Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c77807b3-3fd4-33d0-9fff-5374aa9e2514.roa
File:                     c77807b3-3fd4-33d0-9fff-5374aa9e2514.roa (raw, json)
Hash identifier:          ILFZR0llO/F5l1mv6d96O0r0ovobIOvFXacoJWPteiE=
Subject key identifier:   E4:88:98:28:64:C5:A9:E8:AB:46:80:B0:08:13:1D:FD:58:2A:4B:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E885A555E7215B571284C6680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c77807b3-3fd4-33d0-9fff-5374aa9e2514.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     397193
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:55:5e:72:15:b5:71:28:4c:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=283c85de-da7f-4072-a35a-0603542b7191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:af:45:c9:5c:f6:03:df:6c:da:87:45:1f:
                    d6:1a:ef:7e:29:5a:1c:b6:e3:8c:0e:70:20:94:a8:
                    e3:e1:55:a0:1c:bf:6c:3b:ac:bc:37:1e:02:82:d0:
                    62:52:a2:1c:5c:09:31:a6:ea:80:6f:61:25:66:4a:
                    b1:b7:6f:34:1f:05:1a:60:b4:ef:d8:3b:a6:76:27:
                    45:da:5d:e3:46:de:1b:46:22:27:b9:eb:f5:bb:60:
                    6c:c6:e8:b0:ad:23:68:00:3a:c0:b7:f8:f8:0b:0e:
                    67:25:ae:b1:b7:3b:17:68:23:e7:dc:34:81:6a:a4:
                    e3:a3:7b:4f:bf:4f:f1:13:50:21:56:4c:8b:22:d1:
                    75:ea:6d:a4:40:44:ac:1c:c2:21:21:00:33:54:bd:
                    a6:ba:87:e4:0a:8b:80:ce:6a:d6:ab:9e:2d:f3:7b:
                    d7:8c:19:ec:d3:f3:53:9d:31:f4:8a:78:bd:b2:d9:
                    43:df:99:af:08:44:3e:92:23:c0:cf:55:ce:b3:b7:
                    8c:98:17:b5:75:a9:47:ed:cf:b2:a1:c5:78:09:d0:
                    8e:d3:8e:ca:8c:b1:df:31:20:b5:cb:6a:4e:cb:a9:
                    aa:90:90:c7:86:8f:ca:31:84:c4:83:35:d3:3e:e5:
                    db:d4:ce:38:44:9b:91:32:31:fe:6b:1c:9e:dd:30:
                    88:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:88:98:28:64:C5:A9:E8:AB:46:80:B0:08:13:1D:FD:58:2A:4B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c77807b3-3fd4-33d0-9fff-5374aa9e2514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:59:70:be:63:86:5e:90:2d:30:87:27:26:5e:cd:49:8b:f8:
         ec:f4:73:1b:c7:62:ca:1b:ac:1c:75:bc:62:b6:3d:cb:71:3c:
         bf:39:9f:de:f3:0d:e4:70:9e:d7:5c:f2:b6:a7:36:8c:dd:8f:
         d0:f0:90:aa:27:52:0f:37:c7:07:6c:00:9f:70:5b:d9:7a:7e:
         77:e4:d6:3e:e6:da:8b:37:b1:80:0b:dc:07:af:da:f5:ff:3f:
         a3:59:16:5b:d6:79:6d:4e:2d:1c:47:78:19:c6:5e:09:37:a0:
         fb:7d:80:58:e6:12:d1:2f:eb:3a:80:72:60:bc:9d:4f:35:2e:
         69:1c:93:28:3d:f1:88:19:2b:60:b6:e8:e8:1c:c1:48:4f:0d:
         47:49:5f:e1:ec:f4:1c:a0:d2:69:54:c8:07:e3:0b:99:b5:37:
         d3:41:d1:1f:ec:df:0b:9e:85:87:83:ff:35:37:0f:62:12:7a:
         3b:99:f5:af:9c:ba:01:ea:31:df:50:81:7f:cb:e6:47:7a:17:
         83:75:06:41:9e:a1:2d:f4:22:c1:88:fc:bf:3a:60:79:40:01:
         1b:c8:ce:5b:cd:f3:ef:c9:0d:37:71:f2:f2:8b:73:9c:f5:71:
         1f:eb:e0:18:b1:0c:91:26:ae:14:a7:12:73:1f:a7:5d:c0:40:
         02:76:d0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:00:14 2026 by rpki-client