Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89e0693f-0d2c-3156-920b-b925583a6a67.roa
File:                     89e0693f-0d2c-3156-920b-b925583a6a67.roa (raw, json)
Hash identifier:          nC3/2626prbxYkPXfKuoCZ2eGeK15YDi2ciTPU1gAqE=
Subject key identifier:   40:19:64:5F:AF:00:85:C0:0F:5A:2B:BD:68:C0:83:29:25:24:7D:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F374D3261B0C4E0FF049A9480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89e0693f-0d2c-3156-920b-b925583a6a67.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     396586
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:32:61:b0:c4:e0:ff:04:9a:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=7242dafb-7e69-4c68-9f28-dc41426060f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cb:bc:11:b4:a4:64:ef:53:0e:55:13:c7:0d:
                    fc:68:6b:89:d3:33:44:30:65:5b:ad:d9:3a:97:1e:
                    0a:b1:1d:58:15:d7:c1:4b:37:11:f4:2e:95:28:b6:
                    f3:81:fa:89:38:7c:10:ef:2d:36:67:26:a7:69:8b:
                    df:95:1f:7b:d2:97:f5:c2:2b:a8:86:e9:31:cd:29:
                    a3:1c:fb:1d:d8:ae:f7:51:b2:0c:52:13:1d:0c:74:
                    eb:f9:11:a8:13:a4:1f:f6:00:4f:b9:9d:7d:87:2d:
                    68:c2:42:c1:87:03:b9:a4:7b:98:7d:66:b6:63:8b:
                    d2:c0:d3:71:36:3c:45:84:07:5f:4e:82:8b:f3:5c:
                    e3:a1:09:4a:e8:93:1e:95:dc:d4:19:66:00:66:79:
                    de:5d:1f:7f:10:d9:41:25:ae:82:04:28:d9:36:78:
                    db:8d:bc:93:89:12:fb:f3:02:0d:dd:09:16:d7:04:
                    7e:5f:66:2f:bb:32:74:ac:59:2f:fc:f6:8e:63:ae:
                    b6:55:51:a4:49:16:ef:dc:cc:1b:3d:d4:06:a4:26:
                    0c:da:28:86:6a:52:00:27:11:9e:00:3c:cf:f0:f4:
                    35:e9:f8:cd:cc:ff:a9:ef:fb:ce:e6:ab:87:85:c5:
                    2a:3a:4a:60:44:6d:b2:d6:06:81:4e:2a:8a:3f:3b:
                    e2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:19:64:5F:AF:00:85:C0:0F:5A:2B:BD:68:C0:83:29:25:24:7D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89e0693f-0d2c-3156-920b-b925583a6a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:56:79:f4:3c:e5:56:d4:66:01:95:18:f1:13:5f:fa:85:24:
         78:b7:06:0e:8f:e5:f1:79:c5:f2:1d:7b:cf:d1:58:78:04:02:
         38:9e:3f:a9:4d:b5:72:63:5a:55:90:db:cd:dd:9a:e5:7b:6f:
         e6:12:1f:83:3a:45:d6:ae:9d:24:1b:f0:5f:91:67:06:44:5a:
         f3:13:dd:b7:71:e1:4a:b1:3c:7e:02:d7:0c:48:a5:af:a5:de:
         81:02:e9:68:f6:00:e7:f0:1e:c2:3d:f2:3e:ac:88:44:76:02:
         71:f6:c7:c7:b0:3f:22:15:86:df:4e:cd:66:0a:80:63:d7:36:
         8e:10:4e:b5:08:8c:1d:0a:a5:2a:64:7d:df:84:35:cc:6c:be:
         65:30:21:98:7c:16:7a:fb:8e:91:9a:83:ad:76:07:1e:93:9e:
         b4:1c:fd:7b:60:15:8d:91:a8:d2:7e:62:46:50:2c:cb:29:53:
         ee:e9:00:cf:8d:51:fb:cb:f0:e8:65:86:44:a0:70:0c:99:14:
         ff:e4:1b:0e:ff:a9:e6:47:fc:ec:e8:c9:57:a9:b2:af:1f:cc:
         1f:b6:8c:ca:25:03:8c:5e:32:77:7e:cb:5b:b4:4b:6e:3d:d1:
         d9:73:6e:31:2f:a7:7e:f3:e3:e2:ce:01:9a:58:f6:d0:b7:6f:
         7a:1b:b2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:19:46 2026 by rpki-client