Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7795ffee-b76b-3a10-b1a3-007f64432e56.roa
File:                     7795ffee-b76b-3a10-b1a3-007f64432e56.roa (raw, json)
Hash identifier:          lvS/U627Jbawy2dVN2e64niYl4b0zck+qnCBginGaQk=
Subject key identifier:   09:EE:66:C8:8C:2B:32:E8:7E:FF:4A:2C:7E:46:29:C2:CE:F6:36:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E885A51D863FCD627B5659700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7795ffee-b76b-3a10-b1a3-007f64432e56.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396613
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:51:d8:63:fc:d6:27:b5:65:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=572c5383-b376-4b49-90fa-af715ff79dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:70:0a:9a:f3:44:b7:51:78:bd:17:2e:19:0b:
                    c1:69:f6:56:92:4c:09:5b:9a:d5:74:c9:0f:5e:cf:
                    75:29:bb:63:5d:e9:88:b5:6b:92:e8:6a:41:5f:56:
                    47:d1:6b:40:33:42:6c:29:a9:2e:0e:e8:38:69:fc:
                    50:57:39:6b:e8:04:ed:80:c2:6e:f0:5c:73:b5:c0:
                    d9:8e:6b:ba:03:8e:54:42:07:cd:12:a3:ce:83:0b:
                    6a:d6:a8:49:2a:de:76:62:8a:c4:c9:97:f0:45:96:
                    8a:73:9d:e3:66:26:a9:08:a5:5b:2c:57:5c:94:b0:
                    e3:1d:ee:89:b7:5f:af:4e:78:4f:3a:02:e9:07:f7:
                    cc:2b:ca:49:9f:22:bd:ae:c3:75:7c:35:9b:b0:94:
                    5a:f4:0d:ea:f5:28:41:a9:e2:83:36:1b:fc:38:c4:
                    4d:82:1f:8e:a2:79:94:7c:1c:f4:9f:8f:b0:ba:d7:
                    67:f6:94:3c:6a:bd:69:2f:13:e9:9a:44:52:3c:59:
                    59:2b:1a:15:98:49:0e:c3:5c:69:7c:80:82:9c:a0:
                    f5:8d:cb:e4:9a:4b:30:28:c6:d2:a9:95:05:fc:59:
                    db:60:fb:9e:46:02:d4:b3:4e:11:ae:94:4a:f2:b5:
                    d0:87:70:83:a7:6f:29:c8:71:27:39:fc:91:6f:c6:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EE:66:C8:8C:2B:32:E8:7E:FF:4A:2C:7E:46:29:C2:CE:F6:36:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7795ffee-b76b-3a10-b1a3-007f64432e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d5:60:c4:e0:2e:6f:62:18:9a:b8:20:d8:a0:9f:a2:b9:be:
         0a:82:b1:cb:c2:1f:1d:37:2e:f1:44:7e:f1:7d:c0:7b:a2:2d:
         52:16:08:88:6c:b0:8d:be:05:de:90:e8:89:04:02:02:ad:72:
         51:bc:95:cf:ec:2d:7f:a6:f1:b8:02:97:ec:24:89:c8:9e:86:
         b7:3d:25:c9:4f:d0:18:62:b2:30:07:03:0c:e5:c2:66:1e:6c:
         30:cf:6c:d7:88:ff:d2:8d:1b:fe:56:ed:45:f7:d8:33:8e:67:
         68:6b:c6:e6:45:40:1d:81:9e:30:55:45:c9:a6:fa:8b:9b:8a:
         b5:39:51:ca:90:98:7f:81:6a:81:3f:10:4f:66:2d:74:2a:dc:
         21:73:18:e4:be:2d:fd:5e:e2:78:bf:c8:1d:1b:0b:f3:7b:cb:
         65:c5:47:82:2f:16:f3:93:3c:48:a2:85:5d:cc:d2:f3:9d:9d:
         fc:3a:24:85:b7:98:b7:1a:ad:ce:3e:33:ea:6b:50:d1:7f:48:
         32:a6:d0:7f:3b:9e:49:5f:93:ea:a5:36:f2:73:be:7d:1b:db:
         1b:90:7d:63:dc:6f:44:d0:b8:24:09:a1:fc:88:90:ab:33:ce:
         92:49:b5:21:a1:d5:d5:35:06:b5:e9:45:1c:d7:02:a1:4e:d6:
         bb:5e:fb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:46:13 2026 by rpki-client