Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a000c93d-58c2-3617-bfe1-38ebbdbd7901.roa
File:                     a000c93d-58c2-3617-bfe1-38ebbdbd7901.roa (raw, json)
Hash identifier:          v1yFvzclyBOfefJ7N+hTHZdFH4EJl2Ar/f4/As0137E=
Subject key identifier:   8C:AD:3B:74:A4:82:E2:B3:15:DA:C1:F3:32:7B:5F:37:4C:C5:25:F6
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584D3F64F0F603A0F6332AD15280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a000c93d-58c2-3617-bfe1-38ebbdbd7901.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     396356
IP address blocks:        192.253.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:f0:f6:03:a0:f6:33:2a:d1:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=6ca15488-1a06-4aa9-a5a7-3186af73bd92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:26:88:c8:11:67:ef:31:72:2f:13:1f:71:
                    32:82:b3:95:45:3b:e9:d6:f0:e8:d5:45:dd:3e:97:
                    9e:ad:e5:d8:10:32:84:db:80:f7:79:c9:82:4e:43:
                    d1:ce:6e:30:e5:50:cf:cb:02:70:08:39:37:04:59:
                    01:d2:6a:f6:f8:3a:cf:d6:09:74:49:c3:72:b8:f6:
                    78:cb:69:0a:20:87:87:29:8c:3e:d8:fb:a5:b9:92:
                    2a:e4:94:12:c1:90:6f:d5:5c:82:00:87:15:d7:3c:
                    76:d1:b6:52:61:dd:ee:ed:33:7f:8b:61:e4:49:b3:
                    97:da:c7:27:64:b2:cb:ee:de:94:b3:2c:7f:30:dd:
                    35:e2:26:f1:2f:a7:45:f3:1f:6a:ea:f7:f5:55:9a:
                    e3:1f:f5:20:f2:60:7e:02:a6:d3:2f:a5:ae:c1:11:
                    90:11:ac:3e:23:7f:96:ea:4a:c8:ac:4e:d7:10:2f:
                    ae:72:aa:2c:6a:ea:4d:dc:83:2b:2e:db:77:2c:28:
                    a8:fe:52:b4:28:0a:2f:b9:bc:c2:6a:85:74:e4:eb:
                    23:fd:79:23:75:e9:e3:0c:d0:42:29:57:13:0f:b6:
                    2d:d3:05:5d:0b:d5:22:2c:58:4d:37:63:1b:f9:73:
                    98:1d:0e:76:88:39:da:da:e5:0d:9e:5a:2b:b5:bb:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AD:3B:74:A4:82:E2:B3:15:DA:C1:F3:32:7B:5F:37:4C:C5:25:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a000c93d-58c2-3617-bfe1-38ebbdbd7901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.253.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:4b:44:43:4f:2b:f0:fb:e1:7f:a4:ea:e1:4d:43:db:6f:a7:
         e1:42:9f:54:b1:cc:b8:eb:bd:9d:e8:03:0c:57:b9:09:59:d8:
         97:08:fc:d7:49:6b:f9:c1:bc:30:d2:c0:2b:ec:3b:fa:e1:0c:
         c8:d8:a7:eb:ab:ac:a9:f3:83:09:f4:62:3d:f3:31:5a:b6:ef:
         8c:e7:07:fe:77:4a:c1:d4:0c:be:73:49:b1:61:63:5e:8c:49:
         82:b1:68:03:1f:46:0f:39:b7:53:fc:e2:70:00:bd:6b:13:99:
         30:5e:a9:78:06:d2:36:93:bd:38:5a:2d:59:9a:68:af:98:16:
         17:16:f9:03:ac:2e:48:a6:e5:9f:70:59:80:ab:0e:24:81:cb:
         02:2a:c4:4f:fa:97:10:2d:17:a0:02:b5:cd:05:c7:95:91:69:
         a1:0c:22:b7:15:ba:d0:d4:ef:e4:a2:5b:7e:85:51:0c:57:1d:
         f3:b1:98:f1:01:50:9a:f4:85:bb:af:57:3d:35:4e:1a:8e:e1:
         79:4c:2b:61:29:16:0c:d6:59:31:bc:3f:83:2f:b8:64:65:f6:
         dd:f9:f8:15:cf:2f:81:b4:a6:12:2d:6e:71:22:ed:09:2d:70:
         a9:46:e3:63:d4:0f:d0:ff:48:4c:f5:36:1e:fd:d5:3a:34:fc:
         d0:ca:36:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:06 2026 by rpki-client