Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64181844-235c-3e3d-9077-a7bf15783768.roa
File:                     64181844-235c-3e3d-9077-a7bf15783768.roa (raw, json)
Hash identifier:          Q876aKewxEcMWZjG0L50oeVxD3EOseW+ztct3AOQDJk=
Subject key identifier:   9A:E2:44:13:52:29:FA:45:30:CE:34:E0:08:6C:F9:7E:64:AC:41:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F2ABD299A6DED640032D64DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64181844-235c-3e3d-9077-a7bf15783768.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     396564
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:29:9a:6d:ed:64:00:32:d6:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=bb085a2e-69a3-4314-9943-af6de2a99cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:8f:72:76:28:b6:a4:a0:20:32:5b:46:35:
                    e9:37:69:7b:14:f4:6f:c4:8a:89:5c:20:ba:0f:67:
                    7d:93:d1:10:52:0d:45:ce:27:a4:89:a7:0e:ab:dd:
                    f5:20:b6:07:e8:09:64:3c:ee:9b:83:2b:ba:16:6c:
                    68:79:22:19:83:34:df:ca:2a:6a:77:6f:50:bf:a7:
                    a4:2d:3b:ee:9c:fd:18:6e:04:b2:76:c0:04:c7:e2:
                    57:ca:76:e4:ff:4f:60:37:73:a5:cb:ff:78:de:31:
                    b3:67:a7:75:87:77:e0:d2:14:3b:c8:3b:4e:ed:b8:
                    2e:7e:dc:80:01:5d:00:d6:2e:0a:87:58:ee:86:26:
                    5a:26:2d:82:e0:20:15:60:ae:90:f0:9e:40:30:f0:
                    3c:88:85:b0:8f:c0:57:c0:44:01:03:af:80:70:38:
                    69:9c:ed:f2:15:f7:bb:a5:45:b5:7e:8a:51:5e:3f:
                    b0:c3:0f:c4:e8:f4:3a:c8:cb:26:4f:12:8e:a7:a1:
                    78:a5:6b:25:6b:ad:95:91:f9:dd:fd:43:44:02:b7:
                    a1:f7:19:91:97:c3:9a:ef:4d:75:b5:c5:57:c4:3c:
                    08:d3:95:83:52:2a:a6:b4:35:1c:d9:fc:71:c7:b8:
                    3b:c6:9c:f0:37:ed:86:93:01:99:37:b9:b8:54:34:
                    6b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E2:44:13:52:29:FA:45:30:CE:34:E0:08:6C:F9:7E:64:AC:41:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64181844-235c-3e3d-9077-a7bf15783768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:42:b8:e3:fb:58:4e:e4:d3:ef:d0:04:2e:21:d7:13:99:2b:
         35:e2:25:a6:b4:70:b9:cc:d7:1b:de:d0:5f:28:f4:ba:8c:2a:
         98:43:97:74:1b:ac:09:2d:60:99:be:fb:c2:4d:15:4f:19:f5:
         a9:1f:69:49:e7:1a:46:32:0c:7c:8b:a7:d9:73:86:36:e7:28:
         6b:07:44:40:26:d5:7b:51:63:77:04:ec:df:3a:1d:d9:11:25:
         cd:4e:e1:30:46:03:17:3c:81:ba:56:00:73:11:50:ca:ad:1d:
         b3:ab:34:75:16:51:72:02:cb:46:2f:51:94:a2:f3:d1:6f:10:
         e0:33:c0:1b:70:cf:e5:d8:9b:19:ec:9c:fb:1d:dd:6f:71:94:
         88:f9:5e:6c:76:76:48:d6:b2:49:af:bf:be:65:27:27:76:6d:
         4c:a2:ca:e6:29:9d:9a:db:18:f5:98:de:d7:54:04:e9:8b:e0:
         40:0e:8f:3a:46:c8:71:42:7a:a7:2e:6c:cf:2f:a5:aa:8a:97:
         23:a3:b4:62:b7:59:c1:76:b6:2b:2a:d4:31:43:bc:0d:55:72:
         f1:fa:86:a4:27:fa:b9:ab:92:df:2f:23:84:ed:4b:82:de:81:
         1b:39:10:5d:92:9d:87:88:35:39:9c:29:bb:89:52:1a:b4:36:
         6e:5f:aa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:07:38 2026 by rpki-client