Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b802cab-2cd5-32fb-8980-044b10833b40.roa
File:                     2b802cab-2cd5-32fb-8980-044b10833b40.roa (raw, json)
Hash identifier:          Gc3mpQLar0WutImqI/RHQp3QZCPYG3+re+bw9JSRK6Y=
Subject key identifier:   1D:28:D6:21:E1:16:EA:3C:E1:5A:02:7D:34:1C:24:15:03:E7:A8:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DB4A58EA7181EC93FA67E34E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b802cab-2cd5-32fb-8980-044b10833b40.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     36618
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:8e:a7:18:1e:c9:3f:a6:7e:34:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=944bb397-4b48-48bb-a589-505c2786c679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e5:d2:a3:60:28:23:aa:88:80:f0:d2:99:be:
                    9a:8a:02:81:a7:49:f9:57:01:75:c2:54:7e:10:89:
                    6f:fd:59:19:7e:65:08:59:2b:64:8a:a7:bc:cc:ce:
                    6c:4d:13:d9:65:43:29:f6:eb:4a:ed:b3:5e:6a:bf:
                    b9:89:22:9b:b0:2a:c0:c4:47:a2:b6:ef:ba:6c:63:
                    4f:b6:e5:10:18:8d:92:84:04:b5:65:0e:14:fa:f7:
                    d1:d7:e5:ce:a6:9c:d9:c7:48:18:68:3d:40:4f:c8:
                    08:7f:3c:9e:d2:45:8e:9d:ea:aa:dc:3a:64:23:8a:
                    09:d5:c8:13:a2:f1:26:d2:fd:97:fd:15:ac:5a:ae:
                    cb:e3:7a:4a:8d:aa:ed:20:cd:d8:c9:5d:63:1f:19:
                    60:69:e1:a3:8c:64:45:1d:8a:be:13:d6:76:60:1c:
                    1a:51:7b:69:f0:4f:63:5f:4d:32:9b:c0:79:84:43:
                    09:2b:81:03:13:80:1f:ba:49:5e:84:45:23:56:84:
                    f7:34:74:63:a9:03:14:6c:fc:00:13:54:82:fd:da:
                    6b:ca:6f:f7:e3:50:51:d9:d6:4e:5b:d4:55:82:31:
                    78:e3:78:ce:99:7e:d0:85:c8:b4:b5:1a:01:97:ce:
                    0d:21:a8:9f:25:31:a0:e4:b6:a5:30:ad:8d:7b:b4:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:28:D6:21:E1:16:EA:3C:E1:5A:02:7D:34:1C:24:15:03:E7:A8:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b802cab-2cd5-32fb-8980-044b10833b40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:cd:1b:63:78:b0:c4:a5:b1:3c:a4:4b:6e:ee:bf:ed:6c:6f:
         bf:52:f3:60:48:57:3e:b8:28:ac:7e:b8:b9:80:69:53:4a:a7:
         9e:18:16:a8:a8:a7:b5:74:1b:17:a7:4a:b6:0d:e5:01:e4:5f:
         79:39:05:b9:73:6a:96:f5:3f:33:a1:a8:73:1f:e6:73:6a:8b:
         cb:b2:58:9d:2f:e2:98:ca:30:98:9b:8b:7a:96:bc:26:50:10:
         fc:75:e9:78:b7:87:68:d8:2a:e6:43:60:c3:e1:9a:62:39:62:
         28:aa:f3:ee:71:55:18:27:1e:6f:04:3e:61:4f:d2:ed:67:97:
         a3:f1:e5:44:e0:69:2a:5d:09:e1:ee:41:d1:e8:9a:7f:58:02:
         38:f4:26:55:6e:08:1e:9d:ef:d7:d0:3d:30:c7:81:d7:9d:78:
         c3:88:c9:6d:33:55:76:29:fd:b1:c0:be:f3:e7:d6:8e:01:c5:
         f0:14:92:8a:11:d0:df:b6:74:ef:98:55:f9:07:6f:7f:fa:57:
         f7:5e:e3:75:90:e4:bb:7f:da:8c:8f:3e:f2:7d:13:9a:12:36:
         f2:c3:a8:3f:52:41:72:7f:33:2f:62:7e:22:ac:94:2b:ab:a2:
         aa:69:8b:96:2f:3e:3e:ae:2e:9f:a1:45:ef:cd:22:c8:6f:5f:
         4a:5c:83:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:59:10 2026 by rpki-client