Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8cc191c-3e4c-35e6-a2bc-40508302770f.roa
File:                     f8cc191c-3e4c-35e6-a2bc-40508302770f.roa (raw, json)
Hash identifier:          3jppIUUxoEjA0/uqH9Stst7yoy5+xi4lKRFLzBmpY9U=
Subject key identifier:   ED:22:B7:63:D0:AA:06:9F:1B:44:37:49:18:AC:E6:70:95:B3:0E:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF210AE8D33CC6E76DC0C6230
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8cc191c-3e4c-35e6-a2bc-40508302770f.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     396608
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:ae:8d:33:cc:6e:76:dc:0c:62:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=e6e458c2-4367-4568-b479-45522ba5f7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:11:ba:64:eb:1c:30:8e:da:9e:3e:64:c3:
                    87:b7:be:40:13:4a:f9:1c:73:10:c9:84:b5:6e:6a:
                    8d:a2:4e:28:a1:dc:d8:b2:20:e8:c9:7a:ce:41:f5:
                    45:0a:ee:b1:e5:72:a6:3b:4a:0a:5f:85:e4:57:ad:
                    17:85:48:af:6c:80:27:a5:7b:18:b0:35:b4:fe:1e:
                    52:e3:80:27:83:d9:1a:fe:d6:69:62:eb:c2:08:0b:
                    e3:9d:ff:26:12:93:3e:4d:6c:8f:02:61:de:28:bd:
                    6a:61:ea:7f:a7:f6:78:ab:64:d9:07:66:49:50:b1:
                    7f:3a:62:a8:40:17:2a:92:84:ac:d9:23:82:a0:6e:
                    34:e3:8d:4e:bd:3b:32:59:4f:00:2d:02:17:b0:67:
                    eb:62:10:5c:0b:e7:1f:77:00:51:be:c3:57:69:31:
                    50:e5:fa:d5:e9:00:f7:af:8e:48:04:95:ab:c7:a0:
                    0f:2b:f0:b7:35:a2:be:0e:9d:2c:c9:48:a6:1b:35:
                    d0:5c:f4:65:a1:62:c4:83:bb:a7:29:82:7a:70:f4:
                    09:24:3a:32:46:72:66:ad:73:89:63:50:bd:cb:dd:
                    26:30:28:0a:b2:ad:3f:53:91:e8:bb:42:ec:33:9f:
                    be:1b:cb:f7:b7:3c:bd:a7:e9:60:eb:0a:26:58:b0:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:22:B7:63:D0:AA:06:9F:1B:44:37:49:18:AC:E6:70:95:B3:0E:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8cc191c-3e4c-35e6-a2bc-40508302770f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:47:2e:31:8f:4f:27:0f:5c:49:53:9f:ea:dd:87:02:50:2d:
         fe:08:09:bc:ff:46:05:e7:48:48:62:48:23:d9:d3:b2:9f:f6:
         ad:0b:40:9f:4f:43:08:6c:ad:60:04:78:0a:02:08:83:b6:c1:
         3b:f1:5d:72:3f:58:e2:92:dd:63:db:d0:66:04:3d:e1:6a:bf:
         7b:5d:9b:f7:94:17:6e:c2:df:9c:25:58:b5:7e:1e:ae:7a:e0:
         53:3d:01:32:f6:f1:56:1c:f8:e4:50:e3:63:c9:23:78:e3:6e:
         07:c5:b6:75:75:f9:95:fa:0c:fc:df:f7:b4:8f:09:f6:8e:37:
         0b:0d:22:e2:2d:03:fa:85:9d:87:60:cf:57:9a:4c:db:49:2a:
         41:bc:6f:1d:fa:ab:43:27:f9:36:68:7b:45:77:0b:56:41:f8:
         e5:47:0e:82:3a:f0:0b:36:72:1b:10:df:c6:90:e6:0b:38:4d:
         30:0b:c7:7e:b9:0a:b3:7c:ac:01:a1:3b:c6:6a:be:d4:d3:28:
         55:29:92:71:8b:dd:b7:4f:31:92:e9:4f:72:30:bc:84:e9:ac:
         27:eb:24:0e:bb:66:e7:a5:99:7d:2c:28:1a:c3:24:d9:4e:90:
         b7:22:29:4a:81:9c:d7:0c:3f:81:76:4e:c3:4a:4a:a4:b3:12:
         08:f5:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:35:45 2026 by rpki-client