Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7895057c-2af6-35b6-a93a-d54002fad2a8.roa
File:                     7895057c-2af6-35b6-a93a-d54002fad2a8.roa (raw, json)
Hash identifier:          TnCpBEvRwihDml3A+JIabs2NygshsbMt3BG9N+7zYGs=
Subject key identifier:   71:52:7D:72:45:56:E7:07:B6:4B:F7:5C:F9:0B:3F:C3:D0:D5:E8:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F374D3278FB8F9483FC8A2580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7895057c-2af6-35b6-a93a-d54002fad2a8.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     36616
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:32:78:fb:8f:94:83:fc:8a:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=d36e0a55-ebdf-499d-aafb-fbffb47cba46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f3:31:e5:78:dc:94:69:2b:2c:6e:2e:b3:56:
                    e0:85:3a:05:0d:3f:bb:7e:68:7c:5b:c2:26:d0:c6:
                    0c:4d:2f:b3:a0:6c:a1:a7:03:b2:03:ce:59:28:08:
                    b2:d6:b2:88:8f:c9:19:c3:66:1d:0f:53:ef:bf:d4:
                    19:56:30:56:0c:c5:75:ab:e3:18:02:75:36:80:64:
                    bd:c0:c8:52:39:22:8e:7c:ba:a3:71:f5:54:59:f3:
                    45:cb:53:05:cf:0b:18:5d:16:8b:b6:c7:87:80:56:
                    f3:9d:12:84:85:ec:00:d1:37:3c:e2:4f:ec:0b:99:
                    76:c3:48:bf:a5:1d:8b:b2:19:1f:cf:d3:69:20:9f:
                    51:97:79:ad:6f:63:a8:8c:c9:ba:24:dd:28:02:79:
                    39:ec:08:4a:3c:a4:fa:13:6a:e4:aa:3a:ad:54:c1:
                    6d:10:d7:5c:9b:d2:19:ed:2c:78:cd:93:5d:22:e4:
                    12:a7:e1:27:b8:dc:fc:e9:96:c5:23:61:e0:e2:3d:
                    cf:7a:77:30:af:e3:31:a4:08:56:80:02:d1:c5:4c:
                    5e:42:73:70:06:a8:fd:14:58:61:dc:c5:63:36:55:
                    e4:04:ba:96:a5:eb:e0:af:94:d3:34:65:37:6d:1d:
                    76:80:e1:26:26:e8:d7:9e:a7:05:d7:e0:85:c5:81:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:52:7D:72:45:56:E7:07:B6:4B:F7:5C:F9:0B:3F:C3:D0:D5:E8:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7895057c-2af6-35b6-a93a-d54002fad2a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:52:fb:84:49:21:55:63:4e:be:60:45:2a:d8:24:ac:71:c4:
         50:a1:72:cc:aa:d5:01:6b:82:82:34:69:24:84:a0:55:32:8c:
         46:f7:7f:db:a8:b5:00:d5:7c:0d:e7:6a:6a:14:31:b4:0a:5b:
         68:58:30:ae:1b:da:98:23:1d:b5:40:8d:c0:a6:41:fe:46:a7:
         18:3f:35:8f:76:48:e5:3a:0c:74:95:a9:fc:6a:c1:e7:d4:71:
         ae:d1:8d:9d:c0:7f:e0:37:cc:fa:12:eb:2a:da:b2:0e:ad:11:
         d8:9b:21:48:ef:a1:d7:f9:ca:b2:74:80:65:b7:e8:62:70:ba:
         2a:03:42:ca:0c:cd:5d:09:b1:64:f2:9b:a6:05:a9:94:a9:d3:
         65:89:cc:d2:a8:a7:b7:a0:0c:e9:ab:d6:58:67:23:98:d3:7d:
         e0:93:21:07:f3:40:be:79:6e:57:5d:5e:76:e0:9d:5b:fb:e4:
         d6:81:ab:f5:0f:78:7e:34:3b:b6:8a:2b:a5:6f:a6:fa:6a:61:
         cb:af:a1:ff:66:66:64:71:60:13:35:7d:b9:43:7a:dc:dc:b8:
         f2:63:f6:24:06:bc:af:37:d6:af:4b:a1:8c:bd:e3:fd:f4:61:
         2e:b1:a6:d7:93:2c:0d:89:75:e4:21:18:e4:d2:92:7f:7a:be:
         67:c7:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:23:02 2026 by rpki-client