Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76502321-aafd-3bfe-961c-e2072dc7dd26.roa
File:                     76502321-aafd-3bfe-961c-e2072dc7dd26.roa (raw, json)
Hash identifier:          jPuCGfE3b8YAyy0RjvRP1uBwUq4hr1l0iGNcGDoHNr8=
Subject key identifier:   3D:FC:96:1D:E1:2E:15:3F:AA:FD:4C:70:AD:11:73:B9:E1:0D:38:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD4077977E92BA3F299291F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76502321-aafd-3bfe-961c-e2072dc7dd26.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     396566
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:79:77:e9:2b:a3:f2:99:29:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=d8452a51-b11a-4414-a338-0e157954f415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:1e:99:bb:8e:10:02:a7:96:56:13:38:12:
                    fc:cb:e5:28:bf:19:36:3b:db:e5:49:c4:46:41:bd:
                    7a:cb:f6:3a:86:68:2c:e7:93:2e:1d:af:7d:00:17:
                    e1:cf:f8:e2:8b:a9:9d:d8:9b:95:24:24:91:c7:be:
                    08:00:ed:63:91:28:71:c6:d0:14:01:86:05:e6:e6:
                    c1:fe:75:c8:24:db:98:1a:1a:da:31:5e:19:5a:36:
                    3e:04:b0:8f:fb:55:66:81:ca:d7:0a:82:39:90:37:
                    5e:41:13:bf:11:2c:7d:5f:c6:65:46:7a:57:d6:f1:
                    e0:7f:2d:75:44:63:5e:84:02:27:96:fb:f4:3a:4f:
                    b0:d1:c5:83:d2:23:f3:33:5e:1b:cf:29:a4:d2:84:
                    b0:9b:60:5b:46:d2:e7:30:ed:4c:73:9d:f2:55:8c:
                    c2:36:d1:e5:d2:be:79:29:06:e5:16:15:90:fa:70:
                    af:a8:d4:9a:55:e5:1a:49:9d:9f:41:01:1f:52:8a:
                    57:6b:88:9b:0d:aa:1e:15:9b:5b:b8:e9:c8:cb:f8:
                    3f:db:c5:c5:9e:65:ee:f5:97:c1:41:dd:50:d1:9c:
                    52:e3:c1:33:cd:38:69:11:8f:9e:46:b0:72:d1:d2:
                    08:7d:45:72:fc:fd:4d:c8:20:b2:6b:af:ea:cc:33:
                    63:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FC:96:1D:E1:2E:15:3F:AA:FD:4C:70:AD:11:73:B9:E1:0D:38:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76502321-aafd-3bfe-961c-e2072dc7dd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:62:ff:e9:b2:31:e1:3e:0a:9a:7e:f7:1a:3e:e4:3a:ca:ed:
         00:08:17:c3:24:00:5b:14:f2:fe:a8:a7:88:5c:8e:9b:8a:44:
         90:c0:6e:48:3e:9d:c7:27:f5:35:95:40:7b:a8:90:7b:e5:9f:
         31:8c:7a:67:c8:17:54:12:b8:3c:19:95:a9:79:61:48:e5:40:
         0e:46:96:3e:a8:39:71:33:15:20:70:c8:c9:0c:10:de:3f:0e:
         6c:97:ac:18:13:56:4c:a9:44:de:7b:0d:a1:17:42:c4:b3:b2:
         bd:dd:4c:43:56:64:12:a9:bc:ba:8e:7a:29:fb:5b:10:75:4c:
         96:84:de:a3:7c:06:0f:fc:35:a2:37:22:68:29:6c:27:b8:65:
         13:4d:87:eb:96:d2:1b:1c:b1:2f:b4:55:de:25:60:27:fa:72:
         9f:54:fa:5d:35:3a:3a:9f:18:2f:98:1d:47:d0:d0:a5:f9:83:
         4e:3d:47:87:7e:09:aa:fb:27:50:8d:ac:65:53:36:cf:c4:a5:
         8c:46:f8:b7:b3:43:c2:8c:8b:ba:e5:da:65:3f:d4:19:4f:dc:
         eb:ee:19:c0:5f:3a:6f:6b:3d:69:0f:a2:00:46:d0:de:eb:91:
         0f:27:c7:75:73:5a:07:de:4c:2b:95:78:26:fb:cf:ab:08:d1:
         4b:98:66:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:51 2026 by rpki-client