Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56a66c36-fa67-3231-9bc0-c23adb54a7d2.roa
File:                     56a66c36-fa67-3231-9bc0-c23adb54a7d2.roa (raw, json)
Hash identifier:          a/DUjaP2QVlZcNSHE0BtaW1lIjUNh1D8CMWPgsPcWho=
Subject key identifier:   13:2A:28:9E:8F:DB:59:0A:AD:5B:80:C6:27:EC:0D:9A:00:B4:1B:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA795A36E8F12BC42481CCB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56a66c36-fa67-3231-9bc0-c23adb54a7d2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397203
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:a3:6e:8f:12:bc:42:48:1c:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9b1898f2-6e17-4bd8-bfbc-afcbbbbdacd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:aa:23:01:86:f6:96:29:97:8d:47:d3:8f:
                    2d:4a:cd:9d:72:2e:75:38:f8:26:ee:ee:14:5e:dc:
                    38:9e:5c:8d:5f:32:db:1a:7e:03:7a:bc:56:41:3c:
                    fc:cb:d2:88:fe:9e:e5:cb:24:12:bb:d8:05:59:14:
                    64:c2:4d:20:11:c7:04:dc:b9:90:fa:bc:ec:94:0e:
                    23:c9:25:68:67:45:f1:5a:b9:f7:08:98:bf:75:09:
                    3c:ff:7f:c9:54:f7:77:48:2c:6b:c8:30:25:b8:1f:
                    e9:84:87:c8:79:20:8f:c1:97:08:7d:c1:ec:c4:4c:
                    42:1d:01:73:0d:4f:95:1d:52:34:ae:1c:7a:cb:7a:
                    29:fe:66:63:b1:b1:7f:56:f7:9c:6f:36:8e:98:1a:
                    f7:1f:4f:d0:e0:b8:ba:72:5f:c4:76:0b:59:37:db:
                    28:13:fa:10:28:76:98:17:18:8c:db:3c:b3:b0:52:
                    ca:79:70:ef:20:66:28:f5:d1:24:88:53:be:d9:98:
                    ee:ef:3d:4a:f4:b6:89:27:1d:98:e6:12:c7:77:6d:
                    71:b1:38:83:90:76:9e:16:11:ee:e2:7a:f8:86:75:
                    3c:ef:62:8c:0e:37:18:10:dc:32:6b:6d:12:c0:e8:
                    f4:d0:2f:7c:25:5b:b3:c4:b9:fb:ca:80:2f:4e:89:
                    e4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2A:28:9E:8F:DB:59:0A:AD:5B:80:C6:27:EC:0D:9A:00:B4:1B:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56a66c36-fa67-3231-9bc0-c23adb54a7d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a6:31:75:40:06:31:91:c5:bd:d3:6a:e0:ca:55:12:11:23:
         3d:f9:ce:e5:a1:73:ed:5a:fc:2f:a7:8e:a7:59:f6:fc:ee:55:
         5d:a5:d1:ca:cc:cb:e4:c6:65:87:b4:e0:3d:d0:7d:2f:87:85:
         93:f3:09:af:f1:76:e8:d8:aa:f9:da:98:14:0e:a4:21:a0:b0:
         62:67:37:d8:4b:73:ef:0b:52:34:a6:77:8a:6c:36:22:87:8c:
         45:2a:c3:0e:88:dd:d3:f1:80:27:65:51:c9:2c:08:82:45:3a:
         ed:f7:81:9a:d0:02:2e:2a:1e:00:b4:be:1b:f1:7a:09:39:1d:
         10:a5:6a:c0:ff:6e:3e:52:f2:f2:9d:43:a9:33:18:a6:0f:5e:
         21:12:cd:6b:82:91:61:52:9e:22:ce:0a:cb:0e:d3:f1:25:05:
         cd:66:4d:21:17:18:0c:e7:f4:24:99:f6:07:23:bf:32:14:23:
         e9:fd:b9:4a:f5:52:ea:6b:b7:ea:b0:ef:e3:94:3e:6f:4a:b1:
         67:8f:95:a7:2b:b8:f0:37:a5:25:24:a0:00:66:e9:c0:15:db:
         ef:8b:7a:cb:f6:cd:e7:96:33:8e:95:ed:b1:3c:e8:c3:15:16:
         e3:2a:4a:f3:b7:c6:23:f4:d5:bc:df:50:cd:fc:79:02:41:b2:
         1b:14:4e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:32:44 2026 by rpki-client