Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/588158a4-5d48-3382-874d-5ff9eb3a6a8f.roa
File:                     588158a4-5d48-3382-874d-5ff9eb3a6a8f.roa (raw, json)
Hash identifier:          ZCbydqN+kS3hEkAyQIUZLwqLgYI7pv9+PdfhxC0qSZ8=
Subject key identifier:   82:37:DC:6E:A0:8D:23:70:2E:69:0E:F7:18:9A:36:1C:C8:84:C0:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E94EA6566E9F507018F4D2280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/588158a4-5d48-3382-874d-5ff9eb3a6a8f.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     36617
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:65:66:e9:f5:07:01:8f:4d:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=734847ef-f24c-4830-90a7-479fa522af68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:b7:7c:1c:33:f8:91:ed:dd:9d:e9:da:b3:
                    30:7d:3c:99:98:85:cd:af:ec:b4:63:c3:de:57:17:
                    c9:81:e2:99:c4:e8:6b:b5:1c:8b:f2:0d:6e:aa:65:
                    d8:be:b9:b8:7d:6d:d1:f5:8b:67:0f:a6:6a:6b:a1:
                    c2:da:bd:0e:22:a8:67:11:eb:ea:de:35:d8:0e:fc:
                    5c:4a:9a:2c:ee:30:65:93:fa:4c:ce:bb:a3:0a:ff:
                    99:a6:95:86:86:e8:1e:0a:35:af:10:ba:4f:9a:2d:
                    a3:34:89:6b:83:69:e0:4e:20:23:1f:09:90:47:e6:
                    eb:54:21:5c:6d:47:94:fa:de:02:24:18:e9:ff:bc:
                    db:a2:0b:af:70:d7:15:75:9f:88:97:70:93:8b:bc:
                    60:ea:26:bb:a3:bf:43:81:01:be:ee:3c:46:f2:9b:
                    83:65:55:a1:63:41:0e:0d:91:f6:55:08:a8:82:a0:
                    3c:ec:1d:97:34:63:ed:6e:b0:a2:ff:e5:de:3f:7d:
                    06:4c:f0:8a:d7:e9:02:ce:6f:6a:9f:df:9f:80:b8:
                    49:04:36:8b:ed:d7:44:73:49:40:b9:b6:aa:af:63:
                    d1:50:47:6e:95:73:d4:22:9c:9e:ad:92:78:de:6a:
                    c6:82:e6:d7:7d:2c:69:c7:8b:15:c3:6c:a1:8d:2d:
                    06:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:37:DC:6E:A0:8D:23:70:2E:69:0E:F7:18:9A:36:1C:C8:84:C0:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/588158a4-5d48-3382-874d-5ff9eb3a6a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:7d:ad:ee:c7:8c:c2:6d:3a:9f:cb:f5:38:2e:70:95:00:83:
         eb:de:d0:99:80:b9:a0:15:56:dc:f7:b1:e1:32:c6:7b:d3:8b:
         21:9b:61:5d:30:fb:12:9d:c3:06:d5:11:28:3d:13:97:d5:b7:
         8e:ed:f5:7d:40:8a:34:e7:f9:90:b4:fa:f0:68:cb:a9:9e:97:
         e4:4b:4d:2d:0e:aa:00:fc:12:e7:10:a5:45:e2:b0:95:c7:66:
         76:01:38:57:79:27:22:d7:da:e0:39:41:73:3a:2d:dd:12:24:
         6c:e1:f9:04:df:6b:d3:2b:5a:a9:93:a9:57:f1:49:8f:ac:b2:
         6d:d7:e3:8e:6d:51:17:57:dc:62:4c:65:7e:87:d7:48:1b:55:
         60:4c:db:63:42:85:d6:0b:cf:30:e7:87:80:8a:8e:0d:ef:e6:
         43:50:9a:9f:ff:7c:6b:5c:db:f9:55:24:a9:d1:1d:d2:33:ad:
         65:ad:9f:a1:d6:a3:a0:b1:fc:3d:a3:5f:ff:fe:77:17:80:c9:
         6c:c8:93:b1:63:5a:1b:9b:c8:88:e7:e2:66:13:37:f6:a6:c4:
         db:56:2d:eb:60:4f:34:23:78:fa:b5:63:f8:f0:70:38:c4:c7:
         96:f8:a7:50:1d:bd:7f:7d:19:f3:da:c0:e8:2f:70:d1:2f:31:
         3c:ad:ff:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:32:49 2026 by rpki-client