Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89e0693f-0d2c-3156-920b-b925583a6a67.roa
File:                     89e0693f-0d2c-3156-920b-b925583a6a67.roa (raw, json)
Hash identifier:          9ipHoK4sWEMhpsCbtSIYM2jrQbhpf4hdEHTD/hjD6nU=
Subject key identifier:   83:C0:89:7B:1E:D0:DF:E6:29:4A:24:BD:11:E0:5A:5C:9F:10:F0:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E94EA631F9813BD9A759C0180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89e0693f-0d2c-3156-920b-b925583a6a67.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     396586
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:63:1f:98:13:bd:9a:75:9c:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=70d7bd51-a457-422e-92e4-8e9d584a8a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:82:39:e8:11:2d:e9:5e:b1:5b:0b:a7:31:
                    2d:55:46:8a:bf:61:6e:4a:d1:a8:d3:d9:32:db:06:
                    fe:71:46:01:2c:dc:8a:77:d1:20:5a:e8:79:13:86:
                    fb:2e:2f:7a:1a:50:e2:5a:dd:18:f1:b6:3e:56:95:
                    b2:eb:e6:57:08:5e:90:fc:23:fd:c6:64:b8:5f:64:
                    7c:21:83:3f:79:74:fe:19:77:5b:eb:b8:8c:81:ac:
                    3b:b4:25:c2:d4:f4:08:47:e6:8b:37:37:43:7a:c7:
                    a5:de:7d:d6:a2:fa:d2:1e:dd:77:31:9d:fb:85:6e:
                    ee:99:a5:a4:7a:d8:87:17:0c:04:b8:0c:24:97:60:
                    28:23:39:6d:d6:43:c2:16:17:0c:1b:87:80:b7:66:
                    71:89:61:f0:7b:fb:32:7e:ec:d1:71:31:6b:e0:0a:
                    cb:cd:f8:40:37:2a:a8:46:fa:44:c1:a3:c0:aa:89:
                    36:e8:00:69:bc:a6:15:49:02:c0:b0:3e:e7:a7:8e:
                    98:3f:b7:33:d7:b8:0d:fd:75:56:fe:11:8a:fa:96:
                    71:bd:a8:06:54:d0:5a:ae:86:94:67:69:ac:e8:ef:
                    08:25:f3:55:13:14:26:44:73:2a:e9:00:6d:f6:ed:
                    84:8a:8e:48:b7:6a:2b:50:6a:ea:a0:86:b9:f9:cf:
                    aa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C0:89:7B:1E:D0:DF:E6:29:4A:24:BD:11:E0:5A:5C:9F:10:F0:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89e0693f-0d2c-3156-920b-b925583a6a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9d:cc:d0:a8:0b:af:b6:f5:5d:ee:56:e1:89:22:c3:d4:f5:
         83:b4:27:09:4d:d2:4d:9e:ad:b7:1f:b1:86:b5:84:ed:80:d1:
         74:b8:2c:5b:15:ac:6e:3b:ad:82:2f:fb:69:97:fa:b8:9e:85:
         9f:01:b1:10:fc:52:bb:94:c5:f4:3d:bd:be:76:5e:57:ae:2a:
         10:66:d2:87:62:65:e0:e2:d4:86:aa:31:0e:ea:3e:5e:5a:a4:
         a2:4d:7d:5d:7a:46:4f:1c:23:55:c3:ac:57:64:62:7a:b8:88:
         cd:2e:fb:98:9b:df:9d:b4:32:35:c0:2b:bf:34:1e:84:06:b0:
         7b:70:65:65:7f:38:66:4f:56:01:3a:1c:16:64:b1:ad:a2:7d:
         46:2f:7f:99:eb:2a:bf:ad:ac:59:42:47:b0:74:39:d1:ae:d1:
         15:42:4d:3e:e0:3b:d2:46:5f:bf:67:8e:42:fb:b2:0e:8b:47:
         b4:e5:fd:9c:32:0a:f6:70:99:54:cf:71:df:40:63:ba:18:c8:
         d1:b6:d2:57:2b:ce:37:96:6e:0e:a9:21:ea:98:3b:64:9c:e9:
         c7:89:b3:19:00:26:90:b1:ec:f1:d0:49:ee:22:4a:33:6c:8a:
         dd:d8:85:f0:0b:16:2e:f0:e8:60:87:68:9e:0c:04:20:90:b3:
         3a:8d:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:30:03 2026 by rpki-client