Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84b0e4e1-a74c-35b4-9e25-dfb046fa9d8b.roa
File:                     84b0e4e1-a74c-35b4-9e25-dfb046fa9d8b.roa (raw, json)
Hash identifier:          maeXS6yeM0IKr49uVlayTSsvcKZwYjg7YMsYnDZ5d2Y=
Subject key identifier:   68:9A:CD:4D:B6:EB:E6:D0:0B:E6:40:5A:0C:06:68:B9:92:6B:6C:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA8158E6ABD4F74F94EC15680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84b0e4e1-a74c-35b4-9e25-dfb046fa9d8b.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     396611
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:8e:6a:bd:4f:74:f9:4e:c1:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=0a4bd2bb-9057-434c-9004-430ab806e48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:61:bc:6a:67:aa:27:b8:ab:80:bd:8c:6c:c8:
                    11:57:bd:d1:96:04:3b:25:3b:55:90:1b:3d:f3:b5:
                    76:5d:3c:55:87:fd:b0:f9:7b:d0:70:19:c4:aa:62:
                    49:09:fd:7f:1c:a8:70:a5:47:12:62:50:2b:60:69:
                    e2:35:37:c6:a8:d1:12:82:0d:60:c7:6d:c7:d8:16:
                    87:d3:af:85:2d:db:b8:1a:2c:2b:bd:8e:54:ec:ae:
                    cf:2f:10:10:31:d5:df:7f:73:0b:a6:0c:e4:e6:e9:
                    18:45:d4:b2:88:d2:23:f2:ec:74:a2:c7:e8:c6:53:
                    df:d4:ec:22:9b:85:c7:5b:c0:37:de:ef:4c:23:b8:
                    bf:97:c9:f9:20:8e:76:22:4f:8c:5f:5e:7e:14:f5:
                    e1:b5:00:ac:af:e1:23:19:6e:57:c0:2f:9f:f4:d4:
                    81:21:b2:bc:d4:0c:87:5a:ca:86:bc:c4:dd:71:de:
                    bd:d4:98:44:45:a2:76:a9:05:e4:5e:9d:1c:d7:59:
                    76:36:1a:35:91:12:93:9f:08:67:c0:3b:65:cc:88:
                    46:b7:4a:2d:ba:ee:90:8d:af:65:80:fd:ad:39:3b:
                    a4:77:26:e0:8b:9e:62:22:b6:b4:f3:1e:2a:70:56:
                    e5:6f:a8:65:bd:91:dd:a4:bf:95:9c:e6:b6:f9:cf:
                    31:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9A:CD:4D:B6:EB:E6:D0:0B:E6:40:5A:0C:06:68:B9:92:6B:6C:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84b0e4e1-a74c-35b4-9e25-dfb046fa9d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:45:30:23:88:3c:75:dd:1f:79:2e:07:a9:c2:5b:f9:f5:90:
         c8:99:8d:f3:a1:c7:8c:b0:02:11:e6:74:15:af:eb:a2:78:92:
         c1:d0:52:58:14:a3:34:97:5f:8c:7a:33:7a:1d:cd:43:ea:19:
         dd:3a:36:12:92:87:65:05:5e:b3:23:15:ac:c5:7a:40:fc:85:
         11:f5:dd:d0:10:6b:8d:29:f1:f1:7c:f5:6a:01:1d:7f:7d:56:
         70:3d:b4:7b:95:53:54:58:84:ad:e2:25:2e:8f:d9:28:d3:cc:
         39:9a:23:3f:08:bf:43:70:af:b6:14:c5:13:c8:fd:3f:30:2d:
         6a:3a:e9:11:8b:19:6f:22:be:15:fc:a5:64:fd:5d:ea:f2:47:
         88:ba:a8:44:01:35:e5:cf:15:e5:53:a6:a7:ce:0b:fb:1e:e6:
         0c:c4:de:ae:78:77:5c:77:3d:14:13:cd:06:4b:86:62:ec:90:
         1f:78:e3:d0:9d:aa:35:14:26:2f:2d:b5:7a:6f:ea:c4:6d:76:
         e5:b6:ab:d9:b3:75:51:4b:1c:49:15:3d:dc:bc:e5:9c:f8:88:
         c9:b2:bb:82:7c:71:09:5c:7a:80:10:37:5b:17:84:bf:64:6e:
         73:8d:f7:d0:93:7a:db:e9:57:fe:9d:dc:78:d1:e3:8f:02:4d:
         50:ec:3f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:05 2026 by rpki-client