Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c927712c-b22e-3c00-9fc6-ac572a3cd9e6.roa
File:                     c927712c-b22e-3c00-9fc6-ac572a3cd9e6.roa (raw, json)
Hash identifier:          2vamQFoYtEdSEn8u5FFkVJ7U+bopb4vXvt2QrqSfFzQ=
Subject key identifier:   63:DE:6B:D3:72:D9:9E:52:24:9E:C9:8E:A2:CA:34:91:8C:72:23:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD40779DFFDE134C5969EE500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c927712c-b22e-3c00-9fc6-ac572a3cd9e6.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     396575
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:79:df:fd:e1:34:c5:96:9e:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=f3c75862-19cc-4ee2-8ee3-d35fef376f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:df:06:3b:8b:bf:d3:aa:f4:e9:c1:ed:56:
                    8b:41:19:01:90:80:37:d0:b9:25:63:47:44:ef:bd:
                    67:2f:83:eb:8f:a2:78:cf:9a:21:a1:82:6a:b7:8d:
                    35:c7:be:a2:52:8b:3a:c6:bd:9b:4b:60:16:e3:a8:
                    63:0c:61:3e:e0:cb:bc:76:14:cb:fd:72:bf:55:ca:
                    85:ae:3a:a2:48:ac:ca:42:ab:11:2a:9f:ec:af:e6:
                    4d:76:cb:6c:fc:7e:5a:99:97:01:8a:15:f0:52:0a:
                    b5:d0:d9:ba:6b:66:2e:da:ac:53:76:9d:ae:d5:30:
                    7d:6c:80:f2:00:c1:86:d3:13:3b:62:a4:2e:21:b3:
                    b9:9b:a8:0a:35:49:a1:8e:df:5d:92:d1:fd:18:15:
                    b1:68:b2:33:a5:15:51:ae:5f:7a:57:aa:93:f5:39:
                    9c:1b:69:04:ee:dc:3f:ad:b2:2c:8d:79:7a:5d:1c:
                    3b:42:37:aa:c7:98:86:48:10:30:5f:76:6c:83:37:
                    28:d6:41:45:0a:04:b1:ca:3c:27:87:3d:a1:2c:ab:
                    a7:b0:d8:99:ab:33:21:f9:5b:61:20:b7:7f:b0:a9:
                    68:a4:cb:27:c1:b8:82:d3:c0:06:ad:ea:e7:44:ad:
                    fc:52:99:6e:5f:bb:22:73:ac:ca:f6:43:76:bf:68:
                    fe:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DE:6B:D3:72:D9:9E:52:24:9E:C9:8E:A2:CA:34:91:8C:72:23:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c927712c-b22e-3c00-9fc6-ac572a3cd9e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:55:07:38:82:73:b0:88:eb:36:84:02:5b:4c:78:35:5c:a5:
         7e:3e:b3:54:87:a3:31:87:6f:dd:85:df:db:eb:dd:82:78:9b:
         80:5d:4a:cf:3d:45:b3:49:5c:9f:4f:d0:d2:3a:1e:93:2a:77:
         12:38:90:25:db:9a:bb:19:b0:c8:fb:4f:27:17:0b:a8:a8:37:
         a0:55:cd:55:b5:69:14:db:be:e0:b7:bc:79:b3:09:30:53:fd:
         31:3c:2d:c9:69:0f:b4:e8:19:6f:74:ed:51:e7:11:75:be:d4:
         7c:18:43:46:d8:25:40:88:0b:10:7b:cd:7f:2f:0e:06:14:a3:
         c5:6a:ee:97:da:cf:85:cf:a5:7a:af:1c:18:db:b7:de:20:92:
         11:45:aa:d7:96:fe:19:d6:ca:ae:8f:d6:99:6d:32:c3:d9:30:
         07:e1:d4:93:bc:45:33:f1:d6:a1:bd:5d:1f:83:48:39:6e:ac:
         ef:b4:a3:91:a9:f9:0a:08:8b:db:c8:07:42:ea:fc:bc:b5:26:
         e9:ce:a0:40:32:25:8c:a4:c3:c1:a7:7b:8b:55:47:b1:4c:81:
         12:72:e0:5a:72:1e:ec:e5:e2:8b:37:92:d5:fc:13:2a:25:eb:
         c6:4c:d8:4d:5c:96:5c:15:32:58:de:ea:67:96:24:87:f4:b5:
         ad:76:c6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:24 2026 by rpki-client