Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be1a1e28-b0b1-30c1-83ff-951208707188.roa
File:                     be1a1e28-b0b1-30c1-83ff-951208707188.roa (raw, json)
Hash identifier:          TJHGvO86h5GqQphZ9rxG+GQzClcETAaV0pwxFU19w4E=
Subject key identifier:   D6:7F:67:49:F8:19:F8:0E:2D:9B:4A:4D:FA:66:D2:74:48:C7:99:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD4077BC1E941D62A46F79EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be1a1e28-b0b1-30c1-83ff-951208707188.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     396541
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:7b:c1:e9:41:d6:2a:46:f7:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=b8ff305a-f0ff-467c-b6dd-7b1198e5ee52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a7:6e:a0:2a:13:e5:d3:07:30:aa:0c:55:3c:
                    d0:11:63:fa:76:86:7d:cf:9e:ab:bb:cf:34:a6:2d:
                    65:3c:51:c1:47:41:54:e6:71:8c:27:cd:aa:f9:6f:
                    2c:2c:02:03:e5:b5:fb:e8:6d:cb:b5:97:fc:71:1c:
                    58:16:73:09:87:10:06:24:65:de:0f:d3:2a:9f:c9:
                    1b:a8:11:0a:4e:03:8b:ec:80:32:ca:11:32:5e:9e:
                    bd:1e:8b:2a:00:d9:dc:71:c7:60:fb:ea:2c:cf:31:
                    d9:c7:1e:55:9a:51:3c:d3:c5:46:07:ac:43:58:78:
                    66:5b:df:5e:cc:43:c0:2f:1e:c0:c9:91:dc:1e:60:
                    cf:be:7d:dd:47:a2:c8:2d:03:26:d2:f7:56:76:d3:
                    0c:ee:b1:17:cd:bb:ee:e4:60:66:b0:f5:0e:c6:27:
                    70:31:df:3c:4e:3b:ec:d1:b9:2f:79:b5:e9:ff:a5:
                    e3:f3:0f:3e:da:d3:a3:c6:17:df:8c:d0:6e:9f:72:
                    cc:e6:c1:e1:2c:a0:62:90:b5:fc:60:ae:79:b7:43:
                    ef:47:71:9d:3e:57:ae:e9:64:f0:69:77:59:cd:7b:
                    9b:b4:8d:d9:5d:2d:02:19:87:a5:2e:01:69:44:07:
                    73:6c:4f:c9:77:f8:e5:5d:d1:79:46:be:6e:de:6f:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7F:67:49:F8:19:F8:0E:2D:9B:4A:4D:FA:66:D2:74:48:C7:99:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be1a1e28-b0b1-30c1-83ff-951208707188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8f:54:99:ca:ef:13:6a:23:29:be:47:d7:b1:55:0c:4e:46:
         8c:fb:d2:ef:5b:6d:f1:37:60:e3:e3:af:29:8a:8a:92:f7:9d:
         7c:a9:b6:91:75:56:e7:6e:bd:c6:a0:93:4e:34:7e:12:48:13:
         19:0a:d8:58:e7:30:e7:ba:1d:d2:2f:30:b3:d1:fa:73:f3:7d:
         59:fa:d1:ef:aa:07:26:9e:64:e3:d1:14:d6:f2:f6:e8:b8:34:
         52:d9:4d:fa:6a:4d:fa:3b:e5:9e:3b:3e:4d:d5:9d:bc:15:55:
         40:d4:d9:74:16:72:18:db:2c:65:84:8f:86:cc:19:16:d7:4b:
         a9:34:28:32:86:4b:74:76:82:36:0e:d4:cf:66:77:38:1a:bc:
         0d:1c:71:5d:46:78:77:b8:24:c8:27:88:37:c7:fe:7a:f7:36:
         a9:3d:4b:a3:45:74:fc:62:f6:83:15:da:8c:27:e7:bd:88:3d:
         52:c0:0a:bf:fa:fb:0f:ab:bd:50:c6:35:25:56:7e:e3:08:91:
         a3:86:85:a7:92:39:87:98:c2:4b:1a:ca:27:00:ee:08:1e:2a:
         e5:93:e6:49:62:a0:cc:5d:33:60:75:b1:9d:80:06:5c:80:f0:
         25:30:e1:0e:e0:f2:53:fb:de:87:78:db:e7:bb:63:05:e8:66:
         62:28:d8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:54:39 2026 by rpki-client