Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7209ff8-4135-368c-9b01-0fe483ee90c3.roa
File:                     a7209ff8-4135-368c-9b01-0fe483ee90c3.roa (raw, json)
Hash identifier:          qJ1m6/1fCwSTqfTHbZ3eCiRDFivyKzq6phk/ct4XXx8=
Subject key identifier:   3D:C4:37:FC:E4:8E:31:0A:AE:90:99:CA:36:D5:66:95:8F:EB:F9:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1199C4674783069FFFA7C2A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7209ff8-4135-368c-9b01-0fe483ee90c3.roa
Signing time:             Thu 05 Mar 2026 15:20:08 +0000
ROA not before:           Thu 05 Mar 2026 15:20:08 +0000
ROA not after:            Wed 03 Jun 2026 14:20:08 +0000
asID:                     36622
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:99:c4:67:47:83:06:9f:ff:a7:c2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  5 15:20:08 2026 GMT
            Not After : Jun  3 14:20:08 2026 GMT
        Subject: CN=88a7aec6-6de8-4f2d-8ff4-6133b1b4f28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:0d:70:1f:e9:f3:61:2f:b1:30:7d:70:fc:
                    26:81:d2:71:c4:d1:47:80:0a:8f:a4:cb:12:0a:20:
                    fa:46:a9:d3:f2:1f:ab:e9:f1:fc:6c:1d:a6:d6:c4:
                    c7:f0:47:cf:e0:93:7a:6d:36:18:79:75:f3:c8:d7:
                    f4:01:5b:6c:c7:21:a6:f1:eb:0a:68:00:33:dc:c8:
                    2f:21:c1:21:fd:e6:ba:3e:27:27:2b:0c:01:e1:04:
                    39:f6:5a:c4:81:d8:13:97:ac:75:0a:55:71:d7:d6:
                    13:0b:61:77:9e:b2:a3:9c:c1:5a:b3:67:b1:d3:bd:
                    4c:a9:44:45:18:40:9c:ca:ce:a9:61:39:44:7d:e6:
                    73:6f:86:71:a9:e6:c8:28:5e:f9:0d:95:da:b9:10:
                    0c:f2:53:6d:39:ee:7a:04:4c:87:67:e0:ba:a1:a0:
                    f8:45:90:3e:cb:fe:e0:68:2f:cc:70:05:46:ed:ec:
                    3e:e6:d0:98:fe:2e:59:08:6d:33:9a:54:34:c0:d1:
                    21:e1:77:6e:36:27:4e:80:82:1d:b4:3f:26:cc:06:
                    2c:32:71:ac:51:47:39:38:f5:b8:57:17:39:21:bf:
                    89:f9:e1:52:06:c3:c5:ed:10:cf:90:0e:a1:ff:2c:
                    59:5a:6c:88:d3:ee:5c:c8:e2:fa:76:b0:cd:76:10:
                    d3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C4:37:FC:E4:8E:31:0A:AE:90:99:CA:36:D5:66:95:8F:EB:F9:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7209ff8-4135-368c-9b01-0fe483ee90c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f8:e5:ce:c9:d0:b4:66:b5:e5:79:38:bd:c4:85:92:88:5e:
         f2:dd:54:94:d8:3e:e1:2f:97:4e:ca:97:e4:b9:f7:94:26:ae:
         21:5d:58:43:b8:07:77:84:b7:75:0e:9b:e4:af:73:33:8c:bb:
         a7:e2:55:ce:6a:4a:f7:15:63:5e:ba:dc:01:bc:cf:a7:21:08:
         b5:fb:42:c5:dd:e8:86:88:32:07:39:bc:ce:2b:50:92:3c:9a:
         e4:a0:d2:45:b5:7b:e4:95:b9:ad:60:d4:e3:fe:c5:a7:7b:2f:
         2a:bd:64:d2:07:0e:8d:37:63:79:34:02:88:f0:e8:57:33:da:
         68:5d:3a:4c:59:29:9a:b4:46:46:91:34:df:50:d9:e9:3f:6d:
         03:a7:e2:78:5c:d9:10:3d:2b:f4:1c:ac:24:b4:cb:f2:dd:76:
         a8:a5:f0:dd:1f:60:f7:2b:96:9c:a2:c3:ad:42:28:29:02:6a:
         be:92:e6:c5:63:16:be:1b:d0:dc:e5:13:56:19:22:dd:d0:ef:
         99:22:15:d1:cc:02:42:1e:a2:f2:16:4f:8b:3e:a4:42:11:9c:
         a0:18:84:69:5c:df:91:82:1c:b5:b9:bc:d3:e8:59:3b:4b:d1:
         18:5c:7c:6b:52:b5:9c:44:3b:ce:4b:59:95:7d:1f:3a:f3:7c:
         5c:58:f3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:30 2026 by rpki-client