Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d091613e-2b8b-3d8c-923b-59040e079dde.roa
File:                     d091613e-2b8b-3d8c-923b-59040e079dde.roa (raw, json)
Hash identifier:          PZVLSPUcrAuTC9iZTRD6tSBTl3y4SyJYCb/cOjdKphc=
Subject key identifier:   BA:C4:2D:90:EE:47:DC:71:8F:FB:8E:8A:A9:50:BA:23:74:82:57:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA8158BFBDD02740DAA0B0500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d091613e-2b8b-3d8c-923b-59040e079dde.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     396571
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:8b:fb:dd:02:74:0d:aa:0b:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=52c52dac-e01d-4aad-9761-b4050545bedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d7:60:b3:7d:1d:97:b3:ad:55:ea:05:fe:24:
                    2c:4c:ee:9a:07:c6:9e:55:b9:7e:ba:8d:51:4e:d9:
                    58:a1:0f:f5:e2:28:21:b0:11:7d:b8:60:ca:39:19:
                    38:87:88:bd:d6:4c:bd:ab:a9:af:1b:da:5c:0a:7f:
                    eb:c8:b7:18:63:3c:a6:4b:61:e4:dc:fd:21:94:bc:
                    be:2c:75:3a:b4:55:9e:65:bb:db:7d:b8:89:ad:47:
                    14:f1:00:d3:43:97:b1:3a:5c:3a:ba:de:47:38:bd:
                    84:1a:38:14:cb:0c:63:cf:fe:b3:40:1c:fc:bc:77:
                    58:1e:ad:66:90:17:53:2e:dc:b4:34:d9:91:8f:ea:
                    e6:69:58:da:d7:d1:7d:93:b6:8b:83:e0:36:e4:f4:
                    60:fe:54:4b:70:d0:69:6a:c8:e2:68:bb:82:72:2c:
                    c6:fc:30:80:b9:a3:ca:27:e9:48:25:cc:79:3a:2d:
                    ca:b5:67:c0:48:5e:b4:9c:9e:bb:c6:20:20:c8:3a:
                    b3:ca:3e:6a:47:b3:80:af:cb:91:38:49:cb:a0:bb:
                    e6:df:79:e6:59:ae:0d:dd:64:8a:1e:b7:53:4d:69:
                    86:1b:62:dc:29:d1:00:e4:ef:16:2a:5c:ca:e1:32:
                    a3:5f:8d:39:47:b0:f4:95:89:a8:bf:f8:cc:01:16:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C4:2D:90:EE:47:DC:71:8F:FB:8E:8A:A9:50:BA:23:74:82:57:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d091613e-2b8b-3d8c-923b-59040e079dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:4a:fe:53:a0:44:42:76:a8:49:14:e6:ae:41:47:ef:5e:32:
         ba:ff:65:a7:75:4d:ed:9b:f3:80:b8:b8:37:fe:53:38:80:15:
         7b:16:e6:c9:62:aa:3e:fb:b6:94:6e:72:07:0d:69:bf:84:da:
         a9:9b:a9:82:07:b6:72:64:e7:8a:88:77:6b:48:a3:d8:b9:f0:
         60:9a:c6:6c:e3:95:4a:2e:85:a1:f6:df:25:f8:2f:7a:a0:38:
         61:ee:d8:c7:4d:0f:1f:3a:d8:1b:fb:f4:e0:34:e5:84:75:ed:
         dd:0d:8f:d3:fd:54:c5:bf:76:0f:59:6c:ee:21:03:5f:dd:ad:
         29:ec:3f:53:16:d0:d9:a2:72:c7:ca:68:58:14:a5:6a:bf:18:
         8a:27:10:79:ea:2a:16:f4:bb:19:14:d9:0d:b4:83:16:0a:b2:
         63:99:26:73:a0:c2:d9:d8:4f:f7:b3:48:d2:9d:d8:21:c4:11:
         25:66:97:f0:ae:43:4d:9c:65:3f:30:09:34:5a:5e:9e:34:b4:
         c7:a4:f0:a7:1b:ce:06:d5:a1:25:de:b9:b8:b9:da:8c:7d:a0:
         5f:73:ba:d2:6a:b4:c9:0d:f9:33:d6:eb:c0:e4:34:c5:3e:dd:
         cc:af:af:04:fb:89:13:83:c0:4f:4f:85:80:a7:2c:a6:75:be:
         d6:e3:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:01 2026 by rpki-client