Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa
File:                     87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa (raw, json)
Hash identifier:          nNXxm3b0/xdc5dbczMmje8NCAG4RIFrOxHllowSNwvg=
Subject key identifier:   A1:A6:BE:73:6E:CA:4F:53:84:F7:D6:73:98:56:AF:E4:4F:CC:48:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA8158DE44837B7ACD8FFD880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     396550
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:8d:e4:48:37:b7:ac:d8:ff:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=5b61e4d9-3a7c-4afa-ac81-281677e498fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:01:9d:c4:a7:cb:96:73:79:b1:a6:04:26:11:
                    d1:f9:95:33:46:20:c1:33:e3:e5:60:9f:a1:f0:b5:
                    b3:4a:6c:b4:d6:68:fc:04:b9:5d:9c:1b:42:35:e7:
                    d8:84:46:4a:38:c4:7a:84:b6:f4:09:63:63:1b:50:
                    44:46:d2:eb:ec:c3:da:ea:b5:39:b5:bf:2f:26:82:
                    3a:0c:21:18:60:07:65:21:0b:81:a3:d0:b0:66:5d:
                    21:98:da:c8:f8:15:a5:8e:1a:b5:89:34:ac:b2:9f:
                    70:fa:9c:52:29:5c:f9:1c:4c:c9:ab:72:91:e7:51:
                    c7:66:ca:df:c3:01:a3:79:2b:1d:7c:8b:e7:80:b3:
                    3e:a6:c9:0d:8f:0a:97:0d:61:c7:60:bc:4b:86:9b:
                    04:06:fc:f0:bc:88:24:72:c2:af:46:1f:93:2f:a7:
                    e0:35:38:77:91:51:34:1b:af:69:46:c0:04:48:37:
                    49:4a:2c:af:83:e5:f2:da:a7:98:ab:46:94:15:39:
                    2d:53:d3:7c:db:6f:a3:3e:73:1f:20:56:1d:66:90:
                    ab:23:73:7a:97:a1:5f:f3:10:d6:18:20:9a:67:79:
                    b4:77:74:21:f5:74:ac:8d:fd:26:8a:9b:28:17:a6:
                    7a:02:ef:ac:d2:ae:f6:79:6b:67:da:6a:be:58:3b:
                    7b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A6:BE:73:6E:CA:4F:53:84:F7:D6:73:98:56:AF:E4:4F:CC:48:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:90:8f:1d:df:c9:0b:5c:ba:8c:62:e9:f3:fe:36:13:78:c3:
         79:b4:7e:41:52:fc:68:31:61:d3:ff:e8:5a:e1:ac:b1:73:bd:
         d8:1b:ce:9c:f0:e4:0c:0e:ad:04:09:7e:6c:65:e1:74:b8:f6:
         4b:ad:47:64:b7:40:bb:e1:3a:f4:97:6a:dc:f4:9b:aa:0b:e1:
         e2:b7:61:ad:07:ab:91:b8:20:dc:8a:d4:2c:68:8d:df:07:70:
         2a:5f:6e:eb:dc:4d:01:42:1d:99:dd:66:ac:92:da:52:8b:9c:
         9b:4d:f4:aa:71:e3:af:da:29:79:af:c3:99:fb:99:d8:46:3e:
         37:58:1e:7b:5e:6b:68:d2:17:0c:17:9e:28:5e:51:34:c3:11:
         f4:73:69:26:59:67:eb:71:75:0e:1f:8a:60:78:2f:b1:17:77:
         70:96:33:b8:66:b2:19:cb:18:d6:29:bd:db:e3:a6:be:62:82:
         49:46:37:75:28:d2:6d:d4:08:33:c4:52:48:7b:1d:33:ea:62:
         53:cf:30:0f:34:be:a5:5b:11:6a:44:15:31:02:3d:e6:a8:24:
         36:23:64:b6:6a:21:3b:db:59:94:17:6b:a5:6d:ad:2e:50:e5:
         3f:8e:98:27:24:ac:b1:09:0b:9f:62:a5:d8:65:3f:5b:fc:1e:
         55:4b:da:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:32:44 2026 by rpki-client