Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b5f533a-7178-31d0-81f6-1d50c070bd84.roa
File:                     8b5f533a-7178-31d0-81f6-1d50c070bd84.roa (raw, json)
Hash identifier:          29h5ZJkxWmenfRNe+1xupVPi50vvwRn//1YwgGZek1M=
Subject key identifier:   4C:2D:E3:48:9E:4F:65:47:86:17:D7:7B:21:BA:ED:7D:AC:67:B1:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E94EA648B5DAD797524A24780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b5f533a-7178-31d0-81f6-1d50c070bd84.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     396606
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:64:8b:5d:ad:79:75:24:a2:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=da605d23-fca5-40c8-8b08-304a6afac3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e5:c6:69:87:87:e9:95:f2:24:d1:6a:8c:cc:
                    d1:08:46:3f:7a:d5:57:0e:44:42:d2:91:52:a1:82:
                    5d:d6:3a:49:3b:fb:20:19:b5:fa:5e:7a:56:c7:84:
                    f6:38:dc:18:73:9d:f0:c0:37:c4:63:ab:af:39:f2:
                    b1:e8:d4:3c:b9:34:42:8e:a1:5a:9b:89:f3:07:2c:
                    1a:12:76:90:a5:c6:bb:37:22:a8:e1:b9:d1:f0:f4:
                    4c:8f:41:cb:9a:98:d6:ee:4e:37:2c:a6:ac:48:c9:
                    4f:ac:f5:78:ea:81:06:ef:18:6b:1f:2e:bd:d6:aa:
                    f3:5a:39:90:fa:cc:c5:0f:e5:b8:d0:ce:f9:86:52:
                    b5:ab:72:61:a7:0a:2e:ff:fc:9c:0a:bb:32:4f:38:
                    bf:49:03:cd:27:72:bd:7f:fe:86:5a:44:57:f4:d8:
                    7b:d5:16:b5:af:24:ab:9a:8a:82:18:80:4d:47:83:
                    bd:eb:4d:2d:f9:94:af:58:5d:2f:d5:d4:3c:18:42:
                    66:27:1b:b7:a1:c9:24:c5:a5:93:0c:7d:55:d4:50:
                    37:ee:9a:48:5d:17:a3:45:80:27:61:2f:e5:9c:1f:
                    81:33:7b:cc:4e:cf:92:7d:dc:a5:64:39:70:53:4b:
                    dd:e2:59:78:b0:8a:a7:6b:46:67:5f:c3:14:6a:d7:
                    b1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2D:E3:48:9E:4F:65:47:86:17:D7:7B:21:BA:ED:7D:AC:67:B1:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b5f533a-7178-31d0-81f6-1d50c070bd84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f7:05:78:94:dc:10:20:59:bf:5e:2f:79:9d:8e:7a:c0:60:
         07:0f:92:92:7e:8c:9c:4e:2f:d6:48:e8:f4:44:f1:7d:b5:e3:
         9c:cc:80:90:20:2d:ba:b6:65:07:a3:af:ee:5f:4b:6d:b5:63:
         6d:fc:5e:f5:11:90:c7:9f:19:3f:df:67:92:a9:ca:f4:04:d1:
         16:97:cb:1e:23:28:fc:ac:c2:ee:53:b8:4d:21:ae:0d:ad:8e:
         86:51:5b:cf:4d:b2:54:81:3a:11:27:a7:55:ff:07:37:35:e3:
         3b:5e:f7:f0:b2:ab:dc:84:79:2c:40:c1:83:62:57:63:d3:58:
         cd:61:23:95:4b:51:57:7f:a8:11:94:a3:f7:24:ec:a7:b1:a2:
         6f:42:71:1c:1c:9c:51:88:8e:85:3d:de:6a:be:20:c0:84:7c:
         2d:43:f1:f9:39:30:34:23:9f:e8:e5:d9:a4:96:5f:c5:4d:67:
         9a:2f:96:ee:7d:cd:34:53:3e:d7:09:94:e0:a7:4e:a1:95:b6:
         65:4b:b9:73:4a:aa:74:b9:ae:c4:70:fb:2a:b8:ba:66:28:06:
         7f:c8:e3:33:fd:7d:90:f3:ae:50:48:7e:4f:61:92:c4:2c:87:
         61:84:22:81:72:b3:6c:4d:5c:da:cc:e0:13:28:4b:de:8b:24:
         00:d9:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:11:32 2026 by rpki-client