Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96b6b034-1587-3a24-b59b-4d1308634dee.roa
File:                     96b6b034-1587-3a24-b59b-4d1308634dee.roa (raw, json)
Hash identifier:          gHj2eluOQM6hICOyikph7KUTp2Wd9yievBs9YenCodU=
Subject key identifier:   3A:13:7E:DB:58:C7:5D:CD:E9:C9:68:49:39:50:06:BB:AA:1D:DE:49
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1199C3F3D50E952B82C78640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96b6b034-1587-3a24-b59b-4d1308634dee.roa
Signing time:             Thu 05 Mar 2026 15:20:08 +0000
ROA not before:           Thu 05 Mar 2026 15:20:08 +0000
ROA not after:            Wed 03 Jun 2026 14:20:08 +0000
asID:                     40717
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:99:c3:f3:d5:0e:95:2b:82:c7:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  5 15:20:08 2026 GMT
            Not After : Jun  3 14:20:08 2026 GMT
        Subject: CN=90cdb297-d8b5-468f-9dfc-50a99be41a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ec:c6:c2:51:ee:3a:ee:b1:37:9e:ac:40:80:
                    35:aa:f2:bf:f5:2e:4a:b9:6a:ab:f1:39:1d:9b:03:
                    6d:c9:1e:6f:60:fa:35:8a:c2:57:8a:a1:6b:b7:65:
                    4c:b3:30:9d:d4:58:6b:94:33:30:47:ce:1a:2c:51:
                    d8:7a:ed:4f:eb:38:30:29:2a:50:cd:6c:db:c4:54:
                    47:f9:89:b5:ca:b3:87:d7:c0:71:32:33:3f:ca:9a:
                    e6:5f:d6:11:21:27:16:6c:d3:3e:2a:b7:e7:c5:81:
                    8a:47:c8:dd:71:a2:68:72:63:1b:bc:5b:58:7f:2a:
                    c7:64:2d:3b:18:60:7f:4c:4b:79:b3:3f:9f:23:c2:
                    31:36:fa:da:b5:13:f4:8c:4d:fd:ee:91:07:46:d6:
                    e4:7b:b4:ad:35:19:fa:65:70:5f:a2:55:0a:ad:8e:
                    09:77:6f:61:4c:9d:50:1c:8b:f3:00:ad:37:ee:22:
                    d4:dc:80:62:e8:1f:f4:e4:1c:de:58:ef:30:97:e9:
                    07:66:8d:5e:ee:06:2d:41:f2:f0:e7:5f:8c:75:74:
                    6a:d8:6d:d4:b1:cf:de:bf:2b:fc:bc:f3:ea:9d:8c:
                    cb:a5:a9:a4:af:df:76:85:7f:a5:b4:b0:82:b0:a4:
                    d9:d7:4b:8a:4d:79:94:dd:a0:78:f7:fa:a3:87:04:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:13:7E:DB:58:C7:5D:CD:E9:C9:68:49:39:50:06:BB:AA:1D:DE:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96b6b034-1587-3a24-b59b-4d1308634dee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:65:46:98:02:8f:f3:55:d5:a1:fd:48:98:bd:08:13:2a:b8:
         6b:93:ed:34:15:de:4c:53:e3:90:88:48:64:58:e1:42:1b:1a:
         5c:79:ed:a7:4f:c3:00:72:3f:e9:ff:ae:e9:fe:19:94:36:c8:
         34:79:88:84:bc:59:59:12:3c:56:d4:11:93:3e:e9:34:b3:27:
         47:85:85:b4:8a:b8:da:6e:8a:48:3b:c9:ad:cd:49:03:90:06:
         3e:56:07:0e:ee:ef:da:39:a6:f8:f0:06:41:36:a4:5f:c8:4b:
         77:53:88:d8:24:65:3e:d8:15:c8:9b:a8:82:7e:e1:20:e2:2b:
         9e:8b:63:1e:5e:4d:07:07:b3:1c:ce:70:5d:2e:4f:1d:58:54:
         42:ed:23:23:e3:ce:8a:43:71:9f:99:8e:1c:1b:b6:d7:07:9f:
         29:45:54:9d:44:3d:26:36:23:94:e1:fd:22:2c:e2:88:5b:74:
         23:31:a9:85:f9:6d:fe:ff:f2:14:16:ad:98:68:bf:ab:47:c9:
         47:94:75:42:9b:71:40:2d:2b:a7:b4:87:60:77:b0:18:1f:4d:
         d7:8a:e3:fe:33:a4:e1:8f:26:17:84:97:a9:72:d8:fb:fb:96:
         46:6b:29:91:37:fc:3e:1d:3b:45:21:f3:2c:3a:ea:56:86:dd:
         17:9e:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:38:36 2026 by rpki-client