Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a94a189-0270-32d1-bec7-1c195c06dda1.roa
File:                     8a94a189-0270-32d1-bec7-1c195c06dda1.roa (raw, json)
Hash identifier:          Y8DKrcxYdiw+GACuUDSqo9GvZwiD2XPkbdD29b5kV/Q=
Subject key identifier:   7C:E8:25:09:64:C1:84:AB:1F:46:03:98:1A:6F:18:AB:D0:3B:7E:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF210ADB091442B0D90AC49B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a94a189-0270-32d1-bec7-1c195c06dda1.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     397210
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:ad:b0:91:44:2b:0d:90:ac:49:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=e949272f-b437-4ffb-a934-38da4cb903b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e6:86:d4:98:ee:71:15:8b:f7:01:92:29:dc:
                    0c:e3:e6:12:88:a2:20:34:69:83:4c:12:ca:ae:1e:
                    07:7b:7d:85:49:10:bb:cf:a0:26:4a:d0:60:67:a1:
                    2a:9a:a3:d7:9f:f3:29:b0:58:6f:21:81:e3:30:8d:
                    06:6c:47:d9:47:1a:bd:79:98:38:92:d2:08:31:9a:
                    8b:c1:55:5c:de:35:bb:17:02:ff:07:3a:28:30:26:
                    f4:0b:1b:ab:6a:26:a7:0a:3c:b2:67:42:53:c8:4c:
                    62:c1:1b:5e:74:34:04:26:c4:76:14:3e:1a:1b:63:
                    cf:8c:9d:65:6f:de:f2:99:be:f4:7c:32:ce:da:c9:
                    aa:f9:2d:11:e4:43:e5:da:9a:c4:1a:60:a9:23:53:
                    0c:d6:3f:b6:97:62:b1:7f:0c:1a:95:84:6a:e2:bf:
                    01:7b:aa:04:89:7f:70:9f:8c:86:07:06:d8:42:2f:
                    20:3e:ad:b5:5f:3e:4c:93:91:22:89:a3:49:9a:98:
                    f7:d9:60:97:fc:11:36:e6:1d:2d:0a:18:e0:69:a4:
                    87:3e:2d:a5:e4:ad:ab:3e:14:b3:51:c1:83:33:c4:
                    24:18:31:cd:54:25:80:19:62:79:34:01:59:a5:be:
                    39:42:81:7f:cc:a4:f4:68:9b:1c:98:0b:2a:8c:f8:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E8:25:09:64:C1:84:AB:1F:46:03:98:1A:6F:18:AB:D0:3B:7E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a94a189-0270-32d1-bec7-1c195c06dda1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:73:25:c1:9d:66:4b:59:b4:42:7d:94:ea:08:14:cd:c1:05:
         40:d0:7a:7e:7c:78:ba:83:ee:24:90:c6:b9:f0:bc:97:d5:1d:
         b5:fc:a4:a4:cf:06:0b:0b:b2:72:8d:06:79:f4:bf:b9:b8:7f:
         d2:5b:dd:c3:8f:db:61:84:d3:c0:f9:2c:77:c2:d7:82:e8:63:
         cd:5b:3a:fe:2d:9e:84:d2:68:8a:0a:37:e8:ea:e7:e3:ca:bf:
         f0:94:c3:90:eb:7f:ac:1f:82:23:d0:3d:fc:86:08:db:69:66:
         0e:ac:4d:88:54:62:51:88:f7:3d:68:cd:b1:0b:23:b3:e1:3f:
         22:88:85:f6:55:af:fd:25:ae:5c:0d:78:49:bf:44:70:fb:95:
         29:4a:5f:8c:52:73:8f:a3:d5:af:33:5e:69:01:22:ec:a2:b4:
         4c:2a:db:3e:61:4c:af:fe:5e:79:67:e6:6a:10:ea:cf:ea:a4:
         41:3c:9b:93:e7:18:d7:a8:2e:7a:ba:a5:22:fb:e4:24:61:c6:
         d4:da:1c:f4:4b:2f:1a:c1:2b:b6:21:44:52:a3:0f:a5:18:7f:
         15:43:e3:c2:76:ba:b5:45:69:73:7c:9d:99:08:5d:12:99:81:
         a5:27:b4:69:01:2c:22:8f:fe:6e:2d:ea:73:fc:03:b7:c8:5d:
         28:cd:62:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:36:29 2026 by rpki-client