Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8357f385-187f-3953-a344-1f369a16deef.roa
File:                     8357f385-187f-3953-a344-1f369a16deef.roa (raw, json)
Hash identifier:          dmNZpjStwSlMgkPB57PyeAHYMTeJpTnqb6SJJU3ldm0=
Subject key identifier:   27:9F:D6:66:29:62:34:9E:F8:F6:76:75:21:50:89:03:CB:87:8D:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E94EA6678A5689963F3957580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8357f385-187f-3953-a344-1f369a16deef.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     396544
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:66:78:a5:68:99:63:f3:95:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=499f7cda-80ef-4d74-9233-73a97f7a1fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:52:96:fe:45:04:64:30:9a:0e:86:3c:53:3b:
                    56:f0:93:6a:3f:30:7b:d2:6b:4f:56:c5:26:cf:a3:
                    bf:f8:a6:f8:11:e4:77:e4:41:b0:c8:8d:2e:73:bc:
                    d0:6a:53:32:b0:60:30:f6:ba:1c:5e:77:28:42:84:
                    8d:4e:91:c6:99:60:1a:2a:91:4f:d1:d5:2e:75:09:
                    b5:98:72:0d:88:14:8f:c8:ea:c9:93:5d:03:bc:20:
                    7e:3d:0a:90:3e:f8:70:42:fc:d1:e1:d6:4e:6f:77:
                    44:29:3e:77:49:17:2a:60:ab:59:d4:62:2d:43:d9:
                    45:be:35:22:ce:98:d3:df:fd:b6:5c:d9:6a:6b:21:
                    3b:5e:b9:ab:b5:0f:a2:b5:f3:b0:7c:c3:1e:53:fd:
                    1e:f2:15:f7:81:4f:30:7c:15:be:b4:6b:ee:6a:23:
                    95:b5:92:cc:a8:23:ae:88:90:08:1c:d1:20:c5:6f:
                    c1:50:00:60:2d:0d:ba:55:93:bf:ff:d6:dc:84:34:
                    e1:bd:e1:57:c8:5b:7b:3e:38:b0:33:c8:7f:be:a3:
                    34:69:26:ab:cf:b1:e4:fc:9f:a6:60:a1:45:b2:0d:
                    ed:dc:0e:8c:9a:db:19:ac:56:d6:7d:84:7f:94:5d:
                    3a:d0:6b:0c:81:45:5a:22:bb:8a:2e:3c:cf:40:92:
                    02:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9F:D6:66:29:62:34:9E:F8:F6:76:75:21:50:89:03:CB:87:8D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8357f385-187f-3953-a344-1f369a16deef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b3:08:2c:bd:b9:e7:e8:7b:c3:b0:8b:51:8b:0a:3f:1f:2b:
         c7:18:22:ba:77:9d:04:90:c9:4d:d2:dd:c3:36:dc:54:d3:9b:
         de:91:89:36:3c:35:41:f1:8b:7a:8d:01:8c:70:70:93:30:25:
         b9:1a:e8:b9:8f:b1:02:8b:a4:8e:22:68:49:37:3c:08:ef:9b:
         de:71:2d:3b:aa:1e:a4:fc:ab:41:d4:6a:74:a1:14:ac:23:e5:
         7d:66:f8:7c:06:60:e3:5a:40:be:26:67:b4:bf:6a:d3:e1:be:
         84:b6:df:ec:56:7c:70:e2:2c:5d:c8:37:33:14:1f:07:b6:a9:
         47:89:cf:87:6b:1f:da:de:30:df:33:78:d6:0d:aa:f0:58:ad:
         f8:f1:1f:52:f4:16:27:8a:18:81:e0:e9:9d:3e:80:41:61:ce:
         40:45:63:0e:f1:3f:5a:45:10:ec:8d:25:53:5a:39:1b:3f:d1:
         df:8e:85:91:64:81:87:97:11:5d:91:a5:ee:1b:41:71:f7:82:
         18:fb:a2:f7:8f:81:87:a0:fd:92:fc:ba:80:59:fb:f2:de:5d:
         f1:01:c6:ce:0c:93:02:a1:cd:01:24:be:87:5d:ce:13:e7:f6:
         21:f8:98:84:2d:ce:8f:2c:ff:c7:57:51:d1:21:52:75:a7:55:
         a9:8d:51:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:47 2026 by rpki-client