Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7097c82-355d-325b-8398-4e2a164bfbe0.roa
File:                     b7097c82-355d-325b-8398-4e2a164bfbe0.roa (raw, json)
Hash identifier:          saxOrDXMN3x09VNe9mKLkG7EOqYgnHtwXfp93pAhO8I=
Subject key identifier:   91:B3:71:98:D2:3F:A4:EF:1E:22:8F:D2:E2:04:DD:53:BC:2F:8A:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1199C18354A10F47ACEE2580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7097c82-355d-325b-8398-4e2a164bfbe0.roa
Signing time:             Thu 05 Mar 2026 15:20:07 +0000
ROA not before:           Thu 05 Mar 2026 15:20:07 +0000
ROA not after:            Wed 03 Jun 2026 14:20:07 +0000
asID:                     396605
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:99:c1:83:54:a1:0f:47:ac:ee:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  5 15:20:07 2026 GMT
            Not After : Jun  3 14:20:07 2026 GMT
        Subject: CN=29b83c35-baef-42c7-b8d4-868d27f325a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ec:54:3f:da:b5:52:95:d7:df:37:df:74:82:
                    79:54:88:39:10:54:19:8b:14:4b:b5:5c:34:58:b2:
                    5b:6e:fc:d4:61:f2:5a:6a:55:37:1a:ae:11:8c:df:
                    e2:b1:73:f8:7d:c0:60:1a:2f:68:f4:98:57:41:30:
                    7a:1a:0c:4e:f2:f6:77:9f:44:d3:e1:66:2c:68:ac:
                    03:38:4b:4d:21:a6:92:ee:09:cd:bd:75:44:54:8c:
                    84:04:e1:db:e1:ca:f7:12:32:63:6a:50:60:d5:24:
                    1c:3c:40:16:d2:7a:65:bf:60:da:0a:99:08:23:96:
                    b6:a5:75:bc:0b:39:4e:8f:44:18:90:66:e2:28:9d:
                    7c:f4:a0:e6:a5:9f:39:15:13:4e:83:f8:e0:f9:65:
                    2b:80:4e:14:c5:9c:b6:0b:b5:e4:4e:07:e1:77:a2:
                    c7:d4:f1:ae:10:3e:e0:20:a5:ab:aa:76:bd:1a:07:
                    19:12:62:95:22:2f:c5:03:15:1a:7a:c5:d0:95:e0:
                    01:ed:0d:58:db:31:5d:0e:e4:93:32:30:47:cd:71:
                    20:7a:f5:b8:3b:e7:30:b7:8a:5c:ed:0d:b6:4f:fc:
                    b4:94:b4:d0:d3:b5:7f:e3:f4:f2:fd:66:43:3f:16:
                    02:bf:6d:cd:6a:4c:66:c1:46:b6:fe:61:81:d5:65:
                    be:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B3:71:98:D2:3F:A4:EF:1E:22:8F:D2:E2:04:DD:53:BC:2F:8A:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7097c82-355d-325b-8398-4e2a164bfbe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:14:af:20:09:98:2f:40:cc:3e:32:9c:f7:45:84:4c:0d:c8:
         78:84:b2:05:cb:a9:75:a6:89:f0:94:70:d8:6e:93:d8:1c:6b:
         1a:38:46:ff:c6:ac:be:49:88:8c:0c:e7:79:c4:d7:2d:25:e1:
         2b:52:df:b7:90:3a:a2:26:ed:49:75:6b:f2:85:12:a9:2d:95:
         dd:4f:62:88:48:2a:8e:40:5b:25:bb:1e:33:0d:48:88:b1:b8:
         d2:b5:95:8f:93:2f:2f:60:0d:3e:c3:4b:6d:a3:81:0e:8e:f5:
         f8:ea:08:4a:9a:b3:5d:42:48:eb:9b:51:5a:26:cf:ae:ba:d5:
         93:7e:11:de:f4:5e:b4:93:9c:4e:03:47:3f:9b:87:cc:e5:87:
         0a:b2:cb:95:1a:81:51:7f:19:c2:fc:2a:9a:95:51:37:de:e0:
         9b:30:1e:34:5b:1e:55:4d:0e:51:db:dd:ad:05:eb:6e:16:ec:
         ea:23:04:8c:36:ef:4c:d2:b6:ac:85:b4:ca:89:82:86:ff:20:
         45:2e:33:ca:2e:d8:75:48:62:94:33:42:e0:85:5a:8e:e1:e9:
         16:5c:38:5e:92:e7:23:c7:3a:8a:51:c4:e5:f4:65:5e:fb:9a:
         dd:d5:8f:fd:ca:0b:f5:d0:c3:35:ab:57:60:47:1a:de:71:ce:
         61:50:61:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:13:45 2026 by rpki-client