Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0deab49b-1446-3609-89ea-27323cd465ad.roa
File:                     0deab49b-1446-3609-89ea-27323cd465ad.roa (raw, json)
Hash identifier:          MpBxXjQoAuLhhmR22ewcMc7QTU8hPHn/nq9xvLPVm0E=
Subject key identifier:   27:95:CC:67:A0:BB:FB:9B:D9:F3:82:EC:7F:AB:75:D6:FE:2D:00:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA8158DD85EE0722C92C7D000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0deab49b-1446-3609-89ea-27323cd465ad.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     396600
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:8d:d8:5e:e0:72:2c:92:c7:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=d813b14b-1dd6-4a3b-8455-f0fe243652bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:c2:88:af:34:b2:4b:af:1d:68:39:23:88:
                    bd:a0:6c:c3:fc:de:9b:06:85:c9:c0:69:a0:69:98:
                    1b:4b:7e:6e:bb:cb:02:7c:0f:8a:0b:da:4a:e5:22:
                    11:0d:19:d4:58:b1:5d:53:fb:2e:af:9a:47:38:08:
                    56:9e:21:de:10:f4:6c:53:fe:94:22:12:76:ea:3f:
                    9a:6c:23:48:d7:5c:e3:30:71:25:01:86:a1:00:04:
                    c1:3d:ad:77:8e:bb:65:2a:ca:26:04:f7:20:0d:9f:
                    40:54:8e:72:11:7c:24:89:97:e1:05:3d:94:f0:3d:
                    0f:09:98:63:1d:50:85:b8:0f:93:27:3c:ef:0f:c4:
                    8c:98:83:53:bc:c2:55:70:89:45:bc:08:b4:71:15:
                    a6:fd:ba:3f:d4:c4:fe:de:8e:d0:05:a5:b0:da:88:
                    94:10:36:e9:1b:9d:14:03:e5:9f:ad:68:3d:58:c9:
                    2d:b1:fe:b7:f7:78:df:4f:d6:29:5a:77:b4:fc:96:
                    3e:b7:6b:a5:bb:36:6e:f4:7c:77:4f:0f:cb:4e:67:
                    76:3e:8f:96:1f:28:46:51:ca:c9:4a:18:37:42:ae:
                    19:2f:db:00:30:a2:48:37:cd:c3:4f:42:ec:cf:c6:
                    27:27:fd:9d:01:1d:cd:93:7c:93:23:ad:36:b2:2a:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:95:CC:67:A0:BB:FB:9B:D9:F3:82:EC:7F:AB:75:D6:FE:2D:00:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0deab49b-1446-3609-89ea-27323cd465ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:4c:e2:05:c8:dc:9b:27:a8:6d:cb:24:0d:61:7a:75:0b:b9:
         5c:a7:fd:0b:43:8c:10:b1:18:85:e2:c0:6f:17:29:39:bf:c6:
         ca:a2:12:24:f1:8a:aa:f2:2d:a4:83:4c:a7:71:df:eb:00:f4:
         3e:80:4f:6d:a6:66:c6:67:91:af:3d:b2:91:cc:a5:19:98:80:
         c0:0a:2a:d6:96:50:4a:0d:ad:eb:b4:0f:83:76:12:c7:ca:f9:
         ca:ae:57:23:4e:d9:61:28:df:53:0e:44:1f:f5:9f:3e:39:2c:
         ba:2d:37:75:ac:04:6c:dd:b4:39:d0:87:52:66:34:50:69:c3:
         ca:6a:2b:4c:c4:6f:97:83:da:6a:d9:d2:5c:48:19:e3:17:e1:
         b7:f1:3c:86:a3:76:3a:b6:51:42:7a:4d:eb:1d:24:73:76:5e:
         93:77:c5:90:d2:33:e9:04:db:7c:e7:e5:f8:8f:79:ce:11:ca:
         bf:d8:2e:dc:3c:df:20:79:17:4c:db:62:82:56:ac:fb:d8:a6:
         ed:70:ed:24:7b:27:56:35:37:ac:98:a3:cf:03:ed:68:db:8b:
         b0:a3:ab:a0:56:5b:a5:7e:26:32:44:cf:fa:53:d6:b1:ff:1e:
         26:20:e7:61:4b:1d:c1:51:84:e5:e0:83:34:86:54:0c:ba:b6:
         f6:19:3a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:48:31 2026 by rpki-client