Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f434c018-8ddf-3449-90e9-d5f39d75eff5.roa
File:                     f434c018-8ddf-3449-90e9-d5f39d75eff5.roa (raw, json)
Hash identifier:          w/uXsjbQbUzmg16AJVAwQ2HDusWy6rv5r3NuOS/kZCE=
Subject key identifier:   1E:5C:FB:60:0F:FF:9E:9E:7A:D1:F4:80:12:88:0E:35:C4:22:86:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD40776688CA0690F7208EA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f434c018-8ddf-3449-90e9-d5f39d75eff5.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     396543
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:76:68:8c:a0:69:0f:72:08:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=f7f586f4-0689-4bb6-bf91-10fac3f83ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:47:11:b8:07:fe:29:29:cf:d4:48:a3:70:02:
                    7e:c3:9a:66:9d:29:80:28:b6:f9:69:28:23:db:09:
                    14:ae:02:ce:47:ce:1c:b4:05:5c:e0:b6:f1:60:f5:
                    64:3c:63:09:2e:c9:d5:b1:6f:a7:cd:a8:cf:d1:9b:
                    df:86:07:f9:35:8b:3c:8a:5d:33:8d:d3:ea:0d:af:
                    b7:8a:8c:0f:3a:75:50:f5:16:f9:a8:13:60:4b:3e:
                    17:77:b5:df:7b:8a:16:51:0b:b9:32:c3:d8:dd:42:
                    00:13:d5:7d:bf:56:cc:1b:44:7f:f3:10:89:00:11:
                    12:7d:d7:c8:79:f2:42:ba:15:6b:08:7e:54:cb:4f:
                    b7:83:e4:6a:bb:af:ca:c7:22:ef:41:fe:61:30:26:
                    52:44:bc:73:c7:06:89:4a:d4:45:09:af:30:bd:3d:
                    5f:5b:3e:0e:47:ee:96:58:48:dd:8d:09:10:2a:cd:
                    74:bf:f3:8c:fe:2f:af:cc:cd:bf:f1:5b:08:d3:5f:
                    fd:50:f6:46:13:54:95:1e:1a:a9:aa:83:ff:f8:06:
                    6c:3b:05:1a:aa:88:c4:89:53:9c:c7:15:34:a8:59:
                    e3:a2:88:f9:a5:73:98:8e:4b:5c:34:45:15:0b:70:
                    47:42:08:ac:a7:dd:98:45:52:f2:21:65:f7:3a:a8:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5C:FB:60:0F:FF:9E:9E:7A:D1:F4:80:12:88:0E:35:C4:22:86:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f434c018-8ddf-3449-90e9-d5f39d75eff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:f8:f0:2d:f1:5d:4e:ca:42:46:db:1c:c5:f3:cc:2b:6a:24:
         cd:e2:ad:d6:2b:66:72:13:ef:c1:d3:42:9f:74:34:2b:07:ea:
         5d:8c:71:45:45:6a:4c:c2:2a:13:50:ab:44:13:9a:cd:fd:e3:
         28:b0:b3:5b:87:4d:59:2b:ce:f2:3c:05:08:e5:b3:e5:22:c0:
         ca:74:40:b0:db:58:23:5e:e3:9b:59:99:40:d3:55:84:d1:43:
         73:30:48:80:eb:7b:c5:00:66:1c:a1:2e:ce:fe:d7:5b:47:2a:
         53:87:80:88:7d:65:36:16:09:a0:b5:20:68:52:d5:b6:53:a6:
         2b:20:1b:ed:bf:fe:d8:90:38:93:65:51:93:23:4a:64:69:f6:
         61:ab:bd:09:67:2a:3e:5b:a1:fd:7a:4a:82:f0:5d:07:fb:42:
         c0:f7:61:12:96:9b:b9:0b:53:cb:e8:61:8d:f8:ce:5d:a2:76:
         43:35:34:dc:f7:10:73:a6:00:ab:8b:ed:cd:6b:ed:1e:d3:6d:
         17:1f:c7:9e:80:8a:e9:23:d3:9c:a7:30:94:4b:bd:ff:21:fe:
         fc:3c:b9:63:98:94:cc:8b:53:4b:93:54:3b:2a:77:26:f1:85:
         0c:16:38:25:b5:da:c4:b0:4a:25:8e:22:e3:e9:71:dc:50:4e:
         ab:e5:98:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:58:33 2026 by rpki-client