Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7444b28a-9c53-3306-9eb1-f326f41db346.roa
File:                     7444b28a-9c53-3306-9eb1-f326f41db346.roa (raw, json)
Hash identifier:          i+4OnWvxqb3aD+MY0WR5ftJLXX6JHMd5xSk5c7rbvF4=
Subject key identifier:   13:5C:7A:E5:88:EF:10:36:9D:4A:F9:2C:74:C4:3D:01:C5:20:1C:18
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E885A50695B3AE5D93F1187A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7444b28a-9c53-3306-9eb1-f326f41db346.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     397198
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:50:69:5b:3a:e5:d9:3f:11:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=5226d074-c797-402c-a53c-9c12846ad36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:db:b7:d9:0d:a0:a7:24:8e:1c:bb:5a:35:
                    8f:6b:91:f0:86:a7:03:8a:74:1e:aa:11:91:bd:25:
                    2e:96:dc:8b:99:c4:77:73:59:fa:65:a0:42:d9:f1:
                    54:81:8b:ac:e4:88:e3:6b:15:e2:31:37:e3:d5:03:
                    80:c2:7c:db:ce:77:02:3e:55:8c:3d:13:83:06:48:
                    26:75:ff:14:dc:2d:ab:c1:66:6b:22:28:78:5a:18:
                    53:eb:b7:10:b1:53:0e:a6:0c:8a:7a:c1:00:72:88:
                    ab:c7:28:ff:a8:fc:bf:87:3a:83:15:bf:bd:a6:ea:
                    60:ea:86:6b:0f:42:0c:91:f7:23:a3:85:15:df:a0:
                    79:2d:04:90:94:92:83:45:0a:8b:1b:eb:6f:76:ab:
                    5a:52:a9:3a:4c:b5:37:95:c7:78:a5:22:94:6b:3b:
                    ae:0f:a9:ee:44:65:b7:8d:03:cf:a9:7d:2b:53:02:
                    fe:2e:f6:46:db:c6:60:96:59:50:3b:73:73:d7:53:
                    7c:a4:1c:82:19:43:3d:5c:22:67:98:74:6c:72:4c:
                    7e:21:da:97:57:1e:65:cc:22:94:10:08:a0:17:3d:
                    0b:4e:8e:98:fb:5e:99:0b:df:fc:61:0d:74:29:fa:
                    29:7c:ad:a3:ba:31:85:3e:9e:70:f1:19:cb:1e:ff:
                    3f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5C:7A:E5:88:EF:10:36:9D:4A:F9:2C:74:C4:3D:01:C5:20:1C:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7444b28a-9c53-3306-9eb1-f326f41db346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:c1:45:2d:04:5d:9e:70:98:00:6d:e7:71:b4:16:58:c6:e7:
         f9:86:29:9d:e6:67:e9:fa:88:09:53:83:8a:ad:fb:8f:98:15:
         87:8b:d7:93:3f:e8:1c:78:48:80:89:dd:1b:33:36:11:fe:f6:
         8d:a2:64:8c:e4:f8:2e:46:7c:83:70:63:a1:8d:40:f6:e0:a5:
         d3:f9:5e:35:fc:e3:a2:42:45:e1:24:64:f8:5f:c1:90:a2:2e:
         ae:45:99:67:26:89:b3:09:37:b9:28:0e:5d:e0:b2:d4:b8:04:
         12:26:13:ef:b5:7d:73:e7:0f:26:84:74:72:1b:6b:b8:9f:a6:
         d4:63:c7:bc:25:bf:30:e0:16:f4:92:a6:ee:07:b7:a4:eb:f3:
         95:76:69:f6:ff:9e:40:8a:a8:92:6b:df:da:3c:a2:b1:7a:b7:
         1b:d3:c4:36:d4:2d:d9:c0:b8:db:e6:3b:69:1d:66:be:1a:94:
         1e:0e:57:22:d8:45:6a:67:ef:45:f3:9d:da:31:ee:90:30:b6:
         ad:b1:a8:54:e3:cd:70:bc:81:48:f7:d7:64:d0:1f:69:39:0f:
         82:c2:d3:df:60:72:86:ae:a0:85:03:35:af:2e:1f:5a:61:a6:
         26:96:10:0a:b0:8a:4e:f5:2b:e2:92:c4:a5:d4:84:56:b4:ca:
         cb:6f:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:59:53 2026 by rpki-client