Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e795966-2cb3-35a4-ae4f-954a493387a6.roa
File:                     9e795966-2cb3-35a4-ae4f-954a493387a6.roa (raw, json)
Hash identifier:          NeIcdJclwpbmcHM7oEvECWtNXiEDgIX5qR3weno4Lkk=
Subject key identifier:   DF:2E:BC:CE:FA:66:32:A3:22:BE:E8:54:4F:0E:3F:92:E2:EA:C2:1B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E885A5216B5B6D166D44141C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e795966-2cb3-35a4-ae4f-954a493387a6.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     36623
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:52:16:b5:b6:d1:66:d4:41:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=c6d1883f-3942-4dcb-ae47-3c1f51f78d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:78:43:84:14:72:4e:94:f7:14:44:f4:8b:
                    68:89:0d:49:bd:9f:7b:a6:81:26:12:f9:1a:23:51:
                    ec:67:df:75:ad:09:2b:45:d0:7f:04:cd:1b:9f:fb:
                    49:75:c6:83:78:4f:ad:a8:c7:0d:8f:4f:93:ce:07:
                    8f:fd:56:53:7c:0d:48:c1:fa:87:6f:d8:98:86:f1:
                    db:93:ff:23:29:2a:bb:63:7c:db:13:54:7a:e6:c0:
                    84:95:95:1c:68:b8:b9:0d:58:9a:37:f0:5a:ec:1a:
                    6a:3a:60:33:e9:7f:e9:a9:a9:05:21:99:e0:65:8c:
                    63:ba:9a:ba:46:ae:c8:fb:01:de:f1:da:8f:dd:0f:
                    c8:32:86:bc:d1:e1:e9:95:db:84:70:cd:74:ca:bd:
                    9c:af:89:d0:4c:bc:a5:32:aa:82:2d:db:9e:d6:b3:
                    38:21:fc:9c:d4:6d:c2:7e:c8:fe:c9:77:64:fd:a9:
                    90:02:be:9d:41:1a:18:49:d7:a8:c7:7c:7d:ce:d8:
                    d8:5a:2b:d7:57:23:25:51:c1:29:ac:6f:b3:c0:53:
                    93:e1:31:9e:49:d2:99:b5:6b:36:5c:dd:bc:72:25:
                    13:12:4b:36:83:96:f8:69:58:2f:1f:00:42:74:93:
                    b9:49:fd:12:1f:2d:46:8d:04:c4:df:c3:a4:e7:a4:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2E:BC:CE:FA:66:32:A3:22:BE:E8:54:4F:0E:3F:92:E2:EA:C2:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e795966-2cb3-35a4-ae4f-954a493387a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:2b:70:ba:f0:ef:f6:4d:c0:ed:5d:1b:87:8b:ac:03:42:d2:
         90:e3:9b:15:1e:54:80:a9:30:d0:55:64:15:9e:20:69:bd:8f:
         4f:24:7c:e7:a9:a2:35:42:8e:0a:e6:09:a2:fd:60:6e:05:71:
         a6:a6:8a:dc:c9:bc:be:27:18:33:ce:42:81:bc:60:a7:01:f2:
         14:d5:56:80:63:17:0c:00:a9:69:f5:a3:b5:7e:ff:ae:87:a4:
         ff:bc:33:3e:b6:5c:72:9e:24:cd:e8:94:51:37:2c:82:a4:f9:
         76:7b:15:16:7f:3c:84:b3:23:eb:5f:48:54:9e:23:a2:cf:28:
         99:eb:a2:f4:0b:8a:8d:87:be:aa:11:91:2c:b4:3c:fa:c5:fc:
         1e:f6:aa:6d:0b:88:de:b9:bb:1e:7b:e5:63:c3:0a:64:5d:38:
         a0:c9:bb:65:29:32:e0:6b:e6:1a:8b:f6:90:9c:08:0f:9f:81:
         cf:c4:be:6b:be:11:ee:64:8b:bc:71:4f:d1:54:81:39:96:9c:
         5b:db:05:9d:65:3f:ac:79:72:f9:74:a0:a5:f0:ae:d8:78:79:
         ee:3a:44:a1:6a:49:39:99:b0:0e:dd:56:00:68:ca:ff:d3:02:
         fb:47:5b:a8:e7:33:77:d9:7c:7e:da:8d:c8:12:4b:39:a8:54:
         e9:82:e0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:16:40 2026 by rpki-client