Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e985f9a7-dd03-32a9-9e98-a0c6df73365a.roa
File:                     e985f9a7-dd03-32a9-9e98-a0c6df73365a.roa (raw, json)
Hash identifier:          oqZialpmBgXD/Yrrb2wfbRwG5GqqObS3lCap2Zb0N3o=
Subject key identifier:   6D:A0:3B:1A:34:21:EF:CE:1C:0F:3D:B3:0F:49:63:16:22:93:83:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD407775D99F4F54C2447F900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e985f9a7-dd03-32a9-9e98-a0c6df73365a.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     36619
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:77:5d:99:f4:f5:4c:24:47:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=edfe8844-2139-40a1-a69b-86dbb76a4f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3d:e7:21:45:17:20:0f:4e:66:16:87:25:eb:
                    9c:2b:18:cb:e8:44:bd:7e:39:38:76:d1:e3:cc:f6:
                    bb:b8:02:a8:ed:60:57:8b:64:22:28:ff:39:a9:a4:
                    26:87:99:43:6f:e5:01:97:ad:40:26:55:07:ce:28:
                    b7:80:25:dc:94:37:0e:22:68:c4:64:46:2b:25:cd:
                    40:63:df:e9:21:00:95:76:0f:ed:06:0d:5d:31:d2:
                    d9:e2:ad:80:ab:f7:4b:03:55:5f:c5:e4:a1:59:37:
                    45:03:6f:24:e8:72:e2:1d:c6:ce:05:da:8a:c7:45:
                    6f:80:7f:1b:f6:70:c9:6f:0c:4a:cc:1f:4d:ae:cb:
                    16:4f:d1:ed:f7:6d:97:de:52:5a:e9:f2:d0:00:82:
                    e0:e9:41:47:86:71:69:42:4f:b7:34:79:a0:95:29:
                    af:31:14:6f:35:be:9c:59:fa:ce:72:e8:12:1a:25:
                    5b:98:eb:47:c5:3f:ca:4a:28:2e:74:db:c7:0a:ea:
                    d2:c6:41:1b:31:c9:ef:2c:25:37:ed:0b:6f:10:26:
                    c5:b8:7b:2b:0c:64:ef:c2:7a:9b:5d:08:9b:d8:28:
                    47:6f:f3:f4:c2:4a:94:d2:9b:cd:98:84:66:b6:63:
                    26:c9:f6:62:22:2e:87:37:5d:2e:91:27:b3:9a:52:
                    42:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A0:3B:1A:34:21:EF:CE:1C:0F:3D:B3:0F:49:63:16:22:93:83:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e985f9a7-dd03-32a9-9e98-a0c6df73365a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f1:d6:dc:84:0f:2b:a2:5b:5f:2d:77:88:12:11:04:1d:19:
         c2:4e:03:38:4e:d9:40:37:71:07:89:8e:34:0b:90:8a:46:3f:
         6b:87:f4:07:cf:74:73:61:f3:ea:e3:f1:e1:99:02:77:ed:dd:
         9e:5e:d0:3d:1a:f5:3d:a6:78:b8:d7:0a:56:58:d3:e3:43:a7:
         24:2f:c0:fc:23:aa:ca:9c:1e:a4:5d:b1:41:d7:9e:39:fe:22:
         82:d7:69:7d:de:a3:d1:6b:33:c6:ca:d1:78:16:19:f0:d3:e2:
         49:23:ee:db:25:96:6e:c3:7d:bb:d7:12:93:10:e4:f8:3c:2c:
         7e:cc:38:6d:bf:58:d7:8a:97:82:f9:e0:78:75:b3:03:fe:08:
         8a:69:27:a9:17:1e:3b:09:44:07:e3:79:17:93:8e:b4:18:77:
         d2:b0:13:f3:3d:6e:dd:aa:e9:42:ee:96:e8:1e:f8:0a:3b:ad:
         8b:a2:f2:1d:52:3d:73:fb:1a:de:79:c9:b7:7e:fb:d8:56:ce:
         a4:35:5c:34:c8:93:5c:e0:6a:2b:e7:a6:33:ca:d1:b6:52:00:
         5e:24:08:9a:8e:48:ab:8d:25:01:32:4c:fe:26:0a:5f:a0:02:
         77:e3:53:2b:05:8f:3f:f0:b4:22:7c:e1:9d:52:9b:69:35:14:
         df:a1:85:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:58:06 2026 by rpki-client