Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e3f7890-c487-3977-b671-3169e877cab4.roa
File:                     9e3f7890-c487-3977-b671-3169e877cab4.roa (raw, json)
Hash identifier:          fSDGJJjAAMWJGg2DsTwEYLcz8sfVkdu88SGxur9Vp4o=
Subject key identifier:   1C:77:3D:B4:C7:5A:03:DA:A2:B6:AF:E9:93:AE:62:3D:DE:75:76:D2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DB4A58CE98087257CF5FE6F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e3f7890-c487-3977-b671-3169e877cab4.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     396612
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:8c:e9:80:87:25:7c:f5:fe:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=b3bb169f-37dd-4bbb-89d7-12caeed66dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:bc:69:f7:72:e5:c4:54:3f:5f:d2:e2:c4:
                    70:f1:3b:7b:d3:5c:a7:64:30:1d:19:bc:9b:f1:b2:
                    82:6c:02:eb:20:d7:dd:dd:8a:1b:79:4e:69:e3:61:
                    c8:5b:ac:28:11:09:02:67:85:f7:65:45:6d:77:fe:
                    65:38:8a:79:21:80:53:09:f4:b1:4a:ca:c0:31:5d:
                    7d:71:54:e3:25:2b:c9:8e:48:2b:b8:e4:d8:71:36:
                    a1:ac:e6:a0:64:51:ac:a0:59:2e:cf:37:b8:01:03:
                    6e:e5:41:30:09:32:fb:d9:5a:64:8a:e8:92:26:ce:
                    65:1f:8a:3c:0a:6c:6e:f4:17:38:43:f4:11:ad:40:
                    ce:00:e4:33:85:c3:d6:65:f9:52:69:cf:80:5f:f8:
                    1c:99:95:a8:1d:ca:e4:0c:18:b6:88:08:37:a2:54:
                    96:7a:1d:c1:47:9c:6e:6c:7e:99:64:cb:09:75:87:
                    f0:f3:76:7e:8a:18:0b:89:28:c2:f5:61:52:87:61:
                    f0:6b:ab:ad:bc:cb:4b:bb:c7:42:f5:85:b9:35:80:
                    80:5d:a4:76:c6:62:0c:f7:e5:2e:0a:ca:a6:40:ca:
                    dd:e9:01:d1:3a:33:2c:03:96:98:3d:d3:a2:8e:6e:
                    50:6c:dd:21:ca:07:2c:b7:10:3d:24:bd:30:46:3a:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:77:3D:B4:C7:5A:03:DA:A2:B6:AF:E9:93:AE:62:3D:DE:75:76:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e3f7890-c487-3977-b671-3169e877cab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:77:04:59:d1:fb:9e:42:fa:7d:f3:6c:d6:33:95:5b:29:2f:
         6f:f1:7f:13:bd:41:a3:75:35:34:ec:eb:0a:ff:c7:0e:65:55:
         60:d9:65:45:f7:0a:b6:b4:5f:d4:67:ef:d3:59:8a:7e:92:b9:
         31:a3:18:02:61:60:18:49:4e:15:51:e1:83:29:cb:9e:e7:5e:
         40:6c:23:31:5d:fa:c3:9d:98:8b:e9:c3:7f:f7:16:22:1f:5f:
         1e:79:94:f9:eb:9b:8a:96:d8:da:b0:e2:38:e4:4f:6e:ab:8c:
         37:8d:ab:bb:0a:cf:62:4c:c6:53:15:32:e5:9f:c4:eb:da:28:
         cf:23:25:05:ef:a9:9f:5e:98:f9:94:08:17:cb:63:25:df:4f:
         de:0c:4e:e6:35:8b:ba:b7:9b:c1:de:d1:53:28:54:c0:73:68:
         e0:73:dd:22:83:76:87:b8:cb:ff:8d:2d:d3:a4:dc:e6:86:cc:
         3f:4c:cb:7e:5d:55:70:56:9b:00:2f:ee:12:08:2d:cb:f3:e4:
         7d:0c:06:ee:34:38:b3:ed:2e:16:d1:06:53:53:bd:e2:b4:ac:
         aa:ad:4e:bf:a9:4b:78:b7:76:0d:f4:a6:91:57:07:e9:52:62:
         36:87:2c:85:8b:07:a7:d2:2b:45:cf:6e:74:43:eb:1f:84:8e:
         00:10:d8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:54 2026 by rpki-client