Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/119d196f-dc03-35f2-9a68-107005815d2e.roa
File:                     119d196f-dc03-35f2-9a68-107005815d2e.roa (raw, json)
Hash identifier:          z3V4WFBNt1uEmyguQbpVQa89l6a33Zn1uomz89gvzPU=
Subject key identifier:   27:08:3B:6A:11:EC:4B:B9:F1:27:10:4C:4C:7B:AD:F7:66:6C:E9:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF210B11AF9BC23BAAFE2EFF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/119d196f-dc03-35f2-9a68-107005815d2e.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     396600
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:b1:1a:f9:bc:23:ba:af:e2:ef:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=479fba69-ae2b-48b2-a824-d26fa01572bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c6:8b:b0:20:9b:06:8a:95:23:f3:fb:af:08:
                    09:9e:20:4e:11:f3:40:5d:8e:f8:29:ed:39:de:5d:
                    74:6d:b2:e9:b0:ce:8e:37:e3:fb:49:7e:5e:31:89:
                    61:b6:5f:20:76:0c:0c:3c:42:6c:7d:7f:94:2f:a1:
                    00:fb:c4:e7:cd:d5:d7:bc:49:f6:78:57:93:b9:3f:
                    41:ee:1f:34:fd:40:ad:8f:ce:90:77:51:39:eb:32:
                    03:be:c5:f5:4d:4d:9d:6f:50:f1:5e:9b:67:2e:37:
                    78:87:48:0f:2f:1e:bb:23:91:2c:a5:80:3b:90:6e:
                    48:91:2a:bf:b9:f4:33:67:ed:a0:69:0c:50:8c:6e:
                    e1:8e:b6:cf:84:1b:4b:3d:2f:22:c9:6e:fa:b0:07:
                    d8:8b:ba:20:2f:d9:a5:cd:b8:17:c1:61:07:af:ea:
                    91:c8:75:13:c7:17:b6:e3:a0:f6:50:18:67:6d:06:
                    15:83:8b:f3:79:86:ae:6f:e5:6e:c5:b1:6f:f6:7f:
                    e6:f9:68:fe:e2:8e:2d:33:48:b7:17:61:ce:b8:72:
                    b2:15:bf:eb:fe:ba:af:31:c9:c1:7e:49:01:e6:53:
                    3f:97:13:52:ed:a9:e6:0f:72:00:7e:f5:c0:da:31:
                    71:c1:b2:4f:69:0c:a7:65:5b:ae:e7:5a:2b:f0:18:
                    8c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:08:3B:6A:11:EC:4B:B9:F1:27:10:4C:4C:7B:AD:F7:66:6C:E9:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/119d196f-dc03-35f2-9a68-107005815d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:72:55:b8:8e:c8:ac:c5:b8:a0:a7:e7:83:e7:6e:ae:ff:aa:
         7c:73:be:59:db:85:ea:26:a2:3f:64:f2:fc:d1:7c:b5:ee:63:
         b4:b8:23:48:15:68:17:7f:66:a7:a1:a4:7a:1e:30:3c:cc:8e:
         45:e4:92:81:5a:ab:a1:59:bb:b6:c1:97:31:fd:ce:67:e3:fb:
         2d:44:33:37:dc:40:78:50:48:65:a8:7a:49:d0:9f:37:4f:67:
         a3:e3:8e:4f:0c:ca:3c:ee:7a:28:ab:4b:bb:25:d6:52:2e:63:
         8f:c9:5c:ad:90:7e:cd:12:8e:5b:3a:9b:af:75:6c:18:7b:f8:
         95:a0:72:2a:4a:51:76:7d:92:b1:a6:63:75:36:33:79:6b:e9:
         b6:8d:76:85:76:d4:f2:3f:df:0f:8d:d7:e5:31:12:4d:ae:c1:
         71:5d:5f:3a:bf:99:02:b3:dc:41:ca:c8:94:a4:b4:b6:95:b5:
         ef:a2:28:98:15:90:3f:62:11:a5:b7:82:7d:fd:e7:59:c5:64:
         8f:9e:91:38:12:e6:4d:f2:2a:55:00:66:2a:be:b9:aa:a3:a4:
         19:d0:67:08:bb:9a:36:be:f7:ed:5e:8c:87:4b:8a:bd:44:2a:
         31:20:2f:46:7b:9f:89:5b:2b:b6:b8:2a:55:9c:4c:8d:09:5f:
         ea:a3:51:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yELEa+bwjuq/i7/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk
NDc5ZmJhNjktYWUyYi00OGIyLWE4MjQtZDI2ZmEwMTU3MmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8aLsCCbBoqVI/P7rwgJniBOEfNAXY74Ke05
3l10bbLpsM6ON+P7SX5eMYlhtl8gdgwMPEJsfX+UL6EA+8TnzdXXvEn2eFeTuT9B
7h80/UCtj86Qd1E56zIDvsX1TU2db1DxXptnLjd4h0gPLx67I5EspYA7kG5IkSq/
ufQzZ+2gaQxQjG7hjrbPhBtLPS8iyW76sAfYi7ogL9mlzbgXwWEHr+qRyHUTxxe2
46D2UBhnbQYVg4vzeYaub+VuxbFv9n/m+Wj+4o4tM0i3F2HOuHKyFb/r/rqvMcnB
fkkB5lM/lxNS7anmD3IAfvXA2jFxwbJPaQynZVuu51or8BiM2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCcIO2oR7Eu58ScQTEx7rfdmbOlYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTE5ZDE5NmYtZGMwMy0z
NWYyLTlhNjgtMTA3MDA1ODE1ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhyVbiOyKzFuKCn54Pnbq7/qnxzvlnbheomoj9k8vzRfLXuY7S4I0gV
aBd/ZqehpHoeMDzMjkXkkoFaq6FZu7bBlzH9zmfj+y1EMzfcQHhQSGWoeknQnzdP
Z6Pjjk8MyjzueiirS7sl1lIuY4/JXK2Qfs0Sjls6m691bBh7+JWgcipKUXZ9krGm
Y3U2M3lr6baNdoV21PI/3w+N1+UxEk2uwXFdXzq/mQKz3EHKyJSktLaVte+iKJgV
kD9iEaW3gn3951nFZI+ekTgS5k3yKlUAZiq+uaqjpBnQZwi7mja+9+1ejIdLir1E
KjEgL0Z7n4lbK7a4KlWcTI0JX+qjUX4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:50:32 2026 by rpki-client