Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa933d40-bbcc-3a67-8434-4b575d1fb255.roa
File:                     fa933d40-bbcc-3a67-8434-4b575d1fb255.roa (raw, json)
Hash identifier:          d/AO3YlQ2/yMYTqjg0FqhZJZRVTH2Hc3ZDgI12QNW4I=
Subject key identifier:   06:4C:F1:E7:05:B9:15:A1:E6:4E:A5:EA:0D:6D:10:72:EE:D3:DE:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DB4A58E5C4EFBE7BF6D193A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa933d40-bbcc-3a67-8434-4b575d1fb255.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     397193
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:8e:5c:4e:fb:e7:bf:6d:19:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=05a1c323-7da9-4e48-97fe-79a77e1e5542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:3a:d8:86:74:b9:e9:1b:4e:18:66:70:f9:
                    19:57:e3:d6:00:03:a3:7c:6f:6c:01:10:5b:d6:0b:
                    5e:a7:9a:02:45:72:bf:e0:c4:a0:13:8f:e9:51:8c:
                    27:35:8c:d7:eb:55:f7:1c:6a:52:23:e4:2b:99:0a:
                    49:b0:be:07:da:8a:c4:d5:ab:b9:71:e1:63:73:e5:
                    ec:f2:df:a7:c9:8f:7b:f4:a1:6a:a1:bf:8c:61:93:
                    6c:27:28:82:dc:5b:3a:a7:1b:db:05:26:66:1e:2c:
                    07:d6:92:0d:39:1d:3d:e4:75:8e:2a:a9:c4:fc:b2:
                    02:9b:e6:cb:3e:db:11:47:d0:d4:41:69:25:ba:80:
                    d1:1a:fc:94:ba:db:ed:63:d3:38:e0:8f:59:38:fb:
                    51:01:c5:85:f0:e5:bb:f8:ee:48:80:e5:7b:a8:bc:
                    fb:70:80:a6:f0:ef:15:f1:31:e0:e6:af:92:46:d3:
                    5d:f1:c9:4a:85:37:d3:e1:f3:99:97:f3:1a:35:86:
                    a1:25:dd:91:27:66:2e:61:52:80:70:e2:f0:ae:17:
                    d3:4c:f9:4f:7d:8b:aa:52:c3:90:82:98:db:20:2c:
                    de:50:f4:54:35:65:f0:6e:39:00:b5:ed:77:dc:8f:
                    30:b0:4c:c7:d4:ca:6d:c8:20:1d:ef:77:59:5b:74:
                    62:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4C:F1:E7:05:B9:15:A1:E6:4E:A5:EA:0D:6D:10:72:EE:D3:DE:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa933d40-bbcc-3a67-8434-4b575d1fb255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:38:29:af:5f:dc:30:36:e6:b8:41:26:0a:46:f4:5d:02:81:
         8b:04:66:0f:3d:1e:af:db:e5:35:c3:7e:0c:87:fe:78:6a:be:
         6b:21:3c:26:ce:f7:e3:be:90:45:56:11:d6:77:6f:46:70:d2:
         02:a9:6d:30:9e:8b:28:df:e2:05:3d:1c:3c:cf:aa:fc:a2:6d:
         82:9c:33:e4:6b:c8:46:19:03:e3:1d:ee:93:68:8f:19:0e:1e:
         ce:5f:3d:46:9f:65:3c:38:04:e0:69:f0:45:10:74:c5:dd:7f:
         2c:68:38:58:ce:70:3d:6f:4b:1f:16:5c:d3:25:43:9e:fa:c2:
         c3:b4:77:4b:43:8e:88:07:f3:38:09:c3:30:a7:9d:41:0b:1b:
         c7:bd:34:49:91:df:3a:b7:dc:cd:f5:44:2a:a9:d3:6d:8e:0b:
         07:ea:19:d4:43:f6:42:84:b3:41:e6:c0:6c:89:21:b2:be:4f:
         42:5f:76:66:42:5d:2f:24:57:4a:ac:16:ed:b6:25:92:be:42:
         fd:02:5f:fd:4b:4f:2a:a4:26:6e:e8:9b:5e:71:ff:71:f0:51:
         97:e4:ab:e1:25:cd:e6:af:6f:a2:4e:10:9c:79:42:ee:ac:57:
         ed:51:29:c4:ca:65:a0:c0:0c:f8:96:d5:2b:2e:da:d1:41:2e:
         6e:5d:b3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:13 2026 by rpki-client