Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e08fdbc-8fc0-3f72-b6a2-ce473c329be6.roa
File:                     9e08fdbc-8fc0-3f72-b6a2-ce473c329be6.roa (raw, json)
Hash identifier:          r31KeXUzxDlL0PGfFDx2MZHE9kHfhZJxxib3EFjsN80=
Subject key identifier:   08:4C:FD:B8:0B:74:EA:A0:12:BE:96:81:4B:63:C1:29:20:92:53:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E885A545E007FFBE1D07A0D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e08fdbc-8fc0-3f72-b6a2-ce473c329be6.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396547
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:54:5e:00:7f:fb:e1:d0:7a:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=7335a7a0-6c9c-422c-8e8a-d9c2622a8930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e9:ba:15:4c:63:16:4f:0d:e0:a9:fb:bb:ea:
                    f3:8d:65:d9:17:09:eb:f2:d3:74:45:ff:49:58:17:
                    fd:19:bc:12:6f:5b:33:71:d2:db:6c:74:94:e7:4f:
                    49:32:5b:eb:43:bf:06:c7:d3:3c:fc:90:46:7a:46:
                    0e:71:f4:18:1c:32:b4:6f:df:1c:9b:14:fe:0f:db:
                    42:62:51:2e:e0:88:9f:fd:50:ff:4f:a2:54:57:b3:
                    d4:be:0f:7a:c7:08:b3:fe:99:fe:56:f1:97:66:37:
                    b2:1d:77:d7:6d:9f:2d:7a:db:1b:a0:c0:30:11:45:
                    a4:3e:c6:e2:4e:83:23:fc:17:fd:78:3d:50:36:27:
                    62:08:5c:7a:c3:5b:65:4d:01:38:99:81:49:ea:58:
                    43:15:c7:14:cd:91:c6:c1:d2:98:f0:35:89:6a:2e:
                    9b:9a:e1:1f:6c:29:34:67:09:06:28:88:6b:16:53:
                    59:6f:51:a4:b2:dc:24:d4:57:47:5d:05:26:31:2b:
                    97:7c:c3:d4:c4:2a:21:38:ff:5a:9d:29:36:8f:bb:
                    b6:69:d7:20:56:9a:b9:96:b7:5d:0b:cc:bf:c0:c5:
                    03:5d:1a:c0:8a:7a:6e:9d:a6:ee:31:f2:1c:5f:9a:
                    13:88:af:f1:d5:1e:75:a0:30:f1:87:6a:ab:2d:0e:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4C:FD:B8:0B:74:EA:A0:12:BE:96:81:4B:63:C1:29:20:92:53:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e08fdbc-8fc0-3f72-b6a2-ce473c329be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:5d:87:e1:42:77:27:74:72:3b:8a:14:03:ad:a2:53:de:1d:
         6c:af:73:42:a4:eb:23:79:a3:3b:c0:9b:03:4d:59:3b:a7:77:
         d7:59:6d:60:25:64:78:cf:a1:b9:d6:da:03:77:ef:77:18:a0:
         fc:d2:b2:df:be:9c:3f:43:37:05:51:58:50:c5:51:4c:e1:33:
         b8:2f:a5:3a:7d:dd:36:9e:4d:0c:bd:b3:58:b9:6a:b3:b6:be:
         e8:a7:ff:0d:88:d5:1d:6b:56:3e:0d:18:5e:5c:b4:e0:bd:c6:
         64:35:54:7d:0e:b5:6b:30:c9:e7:61:cf:d5:9e:ca:4e:dd:bb:
         a0:f2:90:9c:b0:19:1f:bf:94:96:56:f6:c7:09:69:31:65:23:
         b4:47:07:c7:64:34:66:1f:96:30:91:2f:13:07:ac:e1:fd:1d:
         ef:b1:8d:6c:c7:96:a8:b6:a6:c8:bf:af:cc:b8:db:f4:19:08:
         0a:b0:a8:27:e8:6b:b1:2e:b5:8f:9b:fb:1e:c3:02:ea:4e:df:
         8f:c1:cc:aa:bf:f9:00:cb:b1:8f:5b:67:92:15:04:c6:c3:67:
         82:e5:ff:0b:f5:11:c3:43:95:93:ee:2e:4e:61:52:bd:3f:49:
         d1:c1:1d:52:b6:40:16:2d:28:c3:22:1b:fe:a0:a0:1c:07:02:
         0a:0a:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:48:15 2026 by rpki-client