Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e290452-3435-34ec-8ed4-24e80bda3141.roa
File:                     9e290452-3435-34ec-8ed4-24e80bda3141.roa (raw, json)
Hash identifier:          GZJDhg5Tog0Ju+Xov5NyaZF1qgxyBWFVWBZHyL2Kul4=
Subject key identifier:   63:AF:70:AB:C2:7A:CB:FF:5C:47:D9:47:24:8A:99:CF:5D:9E:89:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E94EA62F43AC90453A9E2F980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e290452-3435-34ec-8ed4-24e80bda3141.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     396609
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:62:f4:3a:c9:04:53:a9:e2:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=eb57a2ca-53f3-4cb6-9de1-7dc42dbd81b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:82:37:30:95:99:49:99:01:e9:8c:34:ab:
                    7e:a8:d2:36:d8:16:6d:25:55:ad:ce:44:5f:10:79:
                    32:f8:f6:2a:68:58:61:8d:66:fa:8b:b3:e7:87:23:
                    c4:b9:a0:57:1b:0a:08:f7:ca:77:15:18:82:61:3a:
                    09:7b:42:92:96:0a:2f:25:58:99:5c:66:95:a3:47:
                    1d:69:a0:ee:ae:af:ab:aa:25:97:b9:bf:05:0c:07:
                    73:41:8c:a2:91:ba:68:67:d2:b3:f5:5e:ee:28:d2:
                    e7:43:7a:03:73:78:ad:01:be:29:b9:32:79:a1:40:
                    8f:ea:30:17:6b:15:82:53:49:eb:c3:bf:b4:3b:a2:
                    ca:cd:97:2f:18:1f:ae:da:fc:82:7b:b0:4b:6e:27:
                    6a:fa:de:ae:c1:1f:62:1c:cd:00:17:4e:35:08:80:
                    5a:a8:6e:fb:65:09:2d:27:40:d3:b4:c1:2e:f0:08:
                    0c:73:96:e6:c8:e4:3b:76:9a:df:0d:08:fe:38:f8:
                    5e:fc:c9:0b:cd:e6:91:fe:c1:5b:e6:49:11:65:95:
                    8f:f7:68:71:8b:c6:32:61:53:d7:bf:a6:26:eb:e9:
                    c9:07:75:a2:d2:da:57:b2:9f:1f:03:94:ee:6c:41:
                    ee:f0:13:06:f0:08:ec:1e:74:09:8d:08:f7:7d:e0:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AF:70:AB:C2:7A:CB:FF:5C:47:D9:47:24:8A:99:CF:5D:9E:89:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e290452-3435-34ec-8ed4-24e80bda3141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:9f:d8:28:eb:96:21:bb:2c:b1:9f:84:51:a9:50:75:64:c3:
         e3:a1:19:f9:01:7b:3a:b2:39:74:c7:20:8b:70:d3:b6:3c:8e:
         1d:bc:a9:63:ee:be:2b:df:a1:4c:68:da:70:17:bd:fb:7b:ee:
         15:7f:0c:60:15:94:3b:0f:d2:36:aa:5b:c8:a3:af:b8:5a:35:
         a4:41:27:5a:a1:83:70:bf:93:e7:0d:25:ae:e1:e9:ad:29:94:
         96:ef:77:99:b7:a3:93:8b:e5:e7:53:47:db:03:07:05:8b:c7:
         2d:34:c5:ec:b5:e4:a6:26:a1:df:48:70:c3:a2:3c:73:48:1d:
         3f:cb:4b:58:40:42:fa:45:f7:7e:f0:08:80:95:c8:61:fd:ab:
         42:a0:75:48:57:ca:cf:ef:d2:26:8f:24:44:7a:2a:db:0f:fe:
         5f:eb:76:ef:c3:df:9f:9b:36:20:8f:43:95:78:09:a8:18:7a:
         2a:b7:6b:5d:94:53:f3:0b:7d:1c:47:df:69:50:d2:ca:ed:30:
         66:6c:07:2c:ab:77:0b:d5:49:90:8c:9a:2a:e4:e6:89:13:60:
         7a:86:c6:bc:f2:4f:43:3f:cf:39:18:e5:aa:3a:d8:c7:24:28:
         85:ea:dc:2a:aa:34:5b:b1:24:6e:49:7d:6c:4b:3f:07:47:dc:
         c6:a1:3d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:26:20 2026 by rpki-client