Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5688b6f9-4fda-3c87-b495-9ecfe0d35732.roa
File:                     5688b6f9-4fda-3c87-b495-9ecfe0d35732.roa (raw, json)
Hash identifier:          yM/AzZfLT29RjVdwfpWoKFGZpV76GeWyijpzbRmurqg=
Subject key identifier:   B6:AD:51:CB:68:50:83:3C:2A:C5:DA:16:22:FA:72:F0:95:B3:92:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DB4A58C4287FA677557AA6C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5688b6f9-4fda-3c87-b495-9ecfe0d35732.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     19836
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:8c:42:87:fa:67:75:57:aa:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=4a5ade33-8e85-4afb-b405-b68f86a7611e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:74:2f:28:d5:64:da:a9:80:7d:fb:cd:3a:6c:
                    1a:34:6b:08:7c:2e:f9:12:b1:58:f2:a9:0a:81:2d:
                    d5:10:a2:50:bc:54:c3:9d:aa:86:15:67:ab:f5:87:
                    35:a2:70:e5:9d:7b:a3:ec:af:a2:73:fa:a7:41:b7:
                    02:8a:04:11:0b:4d:94:07:98:e5:30:2b:05:ed:5c:
                    90:af:ab:73:1f:50:6b:75:32:70:75:75:94:1f:b3:
                    b7:ec:e9:3c:78:77:e0:ef:24:4c:00:af:56:00:bd:
                    3f:bc:2c:11:b7:47:92:39:f3:33:fb:bb:b8:5b:66:
                    8b:73:1d:04:7c:ac:15:1a:5f:bf:78:35:04:75:87:
                    e8:7f:02:77:37:d2:ac:1d:8b:c0:29:42:6d:d6:f6:
                    b7:36:d7:35:5d:d7:11:5e:b4:86:44:0f:74:8f:8a:
                    71:0a:3f:ad:78:12:aa:fd:5a:32:14:ac:81:9b:c1:
                    cf:f5:28:f4:aa:aa:bf:e1:86:06:e6:e8:71:f2:ab:
                    b2:3a:fa:b3:ae:06:90:10:be:aa:8a:db:9d:cc:49:
                    94:3c:e0:73:76:90:b0:b2:ad:53:a5:51:2e:ae:56:
                    fd:a8:7e:b9:a3:fe:a5:d2:b5:b0:8d:4d:2c:46:84:
                    44:53:cd:a0:ad:79:5e:bc:3c:9c:03:51:23:89:f9:
                    a6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AD:51:CB:68:50:83:3C:2A:C5:DA:16:22:FA:72:F0:95:B3:92:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5688b6f9-4fda-3c87-b495-9ecfe0d35732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e0:08:4b:2c:1d:0c:ab:81:19:27:82:33:93:35:da:7a:69:
         ce:a8:90:bc:e1:31:87:63:27:7c:3c:fd:ab:9d:09:99:14:68:
         89:76:89:e7:32:c3:74:09:bb:61:17:55:62:b5:65:ea:5b:81:
         7f:90:fc:61:fb:72:4d:34:f5:54:bd:7a:46:04:b2:62:82:a4:
         68:69:9c:fb:31:70:ae:c7:2b:dd:96:bf:1b:79:50:7a:c3:ac:
         a5:cd:be:76:c1:b4:42:c2:92:57:0a:d9:17:67:73:5f:9c:27:
         3b:1a:a0:30:1c:c6:80:04:08:39:29:3c:ba:52:5f:83:03:b7:
         31:8f:b9:05:1f:a9:fe:51:f4:b3:1c:b4:fd:6d:8f:40:2d:a1:
         ed:1c:3d:29:0c:51:48:b6:54:ce:f2:81:7c:17:33:55:71:37:
         6a:75:d4:12:8c:bb:da:eb:4d:7c:49:df:76:43:82:5e:54:d0:
         2f:d0:32:4f:9e:32:1f:e2:3c:a9:d2:2b:ac:22:82:89:de:ea:
         d9:c2:b0:13:91:13:dd:27:9f:79:20:a4:88:c3:da:d5:2c:95:
         fc:0a:b0:42:ea:71:62:e2:7c:67:78:01:4d:47:01:0e:0a:75:
         28:eb:24:4b:19:58:cb:99:de:fd:f8:d9:38:cc:8a:88:ad:84:
         16:78:05:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:02:52 2026 by rpki-client