Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aae6cbee-0bd7-3ece-8356-3232d1746a8f.roa
File:                     aae6cbee-0bd7-3ece-8356-3232d1746a8f.roa (raw, json)
Hash identifier:          hIXZP4/W6SFwdou/jKfeha08gX7+ZHBLq8xT6lEKPd8=
Subject key identifier:   C2:37:41:AB:23:50:C5:4E:C2:75:7D:41:8D:1A:B1:09:66:DB:D9:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1199BA71C87189A4E65DF5A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aae6cbee-0bd7-3ece-8356-3232d1746a8f.roa
Signing time:             Thu 05 Mar 2026 15:20:04 +0000
ROA not before:           Thu 05 Mar 2026 15:20:04 +0000
ROA not after:            Wed 03 Jun 2026 14:20:04 +0000
asID:                     397196
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:99:ba:71:c8:71:89:a4:e6:5d:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  5 15:20:04 2026 GMT
            Not After : Jun  3 14:20:04 2026 GMT
        Subject: CN=e15d12fa-1b41-4e34-9f42-2e0e8155a36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:c2:58:ea:47:77:e8:5f:a7:23:fd:fe:e0:
                    29:91:4d:7f:73:50:89:ea:72:a0:1b:bb:1b:63:ad:
                    95:8c:3f:7d:fc:6e:34:69:d5:e8:34:f0:37:cc:31:
                    b0:89:53:46:3a:1e:9c:52:7c:35:11:03:ac:d1:74:
                    b8:18:ee:57:35:2a:88:72:37:48:2c:2a:fa:41:88:
                    be:72:c8:46:b1:c7:7c:38:e2:c3:0f:73:7d:fe:c7:
                    0b:eb:ee:b6:af:11:f8:c5:8c:1f:db:1c:f2:cb:79:
                    94:36:c6:94:ca:69:27:c3:dd:f4:f0:d2:85:fd:ed:
                    74:3c:ad:3b:cd:4a:e2:ce:45:0f:e0:5c:e1:7d:d8:
                    a9:63:bc:b1:bd:4c:6e:db:94:a6:12:a0:66:10:c4:
                    1b:e2:bc:e3:6c:db:ba:8d:d7:15:ac:1f:59:02:0b:
                    2d:14:02:3b:52:98:5a:13:2f:1d:f1:b0:87:8a:65:
                    cb:51:80:14:73:45:19:ce:f5:42:39:0c:90:88:f8:
                    0e:c3:8a:50:71:d6:a6:48:3b:2d:0e:ac:28:e3:eb:
                    3d:f4:2d:e9:81:08:9f:a9:70:5a:6e:98:55:f2:47:
                    26:34:93:7a:83:c9:1d:f2:4d:4f:0e:7a:f8:99:3e:
                    c3:83:5b:8f:3a:0f:3d:0e:fa:f8:47:92:c0:33:a0:
                    d9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:37:41:AB:23:50:C5:4E:C2:75:7D:41:8D:1A:B1:09:66:DB:D9:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aae6cbee-0bd7-3ece-8356-3232d1746a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:ec:fb:bc:d7:a7:28:48:4e:bb:e6:2e:19:99:e3:f6:fc:
         00:d2:a9:10:c7:a1:c2:c3:97:52:82:43:ef:65:35:fb:7a:44:
         77:11:f7:ac:2a:6b:52:e2:f1:32:9b:8b:39:8f:d5:13:9f:d5:
         8a:c1:99:85:bf:59:0b:2b:7f:38:ea:64:d8:a6:b1:84:72:c8:
         24:75:6f:af:3e:91:33:d3:58:76:46:08:fa:a2:f9:f0:99:4c:
         0f:ec:8b:d7:b6:11:d8:e9:af:6d:cc:2f:9d:bd:00:b9:14:99:
         79:05:ba:90:63:bd:ac:9b:6f:53:2d:29:44:76:b1:a7:d3:68:
         18:38:b2:36:f2:48:15:bc:2b:fc:a5:4a:34:a9:6a:05:5b:b7:
         53:1e:90:53:18:e0:81:2f:1d:8e:b7:2b:78:bf:a6:75:29:c0:
         0b:b8:4b:ce:f8:35:50:2b:71:77:87:09:b2:20:7d:8a:29:55:
         cd:1e:0e:b8:45:80:7e:2e:81:1f:cf:66:3f:74:22:ad:45:c1:
         51:db:c3:08:2e:33:fe:8e:c2:54:be:da:b4:34:3f:3e:13:62:
         4f:18:d7:ca:4c:a2:5e:32:22:ee:1d:ab:69:61:6b:44:55:ec:
         4b:5c:72:85:11:63:c3:a1:b1:1f:5a:3e:59:b0:c5:1e:b1:44:
         61:d2:bd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:01:04 2026 by rpki-client