Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fea2629-fec9-3d10-b617-3eb0a89135a1.roa
File:                     8fea2629-fec9-3d10-b617-3eb0a89135a1.roa (raw, json)
Hash identifier:          q7mdaFyyLd/RwgXczo649kJk1jCRAeLUC19rl1dIuqY=
Subject key identifier:   10:C7:3A:0A:37:B7:1F:AD:8D:9C:DC:5A:DE:64:29:F4:67:94:DB:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF210AE0F7B8065399F727100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fea2629-fec9-3d10-b617-3eb0a89135a1.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     396595
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:ae:0f:7b:80:65:39:9f:72:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=01393107-f455-4d16-bdec-ded713000376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:40:b5:29:9b:d8:80:79:27:56:8f:2a:38:e9:
                    c3:26:84:ff:bd:29:6a:db:78:f1:62:36:5c:55:fe:
                    67:b5:18:0e:10:19:10:f4:f6:ae:b2:7e:83:de:96:
                    2f:d8:9e:f2:4d:92:8b:a1:d1:0f:98:79:76:ce:c4:
                    d3:2c:17:95:4c:a5:a1:46:0c:29:a1:67:34:96:35:
                    9e:ce:80:a9:bc:e1:fc:b7:11:e3:b3:06:f7:7f:53:
                    6f:68:e9:51:eb:07:a6:72:dc:06:2d:a1:ed:81:46:
                    a7:3e:eb:39:ed:be:01:cb:91:e9:46:bc:b2:41:64:
                    9b:c1:00:6a:72:3e:a9:f8:34:5e:02:52:c7:b3:a9:
                    74:45:00:e9:3c:75:1d:ec:59:35:7b:33:cf:fc:27:
                    23:8b:79:ba:f4:08:88:db:ab:b9:7b:ff:14:6c:f3:
                    53:f5:65:b4:01:e1:8c:85:75:9d:41:a4:b5:0d:52:
                    8b:78:9c:48:51:8f:d4:41:cb:06:45:a2:9a:6d:df:
                    ad:a4:0f:4b:8b:05:4a:87:41:ee:1e:a8:66:54:66:
                    07:f4:76:78:a3:3e:62:33:7f:a6:e5:b8:88:a7:2e:
                    37:21:bf:ee:7d:c2:07:0c:15:a0:d2:d9:46:08:7d:
                    df:2c:30:73:d0:4a:4f:a8:22:35:22:3d:03:8d:50:
                    c8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C7:3A:0A:37:B7:1F:AD:8D:9C:DC:5A:DE:64:29:F4:67:94:DB:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fea2629-fec9-3d10-b617-3eb0a89135a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:bb:d2:56:6d:31:3f:1d:7d:12:94:06:5b:65:ad:fd:ec:cd:
         59:54:9c:e1:da:96:93:18:31:25:72:46:dd:a0:05:8c:e3:d4:
         9d:c6:0d:ac:5e:82:03:01:0e:33:e0:ce:fd:5a:aa:df:a8:a1:
         33:3e:11:b3:69:7b:88:61:46:4d:dc:ab:d0:e7:3f:b5:46:71:
         d5:66:d4:b7:6b:ab:83:4d:66:a1:10:0e:e7:0d:1f:b2:07:e9:
         78:4a:75:c7:d7:2c:24:22:b4:6f:fe:d6:96:f2:80:5c:b4:22:
         ba:2d:bd:f5:81:48:08:70:52:44:56:86:1e:d7:cd:7e:d4:36:
         c0:95:35:ba:08:d5:f5:66:68:23:cf:c7:31:17:a4:ad:77:3c:
         11:de:3e:d8:05:c3:3a:f3:e7:e2:36:06:ed:e8:99:62:08:90:
         ad:3e:3e:bb:e7:89:a8:8c:4e:0b:70:a6:46:e2:d9:c1:df:5f:
         0e:ba:dc:56:60:0b:9d:28:65:94:7e:7a:70:91:93:34:41:8a:
         bd:85:8a:78:02:06:29:2e:64:ae:30:ad:12:ff:bb:76:32:2d:
         83:cb:b5:1f:c4:f2:27:eb:f6:9e:57:ec:3b:74:1f:0b:20:e6:
         3b:7c:24:03:f8:14:ba:92:10:9d:c2:4e:98:74:ef:c8:8a:78:
         0f:dd:c4:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEK4Pe4BlOZ9ycQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk
MDEzOTMxMDctZjQ1NS00ZDE2LWJkZWMtZGVkNzEzMDAwMzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UC1KZvYgHknVo8qOOnDJoT/vSlq23jxYjZc
Vf5ntRgOEBkQ9Pausn6D3pYv2J7yTZKLodEPmHl2zsTTLBeVTKWhRgwpoWc0ljWe
zoCpvOH8txHjswb3f1NvaOlR6wemctwGLaHtgUanPus57b4By5HpRryyQWSbwQBq
cj6p+DReAlLHs6l0RQDpPHUd7Fk1ezPP/Ccji3m69AiI26u5e/8UbPNT9WW0AeGM
hXWdQaS1DVKLeJxIUY/UQcsGRaKabd+tpA9LiwVKh0HuHqhmVGYH9HZ4oz5iM3+m
5biIpy43Ib/ufcIHDBWg0tlGCH3fLDBz0EpPqCI1Ij0DjVDIpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBDHOgo3tx+tjZzcWt5kKfRnlNsnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGZlYTI2MjktZmVjOS0z
ZDEwLWI2MTctM2ViMGE4OTEzNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE270lZtMT8dfRKUBltlrf3szVlUnOHalpMYMSVyRt2gBYzj1J3GDaxe
ggMBDjPgzv1aqt+ooTM+EbNpe4hhRk3cq9DnP7VGcdVm1Ldrq4NNZqEQDucNH7IH
6XhKdcfXLCQitG/+1pbygFy0IrotvfWBSAhwUkRWhh7XzX7UNsCVNboI1fVmaCPP
xzEXpK13PBHePtgFwzrz5+I2Bu3omWIIkK0+PrvniaiMTgtwpkbi2cHfXw663FZg
C50oZZR+enCRkzRBir2FingCBikuZK4wrRL/u3YyLYPLtR/E8ifr9p5X7Dt0Hwsg
5jt8JAP4FLqSEJ3CTph078iKeA/dxNE=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:06:31 2026 by rpki-client