Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5f7512e-8f0e-3eb2-a9a4-4cd4a18cb6ec.roa
File:                     c5f7512e-8f0e-3eb2-a9a4-4cd4a18cb6ec.roa (raw, json)
Hash identifier:          /8G0INETX1ozYdj/i6M+b4/cSMEXrsJ5jjLJvisQknc=
Subject key identifier:   BF:99:E6:E6:F4:C8:68:B9:9C:C6:3D:90:64:CA:9C:B7:AF:0E:72:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DB4A5914DD747482017BFAF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5f7512e-8f0e-3eb2-a9a4-4cd4a18cb6ec.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     396604
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:91:4d:d7:47:48:20:17:bf:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=0ce98ce4-7e45-4a5b-a206-a9fb13c9c53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:65:53:0e:38:33:90:7e:dd:f7:a0:30:ec:
                    19:3c:30:c7:03:e7:2b:7f:bf:72:23:8b:58:61:0f:
                    c5:2f:2a:de:31:b3:07:9a:99:29:32:9e:2f:c8:8a:
                    ce:3b:81:f4:66:64:7a:9f:55:8b:6d:a7:f0:18:ef:
                    27:09:75:bf:17:82:c8:15:d1:be:03:21:47:84:64:
                    3c:6b:2c:f0:cb:5d:cc:f5:0d:1d:20:95:58:4e:9b:
                    b1:77:dc:5e:db:c9:2c:1e:19:ea:67:79:ff:87:c8:
                    ba:75:04:7c:9d:42:1d:ec:e5:85:25:80:25:06:29:
                    ac:cf:48:f9:ab:d2:57:8b:38:2d:de:b3:7f:7c:ed:
                    f7:00:0c:4a:c6:e3:d3:60:a0:9f:40:f4:2d:56:75:
                    94:b7:a5:3f:68:d3:7c:75:b4:7a:1f:37:32:ae:5c:
                    a3:15:21:8e:87:a3:f0:c2:86:ab:0a:5a:1a:75:a3:
                    ee:58:da:64:10:42:de:42:3c:49:48:ea:78:fd:a1:
                    e5:22:3e:aa:f1:e7:25:57:4d:1f:ad:ca:db:4b:a6:
                    b4:f4:9a:1f:fe:bd:ac:9d:f7:56:93:a5:ad:94:0b:
                    42:10:48:60:b5:16:74:5c:b5:96:49:7d:49:bc:bf:
                    e8:b4:e6:50:b1:e3:ea:39:23:c8:03:d4:78:43:3e:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:99:E6:E6:F4:C8:68:B9:9C:C6:3D:90:64:CA:9C:B7:AF:0E:72:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5f7512e-8f0e-3eb2-a9a4-4cd4a18cb6ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8b:b7:a5:60:e5:1c:8e:a2:9f:10:2e:87:4a:a2:e9:23:6e:
         cd:cc:13:6f:25:b0:83:c6:d0:fb:f3:74:6a:bf:c5:a5:08:58:
         50:f7:9f:46:37:9d:5d:d7:7c:69:19:12:5a:53:d4:f0:9d:4c:
         e2:ef:1d:69:d7:6d:2b:7f:2c:e1:1c:60:d2:1e:3d:0d:f0:96:
         0b:86:81:c7:5a:91:ec:92:ec:86:04:3b:52:00:a7:da:ec:7e:
         30:d2:5b:71:07:81:50:c6:b3:b7:0b:bc:06:64:54:5e:02:89:
         7d:e2:31:f1:f2:ac:64:a5:a0:16:16:72:a0:2d:9d:5e:ae:e4:
         97:21:ad:56:aa:6d:08:46:9a:a5:73:37:36:24:2c:5f:72:b1:
         9f:35:14:69:4c:2d:8e:28:1f:ae:64:38:df:24:2a:e6:6d:f7:
         d9:7d:fb:60:96:33:b7:0e:23:2c:dc:d7:1e:9a:05:1d:37:ea:
         ac:49:3a:91:9c:d0:41:c9:9d:19:f6:09:fa:f7:1e:ea:4c:0a:
         75:05:4e:45:0e:e0:af:39:7a:1b:b1:d5:77:16:56:dc:9f:72:
         dd:f1:f5:ee:1a:5b:0c:fd:bc:9e:88:a7:ba:c1:2f:20:55:74:
         d3:9e:24:ee:9d:31:a3:7c:92:f2:62:55:bf:ad:4d:ad:78:81:
         cd:b4:67:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:34 2026 by rpki-client