Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be1a1e28-b0b1-30c1-83ff-951208707188.roa
File:                     be1a1e28-b0b1-30c1-83ff-951208707188.roa (raw, json)
Hash identifier:          bxerD8vf5lviUw3T3jnT+biTCcZjoZIfcbGJcaX8Aag=
Subject key identifier:   4C:9D:17:1F:27:6B:90:AD:50:A0:EB:1F:26:C7:E0:4E:F0:DE:D2:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DB4A591416008E8493520D280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be1a1e28-b0b1-30c1-83ff-951208707188.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     396541
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:91:41:60:08:e8:49:35:20:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=cf249df7-3d53-4cc2-91c5-4e56c0a282f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:46:37:38:e4:d2:2c:a9:01:57:78:8b:fd:
                    b2:ae:36:ee:3d:75:50:26:f7:ee:57:ef:61:21:50:
                    cd:24:9a:07:2e:5b:9b:41:a5:74:c1:99:4b:43:ea:
                    1d:6b:02:7d:23:b1:5e:1c:5e:27:ff:e0:25:c7:26:
                    56:59:68:87:d0:a2:6b:51:2f:cf:7d:b5:d8:30:bc:
                    21:9e:a6:13:db:a2:93:b9:0c:15:ed:fd:4c:b1:fd:
                    1c:02:9f:ea:94:ee:0f:04:76:d7:cd:71:1e:f6:de:
                    ea:ec:57:15:be:ab:8c:1d:e5:9e:2f:af:4e:8c:0c:
                    0a:0e:56:8c:45:c2:f9:32:84:4e:c6:e1:0f:45:77:
                    b3:bd:f8:a8:db:b0:e4:3e:09:5f:e4:ba:d5:2e:eb:
                    9a:be:99:fd:47:5d:3a:c4:56:19:c6:0f:97:8a:15:
                    90:9e:15:dd:33:d8:2c:78:c2:e6:96:dd:a1:ee:72:
                    c0:6d:b6:d5:4b:85:4c:04:f3:06:69:54:fb:f6:53:
                    66:84:a0:05:5e:75:b0:41:5a:ed:8b:12:cb:64:de:
                    5f:8f:06:b2:3c:af:71:88:9d:77:89:dc:c6:83:d8:
                    42:93:de:47:42:1e:68:b5:92:d6:67:b1:ec:b3:dc:
                    63:80:67:3a:dd:0f:b2:f8:f2:ea:0b:a0:da:1a:e4:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9D:17:1F:27:6B:90:AD:50:A0:EB:1F:26:C7:E0:4E:F0:DE:D2:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be1a1e28-b0b1-30c1-83ff-951208707188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:90:ca:6b:88:be:f4:fc:51:9e:61:f9:51:57:96:c6:c5:af:
         b4:52:1d:c5:27:98:d8:1d:e8:02:5e:7a:e3:98:4a:c2:90:5f:
         97:ee:26:0c:b5:14:96:1a:9a:17:31:ea:ec:f6:40:3a:00:c0:
         b4:32:9f:55:81:86:09:a6:be:96:f5:5f:10:fd:7b:fa:0a:ab:
         bb:1b:c3:a0:4a:8e:00:82:21:03:2e:9a:e5:9c:c7:b4:1c:f4:
         61:03:e6:97:ec:ef:08:32:14:b9:ab:08:e2:2d:d9:42:fe:45:
         43:f7:33:b1:94:64:9d:8f:5b:32:c0:10:5c:27:1c:e5:d3:97:
         47:49:fd:cf:f9:e4:c2:d4:80:af:9c:71:87:f3:6f:0a:35:81:
         11:6e:1a:fc:e5:68:ff:62:51:d2:c1:b1:30:9a:ac:08:c0:8f:
         70:da:70:c3:4d:11:4c:5f:5e:49:86:4c:04:66:9e:a0:7f:60:
         7e:e3:4a:3c:e3:9d:03:4c:ad:9a:a3:72:52:be:df:33:e1:13:
         c9:bc:a4:be:67:89:fc:87:c0:85:1a:f6:73:4a:16:2b:ac:07:
         be:ed:d5:51:f4:d4:3f:6b:68:6b:c5:92:5f:6b:b8:08:65:51:
         d1:8a:d0:09:06:5d:01:38:a1:dd:24:64:79:51:b2:93:59:5b:
         81:21:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:50:45 2026 by rpki-client