Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a1b2574-4160-3ae2-b326-b7c8127b4d4e.roa
File:                     7a1b2574-4160-3ae2-b326-b7c8127b4d4e.roa (raw, json)
Hash identifier:          vE8pHuoEx3jSwFCNAYdJ6m26kd+OAx/3CUu2o/eHEBQ=
Subject key identifier:   F3:1C:D1:23:84:D7:80:42:F0:5B:C2:F9:BD:1D:D3:AC:53:EA:14:FF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1199C6ECF7D3071DFA994380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a1b2574-4160-3ae2-b326-b7c8127b4d4e.roa
Signing time:             Thu 05 Mar 2026 15:20:10 +0000
ROA not before:           Thu 05 Mar 2026 15:20:10 +0000
ROA not after:            Wed 03 Jun 2026 14:20:10 +0000
asID:                     396540
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:99:c6:ec:f7:d3:07:1d:fa:99:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  5 15:20:10 2026 GMT
            Not After : Jun  3 14:20:10 2026 GMT
        Subject: CN=f1e84d82-04df-43c1-915f-33e405a04548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:5a:5f:e2:6c:c0:e6:ff:ec:17:3c:d4:52:
                    d2:e6:a2:91:6c:9a:69:a0:b2:cd:20:db:f2:ae:d1:
                    0e:c8:39:04:4e:b1:9e:52:50:b9:f6:8f:b6:1f:81:
                    4d:ed:26:1c:2b:9f:09:fb:70:de:62:a7:f6:92:43:
                    21:72:5f:82:5c:51:5e:b3:c5:8b:60:dd:31:8c:d4:
                    ce:e8:18:85:dc:7f:43:be:98:c5:5b:f5:8c:94:bb:
                    35:2b:e0:3d:4f:3d:97:22:f4:ae:dd:81:82:ed:ca:
                    f1:d7:b1:83:03:20:06:e8:74:0f:17:2c:03:19:de:
                    1c:bc:1a:55:0d:d0:5f:84:be:27:af:99:60:03:6f:
                    b4:09:36:e5:96:1a:35:8f:fe:8c:b3:03:34:19:19:
                    c8:4d:ca:33:17:81:c8:c5:27:72:eb:45:50:9a:4c:
                    16:84:51:d3:38:cb:c2:9f:d4:fd:75:1c:d6:ac:8e:
                    51:b0:54:15:f8:b8:09:50:1f:39:35:86:0b:75:ce:
                    3d:4b:46:ef:4d:12:a1:c1:2e:bc:cb:69:5f:41:44:
                    13:ad:57:a1:09:23:24:c0:72:8e:dd:79:d9:b7:51:
                    ab:bb:c5:06:cc:02:ea:bb:5c:1e:c6:a3:05:2a:67:
                    b6:b9:db:62:1f:61:93:ab:c9:c7:41:cf:bf:e2:54:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1C:D1:23:84:D7:80:42:F0:5B:C2:F9:BD:1D:D3:AC:53:EA:14:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a1b2574-4160-3ae2-b326-b7c8127b4d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:07:a3:b3:b8:44:48:af:9c:6d:41:68:d3:5d:d7:f5:c9:8e:
         37:d8:8c:af:c0:5a:3d:2b:41:ec:2a:d4:f1:30:9b:c9:21:98:
         be:27:77:c5:eb:22:18:18:a0:24:9f:93:58:a7:5a:21:75:f5:
         11:16:d0:73:e6:7a:51:05:24:cf:76:37:a3:9c:cb:2a:19:ba:
         bd:91:2e:a2:f9:2c:e7:c8:04:81:96:c5:20:d6:cc:1d:0f:83:
         d9:8f:47:ac:c8:da:91:fb:22:78:6d:fc:85:7b:75:18:ea:c7:
         3f:f8:e6:6b:cb:22:85:10:84:ea:d0:74:6d:95:cb:ba:b3:c9:
         d7:46:52:eb:b9:17:57:f8:3e:f8:c3:48:31:0c:1c:50:79:54:
         98:b1:b0:8a:09:32:9f:76:cc:a5:d3:78:9c:91:6a:15:a5:ad:
         63:24:54:f4:34:65:ad:14:76:a7:7e:49:e3:41:10:69:af:9b:
         2a:e5:14:06:2b:68:f3:0e:58:6e:37:09:a9:07:8b:0d:42:00:
         8c:1a:85:2e:d2:07:a7:ee:cd:1d:fa:d9:f9:be:71:09:16:0b:
         96:a2:7a:d4:10:62:ba:fe:e0:f3:c9:c1:cd:fe:11:bd:27:c2:
         53:2d:09:c6:a4:4a:a4:c2:44:78:10:00:1b:92:2c:fc:5c:a8:
         78:50:95:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:02 2026 by rpki-client