Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7135451e-c73c-38f4-b61f-e893e9470dfb.roa
File:                     7135451e-c73c-38f4-b61f-e893e9470dfb.roa (raw, json)
Hash identifier:          tw9yug8JrZ1kmaN/FdclT44MuiMB8WTiF0rMr7t0aQY=
Subject key identifier:   CA:6C:21:86:14:5F:44:A3:0B:C1:EA:9D:7E:9D:28:92:FD:05:3F:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E94EA66C62720C0F07913BD3A
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7135451e-c73c-38f4-b61f-e893e9470dfb.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     396617
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:66:c6:27:20:c0:f0:79:13:bd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=94a6af22-2917-42f5-96d1-8034a1b2855e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:66:2f:36:78:69:3f:26:f9:a8:4d:be:44:
                    e8:66:e1:20:cf:a7:d1:51:26:fd:33:5a:4c:a9:13:
                    5c:08:33:83:f1:b6:18:5e:0b:92:04:9d:87:29:d8:
                    20:3b:c5:bc:32:8e:29:e6:16:4f:47:5a:65:41:06:
                    63:cd:f0:89:7a:03:24:38:17:65:c7:6c:4f:6b:88:
                    7b:92:e8:ba:67:97:2d:cd:6a:85:ae:5f:0b:9d:93:
                    92:cd:c8:10:08:da:19:7a:a6:13:13:6a:91:d0:3f:
                    47:6e:f1:b2:7a:b6:c0:a0:5a:62:79:30:98:25:21:
                    cf:ce:79:cc:1a:df:5a:6e:6b:50:b4:2f:5b:79:04:
                    7d:9b:38:ad:ba:fa:82:be:15:5d:0b:1d:35:3f:18:
                    d5:03:4f:9f:19:e3:57:61:19:e5:41:ba:20:cb:de:
                    43:c5:76:c2:d4:d0:38:18:63:14:73:7f:40:30:b2:
                    b3:3f:ad:86:c3:1a:2c:fe:53:0a:c2:31:4b:8d:2c:
                    96:a8:a3:e0:2f:58:1d:27:05:eb:40:12:5e:77:67:
                    ce:0b:5e:44:24:dc:2d:ea:d2:a5:57:f6:d4:08:bb:
                    41:9a:1c:40:50:bd:b1:68:51:e0:14:0a:47:1f:31:
                    f7:91:f5:43:01:87:98:03:97:2b:cb:f3:fe:e8:79:
                    00:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6C:21:86:14:5F:44:A3:0B:C1:EA:9D:7E:9D:28:92:FD:05:3F:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7135451e-c73c-38f4-b61f-e893e9470dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:33:6f:52:52:cb:6c:03:6b:8d:57:65:2d:f0:be:53:00:c1:
         c9:8c:2c:3d:fd:11:06:61:dc:ee:54:ea:68:bf:4b:dd:ba:58:
         d6:0a:0c:6b:47:13:2d:de:d9:4e:ac:60:b0:4e:68:31:ae:f1:
         24:55:cc:95:7b:97:63:96:71:3a:fc:d9:f7:41:6f:96:64:4c:
         08:a8:54:57:bd:b4:1e:5d:0a:4d:0e:fe:38:b0:79:c2:db:19:
         6a:db:a9:23:bd:28:0d:0f:4e:fe:ab:da:3e:d6:71:ab:36:06:
         32:8c:af:f8:71:32:f1:96:8c:a5:e4:43:14:5e:1d:11:49:22:
         e9:0f:17:36:31:ed:27:a6:3d:73:02:71:61:60:b3:2a:cf:6e:
         42:45:6a:02:29:41:95:8b:93:ba:da:36:9d:24:8b:7a:40:f4:
         ae:2c:f7:bc:75:18:55:7a:c4:99:41:2c:27:e5:20:de:1e:5e:
         1d:27:a9:0d:6a:67:96:e2:ed:b5:9a:13:f4:b2:ca:b1:77:4e:
         a9:88:6f:84:42:c1:35:e9:54:5d:d6:f2:04:33:21:0e:5b:53:
         85:da:39:33:0b:3b:5c:67:d0:3d:72:ab:7c:c6:e7:a3:35:bc:
         cd:b3:18:17:81:97:70:f6:9a:35:fa:44:00:45:fb:26:92:2e:
         8b:5d:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:47:34 2026 by rpki-client