Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13bf636c-2960-3eb9-b841-00f4ff582d23.roa
File:                     13bf636c-2960-3eb9-b841-00f4ff582d23.roa (raw, json)
Hash identifier:          nK0mhgCc/H85dPktOjv7GGXsFhLWHw9oR6XllahErXE=
Subject key identifier:   3B:91:47:21:DA:45:A1:8E:AC:63:34:00:E5:5C:55:72:D2:39:E7:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F374D35CE39A3E6FF3907E060
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13bf636c-2960-3eb9-b841-00f4ff582d23.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     397198
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:35:ce:39:a3:e6:ff:39:07:e0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=6cd588f3-cee4-4fe8-8b62-9397b45d0cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7c:0e:22:0e:77:5d:2d:5a:76:26:d0:8b:09:
                    32:f0:ed:19:14:72:3e:55:be:ba:f6:3f:17:31:64:
                    f7:6a:da:d3:d0:2e:2c:27:3c:e3:1f:60:0f:68:44:
                    70:37:44:31:7f:e2:ba:f2:1e:5e:a8:fb:19:16:50:
                    e9:f2:42:1e:0d:4e:ff:3d:23:67:cb:67:e9:1d:ca:
                    01:d4:d3:a1:3e:9a:c4:8f:fc:78:53:5f:92:b5:ee:
                    1d:09:5b:7d:f7:05:a2:73:68:fb:68:87:83:58:05:
                    b1:65:9f:9d:27:b0:4b:2f:26:3c:41:f1:60:79:45:
                    a2:c2:43:8d:ee:93:ed:73:7c:ef:f3:21:1d:5e:b0:
                    21:4e:26:2e:af:c4:d8:14:00:8c:33:19:e0:4a:f6:
                    3f:ea:70:7b:ea:03:b1:03:7e:bb:3d:89:d9:1d:e8:
                    cf:0a:20:e5:15:e0:c4:88:70:e3:8a:64:82:96:c2:
                    d4:ec:01:e5:8b:ef:e2:98:5e:51:27:d1:5b:79:cb:
                    90:86:ac:a1:82:e5:57:8a:8f:b9:da:44:d0:9a:ce:
                    4b:7d:8b:d3:bd:00:a5:4a:a3:6a:15:b6:b4:ec:d5:
                    d1:7d:83:22:f3:db:ba:17:33:bd:10:b5:09:c4:f9:
                    00:fb:1c:bc:d5:e9:be:0e:49:65:d0:94:ca:46:5c:
                    54:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:91:47:21:DA:45:A1:8E:AC:63:34:00:E5:5C:55:72:D2:39:E7:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13bf636c-2960-3eb9-b841-00f4ff582d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:d0:71:1d:8c:d4:df:93:29:08:c1:a8:9d:e2:b8:cd:ca:e4:
         a1:6f:6d:91:d6:5e:a0:4d:aa:59:2b:e6:d6:c2:57:c2:d0:73:
         81:69:92:e2:e4:02:58:98:cf:44:46:85:91:a2:db:a8:32:2c:
         94:aa:1f:b9:b5:4b:ef:10:23:93:97:04:f2:73:5a:af:07:79:
         1b:c6:e5:80:93:57:21:2c:ba:1a:03:44:da:fc:33:ca:8f:bc:
         3b:f7:37:94:fb:64:17:f7:64:66:96:c0:6a:51:53:38:5a:0d:
         f7:f3:c4:73:ca:dc:3c:25:86:45:38:08:76:7b:c1:73:cd:4d:
         cf:b0:b2:f5:5e:e5:39:ef:79:ef:60:61:fd:49:cf:22:46:1c:
         f7:2f:c3:0e:9a:92:4b:11:cc:bd:ed:94:f5:ff:da:5e:c5:ba:
         73:71:b0:0e:4b:45:3b:d0:e6:8a:ab:e1:05:79:eb:7e:d5:bf:
         c7:8f:d3:e9:2f:6a:c3:55:a2:53:aa:a2:9a:a3:c6:40:92:6a:
         54:1f:a0:08:64:af:44:5b:fa:c8:9d:ee:c8:04:b1:be:be:3b:
         cb:cc:49:0a:26:5b:7d:ce:7e:2e:58:ac:9a:ba:c1:98:ce:85:
         90:cc:dd:f3:df:32:78:69:61:7c:d5:da:62:31:e3:b7:16:a8:
         0a:1f:f2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:07:00 2026 by rpki-client