Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f8915c-07b5-326b-96d6-556ac5ea5929.roa
File:                     21f8915c-07b5-326b-96d6-556ac5ea5929.roa (raw, json)
Hash identifier:          qY8axE5Z+GlKz9YkGlHxblYIiyGDuT7wF0g3TaqwsiY=
Subject key identifier:   B2:27:70:E6:A7:56:8C:69:65:5C:04:27:26:57:DB:CE:61:18:95:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E94EA637A1E6A0F99D858C740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f8915c-07b5-326b-96d6-556ac5ea5929.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     396573
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:63:7a:1e:6a:0f:99:d8:58:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=73a23ca5-2a8e-4b31-a9c9-2c16f86be638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:4d:13:27:38:5b:35:90:bc:c2:4e:a9:9b:
                    60:7c:36:56:c7:97:cc:3e:50:f6:83:64:db:32:31:
                    6d:4d:4d:12:f5:7a:ad:1a:e6:99:f7:0e:07:af:3b:
                    38:f8:21:71:b4:ee:b7:4b:7c:b4:ad:49:af:fb:d5:
                    ff:5e:04:93:f7:03:8f:bb:71:4f:d3:42:b0:e2:71:
                    1c:35:69:bb:93:f4:f7:dc:08:fa:6d:43:91:12:20:
                    04:cd:3b:d2:40:f7:a6:8c:94:55:1c:1b:f4:a6:f1:
                    33:d5:cc:e0:51:17:74:b5:9e:f8:50:3f:3a:b7:89:
                    eb:18:a4:b4:5d:e1:53:df:19:03:02:6e:f4:49:8c:
                    68:29:e1:71:cf:ff:60:db:65:e6:0f:33:4d:ca:ce:
                    1e:81:29:66:82:6b:a1:a1:e9:a8:65:e5:29:ab:d6:
                    29:74:96:b8:b7:7d:91:85:01:af:97:5b:77:5d:b5:
                    16:a8:f6:e9:ca:76:ef:e1:07:1f:3b:46:d5:86:5b:
                    a9:1e:11:1c:91:2a:69:81:fd:57:b7:c7:54:c4:93:
                    cc:a2:a1:e6:46:a6:3c:a1:df:de:07:d4:2e:cb:f0:
                    24:d9:7e:18:bf:0a:d8:c2:82:d4:37:e7:44:81:43:
                    8e:80:a9:83:98:61:3d:1e:10:71:4c:61:e0:2b:ff:
                    d9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:27:70:E6:A7:56:8C:69:65:5C:04:27:26:57:DB:CE:61:18:95:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f8915c-07b5-326b-96d6-556ac5ea5929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:fb:ba:61:57:28:9d:e8:f6:c5:72:cb:a3:d2:89:05:d0:bc:
         ba:2b:58:8d:f3:8d:06:53:33:4b:9b:0c:47:aa:0e:30:06:60:
         df:a5:36:54:30:51:35:03:c1:ea:3b:e5:06:87:f8:77:13:de:
         4f:d1:ab:a8:5e:39:14:3a:2b:c4:f9:04:6d:67:99:39:13:09:
         9b:f1:de:87:12:57:c8:bc:a0:38:09:d7:dc:9b:84:5c:61:cd:
         8f:8a:4a:b9:d9:e1:ac:02:e3:61:34:b4:20:ba:4d:52:c1:39:
         97:f2:6e:86:39:c0:85:3e:ab:b5:7c:3d:2f:25:a7:2d:c0:a3:
         d2:c3:e8:95:1a:ea:76:9c:96:5d:74:8e:3b:06:dc:c6:99:91:
         ed:1d:48:76:2c:29:4b:0d:93:dc:9e:77:42:f2:e2:91:6d:1a:
         65:55:02:61:d8:ed:8d:ee:1d:39:01:c7:81:ae:47:1d:ed:b1:
         96:c5:06:bc:d7:75:8d:4b:89:e7:ec:d2:e7:bd:f5:ca:a3:5c:
         dd:37:08:44:9e:6a:0e:46:6b:0a:82:a0:80:7f:48:50:57:b9:
         87:6a:36:39:31:67:fa:32:8a:86:f5:f3:f5:1a:65:54:31:31:
         66:e5:4b:50:47:1c:f0:dc:f2:16:c7:3d:33:f5:44:d4:2d:53:
         f4:c5:73:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:47 2026 by rpki-client