Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aefe9468-d8fa-339e-b53c-c71fe3ae42a3.roa
File:                     aefe9468-d8fa-339e-b53c-c71fe3ae42a3.roa (raw, json)
Hash identifier:          hiUvMJTo1WlS77fOpNRJzixemWL+RYed0VAU/9kWTSY=
Subject key identifier:   56:FE:0A:3B:C1:DB:F9:32:FF:AA:17:84:69:1E:F9:62:FB:2B:AC:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA8158FB5EDC3D308CF68B680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aefe9468-d8fa-339e-b53c-c71fe3ae42a3.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     21313
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:8f:b5:ed:c3:d3:08:cf:68:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=77a46bbc-345a-42fe-80fb-86c0fa457932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:da:18:0d:dc:64:03:ec:8a:85:bd:0a:5d:
                    59:e2:16:35:ca:60:50:15:47:06:4f:2d:79:e9:57:
                    ae:95:fc:21:57:14:a4:e2:c2:d2:fd:56:6f:7e:c0:
                    44:77:f6:bb:ef:b9:8b:81:de:68:1f:1c:59:5e:e6:
                    a3:8d:3e:11:bb:17:c0:58:ce:54:16:d1:0d:19:7d:
                    d5:f9:79:94:47:bb:9d:f3:39:a9:d2:7c:9e:95:c5:
                    77:ec:3f:d1:08:7c:d6:87:24:ea:f7:24:68:6b:19:
                    6b:8c:cb:27:ba:aa:31:de:ef:7e:24:81:ca:00:11:
                    c0:e2:73:bd:89:a4:84:41:6d:fe:3f:1c:4c:dd:eb:
                    12:94:d4:1d:9d:3a:be:91:d1:88:f4:5b:4e:4f:96:
                    7a:b6:ea:cf:63:e4:8a:4a:cc:01:7c:39:25:bd:2c:
                    9b:26:dc:3e:36:62:00:a2:98:10:9b:03:f2:69:68:
                    3e:fe:ff:bf:6f:b6:8f:1a:a6:e3:2f:9b:10:3f:c3:
                    2e:a8:6e:75:e5:9b:21:8d:84:12:c5:97:f0:f9:36:
                    91:27:6d:06:55:98:11:4e:bf:3b:8a:7b:92:5d:4d:
                    26:1d:7a:d6:ff:0b:7a:a3:ce:e7:c6:14:d4:80:42:
                    f4:de:56:c1:e7:b7:84:88:2c:b6:f3:01:29:77:f3:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FE:0A:3B:C1:DB:F9:32:FF:AA:17:84:69:1E:F9:62:FB:2B:AC:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aefe9468-d8fa-339e-b53c-c71fe3ae42a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b9:9b:f8:f9:20:c3:bb:4f:1e:a2:30:2e:c9:e3:61:cf:97:
         27:8e:49:b0:0d:f5:2e:67:23:f1:b5:b8:f4:47:d3:f9:de:7f:
         e2:62:ea:6b:4d:52:15:ca:5d:5c:3d:ec:9a:f5:25:d6:ed:c2:
         1d:25:8f:1f:95:80:ea:f8:bf:31:d4:a7:1c:a2:60:3f:11:0c:
         9e:b9:86:3d:2d:00:53:b2:76:8d:e4:cc:e2:a4:97:e7:b0:ad:
         cd:0a:18:fe:13:63:30:2c:e0:30:67:8f:0a:64:d2:48:a4:e3:
         b5:2d:e7:89:de:6c:33:9f:0d:23:98:96:39:81:86:f4:1e:5d:
         88:c6:f0:63:1d:e5:f0:2c:af:d3:5b:56:e2:73:18:23:29:08:
         aa:79:e3:08:77:2b:17:3d:a4:2c:b8:07:45:0e:bd:e8:f2:cc:
         43:b7:43:03:3e:d4:c5:ff:f4:c2:d8:90:56:5d:f2:83:c0:ac:
         42:a5:ec:01:8b:17:82:dd:f4:70:3b:79:86:4f:bb:90:11:f4:
         55:c7:cc:ed:99:ba:f7:c9:0d:32:69:96:5a:d6:9e:98:70:4e:
         19:87:ff:da:ea:2a:10:cb:f2:3a:70:28:4f:07:1a:bc:a2:ed:
         40:64:65:60:1d:54:ca:97:61:8d:8f:2d:d8:11:4a:4d:ac:6a:
         db:77:57:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:51:52 2026 by rpki-client