Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3f70196-7dfa-301d-aec8-bc54c7754399.roa
File:                     b3f70196-7dfa-301d-aec8-bc54c7754399.roa (raw, json)
Hash identifier:          A0EI6py0G4+CplT+xJVG3oVB3TVmg37fKMqHgCdNf+4=
Subject key identifier:   B6:39:F4:9A:00:5F:E9:57:C3:D6:62:D8:57:07:9B:F5:E3:16:4A:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E885A54D062054F178585DC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3f70196-7dfa-301d-aec8-bc54c7754399.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396572
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:54:d0:62:05:4f:17:85:85:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=38af032c-15d4-4e26-a00d-c89abab67428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:30:83:e3:7b:84:77:8f:b2:02:ba:58:62:
                    fa:77:5e:bc:9e:ac:10:3f:7f:cd:dc:49:08:fa:bc:
                    d3:da:38:7f:38:74:5c:d2:09:37:43:4c:9d:80:05:
                    9f:8c:ca:3a:e6:ca:c1:d0:46:6f:61:7c:03:d9:a8:
                    b1:63:9d:35:09:c4:e6:42:9e:ff:96:22:bb:11:81:
                    06:8c:4c:ea:2b:9f:d6:78:81:4c:29:7f:cc:02:57:
                    da:8c:eb:f4:8c:e1:97:b5:d1:ce:24:df:ca:d9:71:
                    41:1d:38:f9:aa:3e:f1:d8:45:45:35:ca:fd:2f:e2:
                    73:4c:a7:dc:09:ad:c8:c1:07:b5:49:94:75:95:f5:
                    9b:bd:df:62:ed:c5:c7:de:83:af:d4:a5:19:9b:65:
                    8e:58:9d:ea:fa:57:7b:50:3c:88:d5:dc:5d:af:db:
                    7d:74:8f:9e:01:21:81:9a:3c:50:5b:b3:3b:04:fb:
                    99:92:c4:03:cc:42:02:99:e6:e9:53:10:52:7e:bc:
                    be:dc:9f:39:58:30:7a:f3:3e:1d:30:58:0f:a6:ff:
                    fc:e7:f9:87:71:04:96:36:69:9d:bc:93:ee:4b:a9:
                    75:f4:8d:a1:12:9c:ac:f0:c4:7f:d4:08:6f:4d:a6:
                    0b:ed:09:43:b9:59:ab:37:ed:f7:f4:d5:47:32:c7:
                    34:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:39:F4:9A:00:5F:E9:57:C3:D6:62:D8:57:07:9B:F5:E3:16:4A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3f70196-7dfa-301d-aec8-bc54c7754399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d5:94:0e:c8:e9:2c:a7:38:f6:bf:e9:c9:80:32:9e:42:1d:
         ab:3d:cf:8e:1f:6a:9c:e3:39:84:33:c9:72:6f:3a:19:8a:40:
         22:a6:cd:92:db:a8:47:27:cc:cc:8f:3f:df:a1:35:1e:9a:b9:
         04:8b:ed:b6:c5:49:63:c4:19:bf:f5:56:31:aa:47:2a:bb:2c:
         cc:29:20:dd:5a:fc:96:62:bd:a6:ea:87:41:ad:bc:a0:11:f7:
         ce:41:e3:5d:39:ab:d8:8b:92:d4:df:6b:3f:47:f3:e0:87:a8:
         36:57:3a:8c:c8:e8:17:1e:96:f5:c8:fe:84:6e:16:27:35:ca:
         7c:bd:95:bb:03:2c:08:61:c0:a5:66:3f:af:8c:ab:8a:2a:85:
         6d:8d:90:c5:38:8d:87:34:f7:82:0c:80:0e:11:32:4e:e0:10:
         af:4b:e1:f5:a7:c8:8d:94:91:19:c3:64:79:f1:ca:62:2d:87:
         65:f8:fe:16:b3:c6:2f:5f:4d:00:24:e0:8a:b3:db:1c:3a:3b:
         11:12:4e:74:5f:45:76:5a:e5:8c:ea:e5:c3:ab:b5:6a:75:36:
         6c:1e:a7:1b:9f:95:ce:33:e9:7e:00:b0:7c:13:24:f8:c2:fc:
         fd:d0:0b:bc:92:d6:47:60:f5:a9:d7:a8:1c:8a:5a:40:90:ef:
         26:96:01:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:36:51 2026 by rpki-client