Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aefe9468-d8fa-339e-b53c-c71fe3ae42a3.roa
File:                     aefe9468-d8fa-339e-b53c-c71fe3ae42a3.roa (raw, json)
Hash identifier:          ro1qFnTEgj8lra9xlTUJTjQyBniMjuZiJgv8uv7X1tQ=
Subject key identifier:   6C:25:B1:56:B3:26:F6:C6:DC:4C:E5:90:A3:A3:6B:96:41:48:3C:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E885A54529FFDFB8E950F0000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aefe9468-d8fa-339e-b53c-c71fe3ae42a3.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     21313
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:54:52:9f:fd:fb:8e:95:0f:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=afa94512-ab6d-4c28-af8b-176ac7edb904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:18:42:cf:3c:65:9d:77:16:fd:11:1d:f2:1e:
                    ec:32:dd:8a:12:6d:76:73:62:d8:d3:e5:16:0d:9f:
                    9a:f6:cf:4f:1f:ce:f3:0e:34:f3:9f:74:3e:41:3d:
                    c7:47:42:dc:5e:9b:55:d9:d1:2e:d6:2e:c7:f3:74:
                    21:17:0e:94:8b:da:bb:b6:2f:6a:d5:47:8a:f9:86:
                    b6:b7:af:79:c9:99:40:97:fd:74:1a:11:93:e9:bd:
                    1b:82:eb:e7:08:8b:15:4c:9a:a9:c3:fc:68:af:bd:
                    63:c2:a5:8c:ab:36:7c:ed:f2:0f:1c:57:aa:25:79:
                    72:f4:f4:20:ea:63:ad:6a:31:07:63:70:c4:3c:97:
                    bd:47:de:47:9a:63:0e:92:1a:bc:eb:26:8b:c2:63:
                    65:72:ff:f8:b6:e1:5b:9f:87:f1:0a:f0:bf:b3:f7:
                    53:c0:e1:4b:9e:2f:a8:98:51:64:6b:86:70:f6:50:
                    11:78:d2:fc:84:8b:c5:59:2d:2f:49:80:19:ce:42:
                    41:19:0f:aa:7b:60:1b:d1:a9:55:1e:9c:ac:d6:41:
                    03:71:c2:ea:a1:7f:ec:14:89:81:85:1f:be:eb:24:
                    7c:25:b1:a6:3b:fe:6a:76:28:ac:8c:9e:c4:de:cb:
                    3c:39:fd:62:79:5b:69:bd:8b:17:59:51:cd:f8:21:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:25:B1:56:B3:26:F6:C6:DC:4C:E5:90:A3:A3:6B:96:41:48:3C:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aefe9468-d8fa-339e-b53c-c71fe3ae42a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:58:65:ba:96:91:f0:91:e9:d2:e2:73:12:2f:3a:ff:dc:c2:
         be:c1:e7:c0:4b:d1:ae:f8:ba:44:17:35:d6:d7:c2:23:62:87:
         9f:82:f3:c4:13:8e:07:79:37:19:45:31:77:04:4b:3c:0e:9d:
         27:23:b2:8f:5a:2b:5a:b2:49:63:66:13:dc:58:7f:1a:3f:b3:
         e5:c7:fe:6a:7b:bf:7b:85:3e:13:f1:5a:f6:a5:4b:9d:0a:c5:
         6e:47:e7:a0:1c:f4:e2:6a:c1:ef:1c:4c:3f:a9:a4:6f:e4:2a:
         31:b7:82:86:0b:a4:9c:0e:5e:f2:d7:9c:a1:f4:84:83:b5:c4:
         4f:70:5e:0e:cd:c5:56:3b:0f:7d:26:35:2e:cd:a7:7d:83:ab:
         a3:2f:a6:64:f5:d4:e0:88:58:e6:b4:44:7d:34:c6:01:82:c6:
         ff:52:da:12:4c:43:1a:b3:5d:18:f3:93:40:32:6f:65:b2:ca:
         85:e7:9a:97:be:68:9d:77:94:11:13:0f:5a:e3:4a:52:ba:20:
         7f:df:f7:3c:78:24:e5:f0:f3:ab:5d:8a:17:c5:b8:87:1a:95:
         1a:fa:85:04:dd:43:e6:02:ad:b8:04:94:18:df:74:32:77:06:
         7c:9a:92:53:38:33:ef:c0:6a:ef:f5:51:e7:f5:ee:89:cb:47:
         eb:b5:6b:e0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6IWlRSn/37jpUPAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
YWZhOTQ1MTItYWI2ZC00YzI4LWFmOGItMTc2YWM3ZWRiOTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRhCzzxlnXcW/REd8h7sMt2KEm12c2LY0+UW
DZ+a9s9PH87zDjTzn3Q+QT3HR0LcXptV2dEu1i7H83QhFw6Ui9q7ti9q1UeK+Ya2
t695yZlAl/10GhGT6b0bguvnCIsVTJqpw/xor71jwqWMqzZ87fIPHFeqJXly9PQg
6mOtajEHY3DEPJe9R95HmmMOkhq86yaLwmNlcv/4tuFbn4fxCvC/s/dTwOFLni+o
mFFka4Zw9lAReNL8hIvFWS0vSYAZzkJBGQ+qe2Ab0alVHpys1kEDccLqoX/sFImB
hR++6yR8JbGmO/5qdiisjJ7E3ss8Of1ieVtpvYsXWVHN+CFE5wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGwlsVazJvbG3EzlkKOja5ZBSDwxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWVmZTk0NjgtZDhmYS0z
MzllLWI1M2MtYzcxZmUzYWU0MmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCpWGW6lpHwkenS4nMSLzr/3MK+wefAS9Gu+LpEFzXW18IjYoefgvPE
E44HeTcZRTF3BEs8Dp0nI7KPWitaskljZhPcWH8aP7Plx/5qe797hT4T8Vr2pUud
CsVuR+egHPTiasHvHEw/qaRv5Coxt4KGC6ScDl7y15yh9ISDtcRPcF4OzcVWOw99
JjUuzad9g6ujL6Zk9dTgiFjmtER9NMYBgsb/UtoSTEMas10Y85NAMm9lssqF55qX
vmidd5QREw9a40pSuiB/3/c8eCTl8POrXYoXxbiHGpUa+oUE3UPmAq24BJQY33Qy
dwZ8mpJTODPvwGrv9VHn9e6Jy0frtWvg
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:37:48 2026 by rpki-client