Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb920b01-4d47-36ce-8977-45b6a1e90159.roa
File:                     bb920b01-4d47-36ce-8977-45b6a1e90159.roa (raw, json)
Hash identifier:          NLT4ga17aL3HHulomwHUm1uSJKLwagf9S6N5gqF1GR8=
Subject key identifier:   BE:EF:2C:67:D1:CB:A4:59:6A:E7:1B:87:6A:0C:52:6B:64:D1:9C:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF210B16B40B51EE10FADC380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb920b01-4d47-36ce-8977-45b6a1e90159.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     396574
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:b1:6b:40:b5:1e:e1:0f:ad:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=e09787d9-60b2-4a53-9cfb-774a7338c818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b2:3c:7f:0f:69:f8:ac:b6:14:b4:b0:0c:c3:
                    f4:50:b3:ed:82:ee:83:fc:e7:c2:a9:4b:8b:46:ed:
                    62:57:d5:a1:85:1f:e5:ce:d0:60:1d:b9:4c:21:5e:
                    6e:4f:53:cf:e4:d3:d0:d1:70:82:c7:f7:a6:c5:13:
                    a9:41:6d:e2:2f:31:a4:8e:f8:d4:fe:bf:2c:c3:12:
                    ea:be:59:20:83:15:3f:b0:b6:3f:bc:b7:b8:cc:72:
                    90:05:f8:d5:86:81:fc:03:04:ff:26:6b:15:16:16:
                    32:bc:65:e0:90:f8:45:74:be:f4:9b:4a:1b:61:6e:
                    ba:2b:cc:12:01:3e:47:d0:7c:83:04:4d:a2:e0:56:
                    3b:39:97:e9:fe:ef:db:f3:29:9c:f4:46:10:97:23:
                    6a:aa:15:71:fe:22:ea:1c:46:10:71:78:a0:8a:28:
                    32:27:09:13:43:20:6f:43:fd:ff:55:02:f5:07:f6:
                    cf:20:8d:a2:a4:5f:ae:b0:ea:22:d4:3f:d2:e8:aa:
                    6d:91:ee:64:d8:9e:a9:72:20:e2:ac:22:3a:86:58:
                    25:4f:28:4d:2e:83:14:9d:f3:2a:90:e3:5e:fe:ab:
                    8d:e7:84:77:b7:94:61:c2:f6:b7:26:f9:c7:67:93:
                    51:08:18:08:c5:34:38:fb:cd:ff:66:aa:22:4c:21:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EF:2C:67:D1:CB:A4:59:6A:E7:1B:87:6A:0C:52:6B:64:D1:9C:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb920b01-4d47-36ce-8977-45b6a1e90159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:62:53:9c:f5:00:b7:d6:4b:76:a9:ec:ec:d7:cd:9f:ca:71:
         91:b7:58:77:07:da:17:90:8f:21:5e:08:21:9c:ce:8c:32:c2:
         56:aa:aa:b9:d6:26:2b:29:25:29:01:41:a0:c7:00:d2:d6:1e:
         15:dd:7c:d5:dd:8e:56:0f:c7:e4:01:ea:03:19:db:65:69:72:
         2e:20:18:87:e4:8e:d9:5d:be:66:d7:25:45:a3:c2:93:49:00:
         c0:27:17:00:e2:3d:5b:48:43:1a:45:3f:ef:a4:ea:c3:69:06:
         a6:e9:c8:f2:9b:58:4d:c2:f3:16:f5:90:0b:ba:f3:6d:4e:b1:
         28:3e:d8:48:cb:8e:29:cf:4c:59:81:cd:63:82:7d:0e:c3:cb:
         03:6e:17:91:80:e9:79:67:ce:ef:7e:e6:22:24:46:5f:84:a4:
         df:0a:52:39:59:55:26:db:bc:24:8d:81:a8:f3:0c:18:99:ea:
         92:e6:10:4d:af:46:5a:cb:8b:bf:d5:cc:a8:0a:2c:38:8c:59:
         21:c9:bc:a4:22:8a:4e:eb:8f:59:cc:5e:93:f3:32:d2:e3:bf:
         c9:95:a2:ea:6e:f0:f9:51:11:43:1b:f0:18:83:00:af:3e:87:
         21:54:5a:02:11:d4:ee:ff:1e:39:4f:58:2a:d2:d0:db:73:76:
         11:b0:6c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:02:15 2026 by rpki-client