Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a96980a-5de8-3bd4-8f8c-9b237b36b174.roa
File:                     4a96980a-5de8-3bd4-8f8c-9b237b36b174.roa (raw, json)
Hash identifier:          4xQ1hxIOxWy6kWUis22Dfe4e5jIdAZ2aiYzVrSXAopY=
Subject key identifier:   9A:05:D5:2C:FA:9C:7F:90:2B:64:B4:99:A3:DA:19:05:70:5A:13:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA8158F3C85EA8CE534EFD500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a96980a-5de8-3bd4-8f8c-9b237b36b174.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     396582
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:8f:3c:85:ea:8c:e5:34:ef:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=d0c2f579-66de-4f8d-ac0a-4ba99f58e8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:31:3f:86:19:2e:45:fa:c4:36:e8:6d:43:
                    f4:71:76:d9:6b:26:37:01:a5:13:7a:a9:42:72:72:
                    b7:bb:c5:a0:e6:20:3f:a9:9d:07:17:82:a6:fc:55:
                    59:52:c0:59:bc:78:29:47:28:21:49:0f:f6:68:ee:
                    91:5a:93:8a:a3:a2:e2:ec:3d:3d:ff:71:6d:28:15:
                    7e:f4:1e:e7:be:48:8d:a3:25:59:3a:e5:f2:bd:14:
                    93:0a:25:f5:ce:97:9d:a4:87:3d:ad:77:ae:40:9d:
                    37:92:da:f3:ab:99:c7:25:4c:10:99:b4:92:53:ea:
                    b0:3d:45:5f:18:91:76:2b:e7:7f:fc:2f:c8:fa:c8:
                    62:fc:a8:21:7b:2b:df:c6:b4:07:ba:9d:72:8e:cf:
                    30:0c:33:00:95:9e:31:63:c9:be:65:e7:6b:07:fb:
                    9e:00:a8:b0:bd:10:a9:55:c0:32:dd:2e:94:dd:f9:
                    99:0c:97:9f:4a:24:f1:43:5e:57:97:e7:4d:a7:60:
                    cc:1f:2f:b0:b2:69:25:6f:e1:a6:6c:de:b7:45:45:
                    25:0e:97:61:3f:29:66:52:5b:34:ba:81:47:f4:2c:
                    42:7f:e9:2a:15:32:19:cd:2d:96:84:7a:d4:f7:5b:
                    ac:e4:60:9f:4a:2b:57:de:7a:be:78:4d:76:af:a4:
                    dd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:05:D5:2C:FA:9C:7F:90:2B:64:B4:99:A3:DA:19:05:70:5A:13:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a96980a-5de8-3bd4-8f8c-9b237b36b174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:2e:cc:ea:ed:2d:5c:d9:03:fa:7e:30:1f:26:c5:71:c0:d1:
         aa:4d:f1:2f:60:77:12:45:7f:97:ed:8f:b4:50:e5:ec:e7:83:
         50:7f:ea:11:14:a5:5e:20:81:fd:b8:66:af:cb:72:ff:a4:b3:
         bb:9b:36:ad:a2:43:6c:03:ab:ef:a7:ee:c0:5e:10:67:0b:55:
         1c:72:62:6c:e3:22:4e:b5:0f:8a:d0:41:74:05:93:c4:c1:85:
         86:fe:93:06:d9:0c:5d:c0:ae:4b:42:eb:a8:37:30:6d:2f:35:
         ef:21:b8:75:99:fa:f6:e5:be:61:67:2e:12:07:d7:7a:57:34:
         37:32:74:b6:39:60:62:a2:00:5c:f5:24:bf:91:21:34:8e:82:
         4e:6b:be:ca:b4:61:4d:c0:e6:22:c4:87:90:e8:1e:c9:db:b9:
         b9:1a:e2:a2:61:e0:11:06:73:60:85:b1:58:b3:46:7b:ae:a5:
         53:04:2c:cc:29:df:f2:0c:ea:08:bc:9f:b6:e2:19:27:0b:f0:
         d9:12:db:8c:b7:03:e1:16:e3:ea:5a:da:0f:9f:0b:f1:16:28:
         d5:4a:d0:cf:7e:ff:0d:6c:8c:fa:5f:3f:1b:1c:8e:d6:5c:78:
         0f:2d:89:40:44:15:c5:ae:b7:6b:51:33:c2:43:ba:d8:05:69:
         a9:11:5d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:17:44 2026 by rpki-client