Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fc3e3da-1de3-3243-bd5f-7e35d3858d06.roa
File:                     8fc3e3da-1de3-3243-bd5f-7e35d3858d06.roa (raw, json)
Hash identifier:          ttoQxq76WKsZ62HrJH51V/uvf3CeFG7KbPk8Gze0L2M=
Subject key identifier:   7C:6D:40:65:25:76:37:DA:50:B3:38:6B:4E:82:11:6F:FE:B7:4F:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF210ADC98CA160E281B91980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fc3e3da-1de3-3243-bd5f-7e35d3858d06.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     396542
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:ad:c9:8c:a1:60:e2:81:b9:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=d38d99f5-fc02-4d68-b196-fdcfeb5f8f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:db:57:ab:c4:8c:d0:8a:ef:1d:14:67:fd:
                    bc:ab:e6:83:6f:0b:49:9b:8e:fc:25:7c:e6:31:e8:
                    46:8e:d7:b1:2f:50:6f:c5:1c:33:a5:6e:e0:b2:ab:
                    ea:2e:b9:19:bf:b4:fa:65:cd:9d:4a:2f:91:6b:f6:
                    2c:47:5b:f8:82:95:86:6e:e2:cf:9e:80:d1:d1:94:
                    d9:64:ff:71:a4:37:43:2d:5a:c6:5a:22:60:3b:1f:
                    da:70:f6:30:d4:6a:ef:b4:78:fe:ef:b4:61:30:b6:
                    4c:97:d7:fc:e3:8f:ad:29:68:d4:88:97:33:af:6f:
                    b1:be:07:38:b9:8d:40:70:45:c5:58:f7:c5:2f:27:
                    05:cc:b4:87:29:3a:2f:ec:3d:eb:29:ad:6b:60:26:
                    dc:36:6b:6c:79:6e:c2:cc:1f:fc:94:2e:88:19:18:
                    82:0d:90:0e:07:9b:a7:4b:42:3e:74:ca:73:cc:89:
                    29:57:c1:56:c8:f3:14:da:5c:4a:04:b2:6a:62:d9:
                    ac:88:67:5f:e8:22:83:f5:05:65:da:77:fa:a2:3c:
                    52:fb:08:ac:2e:93:dd:3f:d3:0d:63:2f:6b:45:76:
                    c7:b6:78:ee:24:c1:c0:2f:01:e3:64:c2:aa:a1:ef:
                    8c:0d:57:61:a6:51:19:d3:fe:1d:c1:da:26:71:b8:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6D:40:65:25:76:37:DA:50:B3:38:6B:4E:82:11:6F:FE:B7:4F:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fc3e3da-1de3-3243-bd5f-7e35d3858d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7a:3b:9b:4c:87:4a:a4:d0:df:70:11:8f:8e:80:72:28:0a:
         f1:f6:cc:3b:ff:d7:17:43:d7:4c:3c:59:23:2b:43:de:52:69:
         84:c4:0b:67:85:cb:11:b8:2d:1a:a8:9e:34:10:12:28:7a:91:
         7d:80:1f:b8:41:fd:48:b5:57:37:b2:98:94:cc:c2:9e:9f:8d:
         3f:25:82:09:6f:1d:09:7b:59:5c:7d:36:02:f8:7c:24:3e:66:
         74:8e:64:80:e7:6c:35:02:ac:a0:37:88:59:ea:ba:c0:ed:20:
         85:22:ea:9c:a1:33:e5:ce:99:31:bc:02:fe:24:0a:c7:47:86:
         61:47:ef:e4:7d:17:40:03:52:97:a5:34:3c:43:8b:42:e1:dc:
         c3:5a:ee:3a:2c:bd:48:c5:92:c9:a6:3e:84:12:e2:19:2e:52:
         f1:03:e4:50:ad:41:6a:9a:f5:05:93:78:19:88:a5:61:b5:5b:
         6b:a1:f2:42:28:5e:2e:9f:ba:62:3e:fb:ea:ca:54:62:56:d4:
         95:41:6e:a9:04:74:73:0e:30:ef:2b:82:3d:98:0a:ff:bc:56:
         3f:92:3e:7d:99:c3:e2:eb:a8:3b:04:c1:5d:1c:c0:ae:bc:cd:
         7b:ff:4f:a2:4b:ad:3a:1e:77:4b:64:34:ab:7e:94:68:ce:24:
         93:27:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:24:22 2026 by rpki-client