Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e676d6d-bf3b-3a8c-b38e-bb3dfbb3eca0.roa
File:                     6e676d6d-bf3b-3a8c-b38e-bb3dfbb3eca0.roa (raw, json)
Hash identifier:          lO2YtrQvYHvt6PcS+oV6gf+2MqZWz74eDa4aoN/qdIk=
Subject key identifier:   56:46:04:F5:F0:8F:7B:40:AF:66:32:5E:7F:8F:9F:2C:A7:DA:BD:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498A81801B6F3BF0E01E2B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e676d6d-bf3b-3a8c-b38e-bb3dfbb3eca0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396585
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:81:80:1b:6f:3b:f0:e0:1e:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9f0a71a3-fa7b-460c-8bdb-e20bcc9081c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:73:dd:04:a4:0f:c0:48:c5:84:11:2e:66:
                    11:3c:47:10:bf:a3:31:57:ce:76:3c:87:8e:ea:b2:
                    34:af:33:ad:61:6b:6b:fc:e2:10:b2:8d:06:55:cf:
                    72:1f:b4:55:b1:c6:2f:e2:3f:9a:7d:2e:a5:7e:37:
                    af:18:80:8f:dc:41:82:86:11:6b:32:cd:8c:6d:0f:
                    50:f7:eb:7e:0b:8c:f5:69:dc:f1:01:4b:fc:d7:b7:
                    d7:81:d7:f5:0b:b7:9c:9a:83:48:a7:68:25:89:97:
                    09:15:d1:6c:a9:c5:b4:7d:5b:3c:20:73:d7:ed:c4:
                    e0:30:39:e5:fd:e8:1c:f1:78:82:f7:9a:53:33:f6:
                    de:dd:76:45:f0:ae:4e:70:af:de:8f:be:d8:37:74:
                    49:0b:99:18:fc:6f:69:d2:8a:fa:18:e5:df:15:3b:
                    1d:3f:49:72:c0:70:f7:90:4c:73:ef:7c:38:bd:56:
                    c4:ef:ab:b3:d7:1f:5a:59:e3:94:eb:70:f4:1a:f3:
                    95:2e:8e:0f:b9:00:24:c2:e1:29:0f:38:e8:29:10:
                    cc:e6:66:14:cf:40:c9:6c:f0:66:1f:4b:3c:7a:0f:
                    69:90:f8:75:f9:da:58:3a:9f:75:d6:14:ac:85:c7:
                    c0:cc:6b:44:99:5c:74:d7:52:48:fb:d9:97:77:b0:
                    5a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:46:04:F5:F0:8F:7B:40:AF:66:32:5E:7F:8F:9F:2C:A7:DA:BD:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e676d6d-bf3b-3a8c-b38e-bb3dfbb3eca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:a3:52:1b:57:c6:0d:8f:e6:b6:df:91:85:99:c4:de:a8:76:
         f4:85:9a:af:ee:71:48:15:5f:15:fe:42:3e:48:9f:b1:e9:af:
         44:2f:62:18:cb:01:da:ab:09:28:f4:61:c1:90:86:63:34:96:
         11:66:5c:f7:c4:4d:3f:cf:54:b2:62:95:dc:d1:e0:90:8f:a2:
         8b:17:9d:d5:8a:ca:ea:24:01:a8:92:f3:27:ae:a1:f6:84:4f:
         e5:bf:f1:19:09:c0:a9:0e:42:d6:ed:30:09:ed:46:fb:39:7e:
         4d:e5:e7:d4:42:22:d7:55:55:01:b9:81:71:7c:11:c8:46:88:
         e6:be:23:dc:20:7e:52:0c:ad:ca:70:7c:a9:50:d5:5f:a5:da:
         09:87:4d:20:2d:3f:d4:f3:da:6e:f9:bc:64:3e:3d:ab:2b:20:
         0d:2f:ff:64:4c:66:5d:d9:80:23:99:ad:ef:fa:55:da:23:ad:
         93:42:c5:49:6e:7c:59:12:cd:b4:17:50:aa:4e:cc:34:e8:5c:
         bf:87:b9:ed:96:69:ef:e6:42:61:e3:fe:01:05:78:e4:8b:cf:
         a9:74:90:bb:cd:c0:da:36:23:7f:d8:4a:38:e6:46:a3:30:a2:
         0e:d6:88:26:ea:3e:d5:89:54:c6:d3:16:37:67:ab:f9:eb:f7:
         5b:1f:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:54:29 2026 by rpki-client