Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3328cac1-ee96-3bd4-b0ab-f8d5ffec55c1.roa
File:                     3328cac1-ee96-3bd4-b0ab-f8d5ffec55c1.roa (raw, json)
Hash identifier:          xSpfl45MHABpBipeTw9QFsm7QtEb/0yHP8xazocKutk=
Subject key identifier:   92:8E:AE:9A:19:88:FE:7C:2B:07:49:AC:6B:EF:DA:C6:11:2D:99:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD4077A1150C0F1440C5EB480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3328cac1-ee96-3bd4-b0ab-f8d5ffec55c1.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     396826
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:7a:11:50:c0:f1:44:0c:5e:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=beb15593-7c00-49f8-94ec-4c5fe7b93dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:74:7b:73:74:bd:00:6d:79:7b:db:2a:47:
                    62:53:c6:bf:0c:42:18:4d:4e:dc:3a:4a:e6:9d:9c:
                    da:24:0c:f1:eb:b1:01:9f:62:53:2d:4a:f2:cf:07:
                    e9:9b:e8:bf:74:3a:3b:c9:c7:8e:a0:a8:24:e9:ef:
                    05:b7:dd:65:64:eb:3a:30:97:65:6f:80:94:d6:d3:
                    4a:68:c9:64:07:c7:27:21:cd:3c:9f:9c:67:b2:9d:
                    d4:a4:55:ed:d2:f1:46:04:10:da:87:75:fe:1e:51:
                    b9:1e:0a:cc:59:75:b5:63:fb:90:76:95:c7:ef:80:
                    7a:7a:7e:44:d9:f5:ea:be:7a:cd:82:c9:dd:92:a2:
                    4d:4c:92:b4:cf:d1:20:81:09:31:69:31:0b:70:81:
                    a7:81:63:c5:21:9b:de:c6:6f:1b:9f:b2:15:e4:9c:
                    58:c7:97:08:7b:38:99:b8:4f:e3:87:1b:6e:9d:c2:
                    72:e4:d1:a1:f2:b9:30:78:fe:01:b5:a4:ae:a7:fc:
                    f9:e5:7f:81:76:50:82:aa:df:22:4a:d4:28:69:ec:
                    29:05:b0:4a:b5:1a:28:56:f1:bf:ae:8a:de:09:76:
                    6e:6c:97:2f:a0:b1:6f:87:5c:5b:bd:6c:dc:06:66:
                    e0:77:09:7e:9e:d0:84:35:bb:5a:b2:00:3b:a2:31:
                    c8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8E:AE:9A:19:88:FE:7C:2B:07:49:AC:6B:EF:DA:C6:11:2D:99:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3328cac1-ee96-3bd4-b0ab-f8d5ffec55c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ef:60:67:2d:7c:21:e1:11:49:48:e0:96:12:92:da:66:7f:
         4d:7f:26:d3:18:ab:08:b3:61:34:43:57:48:f4:44:0d:49:20:
         4c:64:78:2e:72:97:92:4f:6d:a4:0e:73:13:83:bd:82:f7:e0:
         83:48:83:3e:2a:eb:17:34:13:8f:ed:62:07:d5:2b:af:d8:30:
         86:c1:24:8e:cd:0a:37:a5:a0:ca:7c:b2:23:32:d2:d4:80:f6:
         3b:52:f6:d2:9a:ec:42:fc:a8:aa:b9:8b:f0:4a:ba:66:d1:0e:
         2e:b8:23:bd:8b:f6:71:39:6a:85:0d:55:13:7d:6e:55:8d:a0:
         f3:b5:70:3e:13:4a:da:94:e0:be:3f:75:c9:cd:61:d7:42:ae:
         88:c7:84:16:26:32:05:72:ac:1e:89:83:b7:8b:e0:a2:c8:d6:
         2e:d1:38:3c:5f:d9:77:bc:46:51:4d:8d:88:e1:71:aa:28:c9:
         8f:1b:2c:fb:e0:a4:0c:16:7c:6c:a2:47:6d:0c:fc:14:98:5c:
         5e:c5:1a:50:6e:df:36:1c:a7:dd:2b:96:56:ae:c4:2b:d7:ab:
         3a:06:cd:69:99:13:67:b0:cf:c3:15:4f:cc:1c:96:f8:16:b2:
         93:ab:d8:73:a9:c7:7b:ee:76:03:39:a7:0c:45:10:5b:28:d5:
         52:f3:53:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:03 2026 by rpki-client