Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/934cf549-851b-32de-a903-69a46baf5efd.roa
File:                     934cf549-851b-32de-a903-69a46baf5efd.roa (raw, json)
Hash identifier:          mvUupdfzxKWvA5+L0dAMhqQ8VABSD47ml28fF/zcrnQ=
Subject key identifier:   90:65:62:DD:84:A0:C4:71:A2:74:EE:12:85:05:AF:B2:CD:73:70:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DB4A5907722825CDD6E3DFC60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/934cf549-851b-32de-a903-69a46baf5efd.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     397195
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:90:77:22:82:5c:dd:6e:3d:fc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=ef3cad17-0478-4927-9c47-82964ed0f15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8c:d8:91:fc:d6:52:6f:0b:9a:97:25:5e:54:
                    d5:36:b2:1a:d3:18:b3:80:18:5e:e5:d5:60:93:7f:
                    5b:2c:c8:3e:30:55:3b:19:37:71:7e:75:e6:1f:f7:
                    40:d0:12:03:34:92:84:43:ff:95:2a:01:95:df:cd:
                    af:06:0b:07:5a:bb:16:a3:ca:e1:4d:5a:c9:5a:51:
                    5e:25:6e:86:3f:48:de:8f:7f:b4:a6:eb:4e:91:b7:
                    07:75:2b:1f:7e:83:ae:24:b6:34:f1:ba:6c:6c:24:
                    d1:9a:7b:31:d3:1c:a2:53:3e:3e:8e:41:b5:43:8c:
                    60:d0:56:0c:68:b7:c4:01:66:d8:18:a1:2a:b3:67:
                    af:2f:d1:22:74:e5:a4:64:e2:75:b1:54:f0:56:13:
                    24:c0:2b:8a:85:6b:49:83:f4:a2:70:ea:ee:1e:19:
                    d0:5f:aa:f5:84:94:8e:1a:d3:95:44:3a:73:32:33:
                    70:58:ce:d9:33:25:a4:34:ba:77:ad:40:b3:33:4d:
                    da:74:46:61:70:f7:22:42:4d:c5:18:fc:19:4e:14:
                    0a:24:fd:32:73:49:4f:65:73:a0:fd:d6:54:61:f5:
                    af:75:9c:55:f6:ec:39:1d:49:4b:bc:6d:9a:7a:41:
                    d1:78:61:be:5d:29:56:26:03:07:3a:98:e2:da:41:
                    01:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:65:62:DD:84:A0:C4:71:A2:74:EE:12:85:05:AF:B2:CD:73:70:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/934cf549-851b-32de-a903-69a46baf5efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:07:a3:84:c0:51:bb:c4:20:92:47:3a:30:25:b8:ad:f9:ea:
         35:22:47:e0:af:e0:53:72:90:aa:5c:10:8e:00:ef:0f:15:15:
         52:cb:56:4e:85:77:a4:0f:07:44:ed:87:0f:86:7f:5e:9a:17:
         c8:b0:72:0e:53:87:13:25:0b:79:92:50:53:ad:fb:9b:54:54:
         2d:eb:22:91:1f:9d:da:c8:a2:e8:9d:39:bf:4f:a0:3b:72:4e:
         1b:be:2d:49:86:7d:5b:ca:8f:87:2c:35:08:8d:80:00:8b:a2:
         ca:22:fc:ca:85:20:27:d0:00:56:7e:3e:2d:ad:88:75:6d:3e:
         b5:ae:8c:cc:a5:28:3b:27:06:a5:25:8e:39:b3:45:52:db:8f:
         91:db:5a:c6:f7:8e:20:cf:00:90:62:f6:f2:d6:1c:99:d6:15:
         56:5d:9a:7c:79:8c:25:b1:ed:41:49:50:96:44:29:12:45:1b:
         68:54:5c:92:a8:7e:14:89:93:d5:2d:08:97:f2:06:99:8b:8c:
         f5:92:9b:3b:7b:5a:da:22:f2:53:9b:b5:d9:7d:64:13:2b:86:
         e6:d8:8c:04:f7:9f:db:0a:28:d5:e9:d0:35:b3:54:13:e2:e1:
         07:d9:76:d1:3d:b7:c1:68:a3:4a:79:e9:91:88:ff:49:43:2e:
         4f:de:b0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:23 2026 by rpki-client