Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/833f49b5-bff2-33b5-a777-5ce633d4d2ab.roa
File:                     833f49b5-bff2-33b5-a777-5ce633d4d2ab.roa (raw, json)
Hash identifier:          s3gbIjOh2Sam8CX+g0mGyKwuqeVCZZ92mOJiR69gjcM=
Subject key identifier:   53:8C:07:33:60:94:4A:9B:6C:6A:58:4C:A9:0C:E5:5B:B2:6F:D4:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA797C3387D7F231DDB625C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/833f49b5-bff2-33b5-a777-5ce633d4d2ab.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396574
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:c3:38:7d:7f:23:1d:db:62:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1f4e2bde-a9cd-4f66-bbf4-cfd1369463f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:aa:4d:0a:ae:18:9b:0a:7e:2a:8e:ea:c3:8e:
                    6b:f5:7e:cd:c8:c6:3e:07:34:c9:67:df:61:aa:57:
                    52:47:b8:02:fe:8e:d7:b4:a3:b4:70:e8:fd:6b:08:
                    67:2f:54:ea:99:03:d9:d6:d6:6c:63:39:72:3b:df:
                    17:b9:67:12:5b:03:a6:ce:1c:28:6e:71:64:33:2c:
                    1a:ec:b1:e0:ed:4d:f1:cf:5e:ee:df:a9:52:5a:50:
                    e4:34:fe:98:d4:35:65:bd:00:53:9e:a2:bd:9c:3c:
                    bb:a9:c5:f2:82:af:ce:31:4e:dd:76:2f:a4:52:c1:
                    f3:b2:54:a3:31:98:34:7f:3d:f8:f6:96:d0:59:33:
                    89:a9:14:d2:d9:55:5b:18:84:6a:f8:af:97:ba:a5:
                    8d:e8:9b:90:19:25:0a:1c:1a:09:38:c4:8b:66:c9:
                    ca:ca:71:fd:d7:7d:c4:25:8b:28:f3:66:85:31:54:
                    66:86:52:3b:8c:d1:0e:6d:03:31:59:16:80:71:ae:
                    a7:19:09:d1:90:2f:2e:e1:af:56:64:59:32:36:d7:
                    fb:5f:04:62:fd:87:f6:56:de:74:0a:d0:16:07:9d:
                    37:e5:cf:c4:ba:8d:ea:71:a2:87:1c:f2:6a:e9:7e:
                    66:64:cf:5d:14:8f:85:53:27:83:d7:32:58:28:f3:
                    35:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8C:07:33:60:94:4A:9B:6C:6A:58:4C:A9:0C:E5:5B:B2:6F:D4:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/833f49b5-bff2-33b5-a777-5ce633d4d2ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:be:11:9d:6c:df:20:bf:2b:eb:9a:de:5d:99:bc:e1:b1:17:
         d4:71:ef:c5:0b:11:98:db:ad:1c:3f:41:4b:5c:e8:74:8f:87:
         5b:c1:8a:53:9f:80:a9:9f:08:a7:d0:d3:1c:68:67:44:8c:dc:
         b1:7b:19:8f:22:88:57:f5:d4:93:d2:b2:a4:09:2b:93:04:80:
         1d:a8:71:2c:4e:cc:b1:1f:b5:d8:ac:fe:42:67:7d:ff:5f:b7:
         30:4d:2f:9e:62:b2:b2:62:6f:7c:ba:b8:98:df:54:58:73:c8:
         75:ad:61:3d:71:e2:d1:3f:ea:7f:82:66:49:86:52:18:e0:dc:
         3d:e5:96:c2:e9:39:eb:7f:e5:d0:a3:a5:38:95:12:0a:c1:89:
         8b:14:5b:52:b0:2b:13:a3:c6:c1:b1:dd:d2:83:25:fc:f1:16:
         b7:7d:e3:b0:2d:b9:cf:b4:6b:a2:a6:0e:f4:aa:c8:9f:e5:c3:
         1d:5a:5f:7f:d4:26:af:57:76:fd:7f:0f:99:49:00:9f:15:58:
         79:bf:e2:54:c7:aa:5f:d6:ff:4f:fc:6e:57:d4:d8:06:76:9b:
         94:f4:8e:a7:01:c2:f3:74:bd:85:84:c6:60:31:ca:bd:04:e8:
         cc:43:61:3a:34:65:4e:bf:98:53:24:98:ae:ad:24:e2:29:c0:
         ea:af:1b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:50:57 2026 by rpki-client