Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7209ff8-4135-368c-9b01-0fe483ee90c3.roa
File:                     a7209ff8-4135-368c-9b01-0fe483ee90c3.roa (raw, json)
Hash identifier:          5FRIZKLjptr87VZQp7O1t0+Y75+lrzLmFb11S7YZrZk=
Subject key identifier:   B1:F0:50:73:0C:CC:BB:6E:E3:B3:46:A2:A2:E0:FF:E5:66:17:65:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA795145244704DEB3B8D4B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7209ff8-4135-368c-9b01-0fe483ee90c3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36622
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:14:52:44:70:4d:eb:3b:8d:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=022b2ba8-7bcc-412d-a958-7dbfb7aba3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:cb:21:83:52:89:b3:10:3e:9f:a5:f5:ea:
                    91:ca:d8:17:ae:04:02:71:5d:78:8a:64:33:68:cd:
                    5c:18:69:76:c2:40:9e:e2:b5:94:18:51:7b:ec:79:
                    dd:83:64:4d:4a:d6:05:11:e3:79:cd:c7:ca:30:55:
                    6a:45:70:58:9c:d8:6d:c8:ff:cf:dc:f4:3c:cf:7f:
                    2d:86:08:6c:f8:d9:ea:db:e2:15:7c:6c:50:91:85:
                    57:45:fe:25:9f:b5:bb:2e:12:ff:4a:98:e6:88:a2:
                    be:ed:6c:3d:46:92:8e:31:42:38:b6:4b:d9:a3:56:
                    ad:c5:6b:e8:4f:09:b4:33:e3:60:29:b6:1a:68:e9:
                    f9:06:c8:e9:c2:90:da:04:00:74:f7:b0:84:01:4d:
                    8c:4b:d8:d5:23:b7:3b:4c:6b:8a:52:94:74:69:a8:
                    04:40:69:7e:71:37:7c:88:b2:ff:c5:c8:84:26:24:
                    d6:20:35:37:53:9f:86:1f:cc:c6:25:ce:39:26:e1:
                    2f:e9:21:34:57:4e:39:90:ac:e0:8a:9a:ee:5c:71:
                    34:13:6c:36:cf:f6:26:d2:a6:0e:23:56:24:be:67:
                    85:9e:28:b0:3a:46:83:77:5e:4b:54:b4:17:e7:79:
                    dd:7f:de:76:ac:0d:fa:b6:c1:42:8f:6f:a5:56:bd:
                    2f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F0:50:73:0C:CC:BB:6E:E3:B3:46:A2:A2:E0:FF:E5:66:17:65:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7209ff8-4135-368c-9b01-0fe483ee90c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f2:e8:d0:92:6e:6e:70:33:ce:60:60:ff:f7:e3:c5:58:2a:
         d9:73:fb:81:12:8b:d6:f9:86:ff:79:72:19:d4:73:8c:37:48:
         53:c0:2a:92:de:1c:fd:23:3e:53:cd:3d:4a:18:f9:ea:01:c9:
         b1:f6:d3:6e:39:f3:c2:4c:c9:2e:09:8f:a3:a8:32:bd:f6:b4:
         21:9f:54:3e:a4:d5:f3:bc:92:82:1b:21:88:c7:cd:cb:b3:5d:
         01:bf:c3:7c:ac:e7:29:a4:88:e6:13:35:16:5f:58:2d:e8:03:
         5e:37:ce:71:94:5a:91:42:a5:fa:07:14:1e:cf:2a:a7:78:07:
         b7:f4:00:38:64:12:9a:3a:25:07:e7:6d:68:4c:c4:e6:6c:c7:
         3d:12:82:44:44:2a:87:94:00:82:e2:50:63:ce:13:f2:c9:f6:
         f6:fa:ad:b8:44:42:8e:54:e7:b9:89:c7:3c:29:64:4b:0f:16:
         50:45:27:d5:52:2e:5a:0d:5a:d2:f4:3e:8e:1e:b9:0f:02:5f:
         72:b4:ec:fb:27:18:5b:e0:05:73:9d:57:63:21:53:a3:2c:da:
         47:a1:86:bc:5a:02:64:c6:fe:07:da:2c:79:24:5f:b2:23:1b:
         80:05:aa:a9:46:b8:99:af:fd:2e:5d:54:99:69:de:5c:ae:6b:
         3d:0b:6f:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlRRSRHBN6zuNSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDIyYjJiYTgtN2JjYy00MTJkLWE5NTgtN2RiZmI3YWJhM2QzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9DLIYNSibMQPp+l9eqRytgXrgQCcV14imQz
aM1cGGl2wkCe4rWUGFF77Hndg2RNStYFEeN5zcfKMFVqRXBYnNhtyP/P3PQ8z38t
hghs+Nnq2+IVfGxQkYVXRf4ln7W7LhL/SpjmiKK+7Ww9RpKOMUI4tkvZo1atxWvo
Twm0M+NgKbYaaOn5BsjpwpDaBAB097CEAU2MS9jVI7c7TGuKUpR0aagEQGl+cTd8
iLL/xciEJiTWIDU3U5+GH8zGJc45JuEv6SE0V045kKzgipruXHE0E2w2z/Ym0qYO
I1YkvmeFniiwOkaDd15LVLQX53ndf952rA36tsFCj2+lVr0v4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLHwUHMMzLtu47NGoqLg/+VmF2U4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTcyMDlmZjgtNDEzNS0z
NjhjLTliMDEtMGZlNDgzZWU5MGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjy6NCSbm5wM85gYP/348VYKtlz+4ESi9b5hv95chnUc4w3SFPAKpLe
HP0jPlPNPUoY+eoBybH2024588JMyS4Jj6OoMr32tCGfVD6k1fO8koIbIYjHzcuz
XQG/w3ys5ymkiOYTNRZfWC3oA143znGUWpFCpfoHFB7PKqd4B7f0ADhkEpo6JQfn
bWhMxOZsxz0SgkREKoeUAILiUGPOE/LJ9vb6rbhEQo5U57mJxzwpZEsPFlBFJ9VS
LloNWtL0Po4euQ8CX3K07PsnGFvgBXOdV2MhU6Ms2kehhrxaAmTG/gfaLHkkX7Ij
G4AFqqlGuJmv/S5dVJlp3lyuaz0Lb/E=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:13:44 2026 by rpki-client