Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/c1cc6f6b-bf4c-3f76-8b4d-aef14a0b50eb.roa
File:                     c1cc6f6b-bf4c-3f76-8b4d-aef14a0b50eb.roa (raw, json)
Hash identifier:          5M/nQfrS/nGKjLxm/4JR7X48LcB1Jj1PnXDlbHxx85Q=
Subject key identifier:   7D:18:7C:3B:B1:2C:11:7F:86:0C:4B:E4:C8:E3:45:CC:3C:7A:51:D8
Certificate issuer:       /CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9
Certificate serial:       010D0C9F4328584E0C1ED08C4CBAF35A17DC8080
Authority key identifier: 8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/c1cc6f6b-bf4c-3f76-8b4d-aef14a0b50eb.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     8849
IP address blocks:        162.247.152.0/24 maxlen: 24
                          162.247.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:d0:8c:4c:ba:f3:5a:17:dc:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=48f0089f-1d31-4525-974b-8a9c26a72fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c6:d5:71:b8:91:2f:9b:61:dd:d0:53:e9:42:
                    74:cc:78:ee:a4:d3:ed:9a:a0:de:92:c1:76:07:60:
                    ac:9d:4e:5f:11:88:ca:db:48:f3:9d:82:eb:a5:cc:
                    d7:82:ef:5b:04:e9:39:a9:04:9c:e4:63:49:c6:82:
                    24:62:5f:61:1d:e1:06:4c:d6:03:d0:58:62:c4:79:
                    a5:d1:a7:99:ed:2d:f1:a9:00:21:67:63:33:36:ff:
                    46:8d:bd:96:d5:64:9d:ac:ec:7f:3a:68:59:60:d9:
                    22:ed:ae:8d:e2:68:d6:57:c3:56:e7:e5:35:df:91:
                    25:7f:24:d8:54:1c:13:b4:67:d3:7c:a7:48:f7:0e:
                    6e:8b:ed:b8:dc:19:50:f3:48:13:ba:3f:a6:82:1d:
                    d3:54:55:f3:53:bc:77:15:0b:78:47:e0:20:53:19:
                    46:c0:85:3d:b5:dc:1e:36:b0:79:ad:01:de:f9:70:
                    41:99:5f:4e:e7:9d:06:43:20:a3:52:3f:4d:46:bc:
                    a0:5e:b1:aa:c6:16:3a:ec:40:dc:6b:33:11:e8:54:
                    89:fd:60:1c:e5:d7:83:b4:77:27:78:a6:33:bd:35:
                    e9:52:16:b6:7a:7d:a6:ac:2d:2e:d2:bc:bc:9d:54:
                    63:05:18:4e:0c:f5:42:f5:e1:5c:21:c5:ad:b4:cd:
                    12:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:18:7C:3B:B1:2C:11:7F:86:0C:4B:E4:C8:E3:45:CC:3C:7A:51:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/c1cc6f6b-bf4c-3f76-8b4d-aef14a0b50eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl

            X509v3 Authority Key Identifier:
                keyid:8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.152.0/24
                  162.247.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d7:e6:86:4b:c7:95:37:b9:73:93:48:8e:60:b2:c7:a4:8c:
         5e:a8:a5:74:4b:d4:67:da:73:70:0d:17:e7:39:14:f3:e2:e1:
         79:e1:87:c5:64:71:3d:37:54:60:63:20:db:92:a7:53:38:a3:
         05:4e:66:11:48:50:32:b7:d1:1d:25:33:a6:fd:8f:7e:70:8b:
         05:23:15:0c:5c:4b:a3:b6:fc:14:ff:c6:d2:29:5a:68:2e:9e:
         e8:e9:ad:fe:61:fb:01:b9:e5:34:73:43:05:ff:ae:e1:3b:e1:
         d9:3e:d6:ed:06:ad:54:0e:42:0f:83:95:7e:4b:6e:19:24:d7:
         07:a8:99:e3:e7:ca:43:5d:9b:33:19:93:b3:9c:ca:64:4e:4d:
         96:af:4b:18:d4:8a:33:06:34:c5:93:0f:d9:6a:d8:89:b3:b2:
         5d:8d:d2:1e:3f:2a:ac:be:eb:4e:64:07:88:6f:16:7a:d4:d2:
         5b:0e:b6:9a:fe:b6:c4:63:d4:1f:f2:9d:40:19:3e:21:7b:a6:
         b2:a7:db:65:47:a3:a7:0c:f7:70:03:4a:fa:dc:b8:23:98:e8:
         97:56:7b:67:eb:d2:1a:16:94:e3:1d:75:5c:a3:94:7f:01:e1:
         b0:c1:51:90:68:19:8e:3d:42:73:09:66:99:ec:b7:68:cb:b5:
         a2:df:96:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:34:02 2026 by rpki-client