7:b2:00:d6:2f:a3:b3:bf:fb:fc:46:
         9b:3f:d5:6f:1e:8d:6e:9b:f8:64:7f:33:1c:44:8c:d6:4e:6e:
         ed:3c:19:9e:ae:98:9b:c9:23:b9:10:7f:85:20:e9:fe:dd:37:
         81:d8:e6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:21:38 2026 by rpki-client