Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/761ac2a5-635f-38de-aec9-afddd0c067d2.roa
File:                     761ac2a5-635f-38de-aec9-afddd0c067d2.roa (raw, json)
Hash identifier:          n6X8AcLy6xFGHofu8dFeW7YBO8Fq5UhWs8BPDLKwn18=
Subject key identifier:   14:AE:85:58:B7:C6:4A:6D:25:A6:8E:1C:FF:32:D8:A9:AC:D5:5F:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA8158BD77FAE326B3DDFA180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/761ac2a5-635f-38de-aec9-afddd0c067d2.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     396589
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:8b:d7:7f:ae:32:6b:3d:df:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=d7a44659-c72c-4f4d-8002-aac5d4a0b19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:54:55:60:05:b3:91:a4:94:0d:29:b5:de:22:
                    69:c6:3f:fe:fb:4f:67:2e:da:a4:80:ab:7f:13:79:
                    9a:e5:5a:80:91:0b:b0:4a:08:25:66:00:da:74:3a:
                    75:da:1b:a9:8e:bb:48:a8:34:c8:7f:47:c5:66:d8:
                    a7:a9:76:7a:8d:a4:74:78:57:27:09:42:6f:8d:0d:
                    55:97:77:b1:69:e2:68:9f:41:f9:09:3e:80:e4:f8:
                    42:a2:ef:99:f6:be:4b:a3:9a:fe:16:80:c6:1e:23:
                    bd:b0:1c:b6:a4:bf:fb:49:59:fb:a0:47:09:44:ff:
                    43:c8:b8:ea:29:e7:ff:f8:17:2f:b7:1b:76:6d:4c:
                    36:dc:68:77:e0:f5:39:01:69:93:77:d1:a9:46:55:
                    8c:63:9d:4f:e4:f5:b2:d6:9c:17:a6:ab:15:78:dd:
                    8f:b6:dd:f1:59:ee:a9:08:5f:4c:81:db:60:59:e8:
                    d6:84:14:85:9b:4f:5f:c7:c7:35:26:02:b3:d1:0e:
                    5f:ad:4a:4b:1b:8a:b3:30:b5:37:8b:46:da:cd:34:
                    b4:dd:76:3e:a8:ae:11:4b:63:32:8a:1c:4c:9d:33:
                    1f:4c:6c:9c:3d:fe:4a:19:e1:9d:eb:33:59:ed:7b:
                    3c:bb:45:d8:29:ee:47:14:f8:ab:ce:5f:d4:8a:81:
                    93:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AE:85:58:B7:C6:4A:6D:25:A6:8E:1C:FF:32:D8:A9:AC:D5:5F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/761ac2a5-635f-38de-aec9-afddd0c067d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:31:b7:87:93:1a:04:9c:54:98:c9:59:c5:23:e2:b2:bd:38:
         31:68:42:19:21:e5:8f:1f:d2:77:b8:cd:e8:f0:cf:00:ca:87:
         90:f0:28:60:22:55:d2:0d:3a:95:02:52:85:24:95:7b:6d:5b:
         f1:51:ad:6c:21:38:de:db:4d:97:f4:62:5f:9f:41:61:cb:58:
         a8:c6:48:0a:5c:0f:7f:5d:9b:90:14:47:c7:a9:ff:d5:13:ed:
         83:1a:cf:98:af:ae:db:8e:8c:f1:c8:bc:aa:0d:f1:00:0d:15:
         de:73:76:bf:40:4f:27:bc:72:4e:c3:f3:1a:a5:a8:ba:09:4b:
         b0:05:8b:a6:d6:f5:57:d0:e2:8e:3a:e4:9c:d1:ed:30:2b:52:
         8f:6e:dd:cc:73:21:09:2c:89:fe:b6:39:fd:dc:95:3b:4e:1b:
         4d:2b:2b:10:2d:0e:f7:13:e5:5d:a8:08:41:ed:62:e8:50:60:
         4c:69:99:2f:a5:2d:29:65:41:80:e7:dd:cf:98:da:67:f3:81:
         05:6e:53:a3:2b:c5:ec:96:f9:ea:d8:f2:b5:86:f3:99:11:a5:
         c1:36:32:4a:97:68:ba:53:1d:51:16:87:31:72:dd:98:29:25:
         f9:a8:75:88:0c:7b:64:85:47:0f:9d:2d:ac:9e:ac:4e:67:26:
         c8:b5:20:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:27 2026 by rpki-client