Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f45d07f-7df4-315d-9785-ca26ab59efe3.roa
File:                     0f45d07f-7df4-315d-9785-ca26ab59efe3.roa (raw, json)
Hash identifier:          435Rg6Tn4PC/u5BA1cRQMqiK2F/Mo652aERObAZRXZw=
Subject key identifier:   CB:3C:2B:66:F1:56:3B:D0:DA:70:D7:6D:16:D1:B6:38:58:DD:00:6B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D81005AE15C2AC46C5C3BF280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f45d07f-7df4-315d-9785-ca26ab59efe3.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     396586
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:5a:e1:5c:2a:c4:6c:5c:3b:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=7a95d4a2-e63e-4d9f-822d-0cab4b5c66e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a1:a3:97:67:fa:7b:42:d6:01:d2:54:b0:c2:
                    3e:f6:18:0d:57:a2:c7:42:cd:9d:fa:ae:4e:f3:97:
                    7f:d3:7f:ac:70:6f:0e:7e:c0:df:e9:1d:2e:08:0e:
                    6d:ac:31:f9:de:64:71:3b:a3:1e:0f:8a:48:17:9a:
                    9a:c3:86:d6:5d:3e:fb:f7:fa:b5:41:fd:65:c8:db:
                    6a:23:a1:fa:18:ee:11:61:29:c5:6d:1a:53:5c:45:
                    90:1a:eb:d6:44:a1:de:2c:a4:80:92:e9:78:33:a9:
                    69:3f:4a:d4:ff:0a:3d:77:03:ef:8b:76:04:a7:d0:
                    1f:38:74:e6:02:7b:4c:4e:50:72:2f:9f:dd:b9:65:
                    5f:06:1b:45:d7:e3:53:6e:4c:40:ef:7f:b1:35:70:
                    ae:20:42:49:7e:04:71:1a:6f:8b:ec:5b:73:59:20:
                    87:65:80:86:db:91:4c:3a:10:74:1f:2c:91:a3:82:
                    5b:e5:d3:02:6a:ea:4d:cc:50:0c:bc:85:20:3f:6e:
                    7b:2d:ef:5f:78:e0:21:08:45:3f:e4:44:53:2b:f3:
                    b8:5b:6d:bd:ca:e8:38:a7:c5:35:f7:99:18:6d:4a:
                    b4:fa:a8:fb:31:19:b9:a2:b6:f3:15:55:f1:05:ad:
                    b6:87:cf:38:d6:04:25:2d:b8:fb:d0:32:f0:c4:05:
                    81:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3C:2B:66:F1:56:3B:D0:DA:70:D7:6D:16:D1:B6:38:58:DD:00:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f45d07f-7df4-315d-9785-ca26ab59efe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a4:30:36:aa:54:bc:85:68:8b:05:bf:44:d4:35:cd:8d:24:
         40:fe:9a:7e:b4:cb:73:7b:24:b8:02:cb:8c:2a:3e:12:60:12:
         0a:7a:74:3d:70:59:58:bf:48:c1:5f:42:ea:4d:c7:74:3f:50:
         21:f0:29:ba:1f:f3:63:d8:40:57:90:27:26:b3:49:3a:7a:c1:
         69:3a:36:bb:01:a5:99:71:f8:c3:c8:c5:24:67:f6:83:22:96:
         ca:b0:a9:5d:73:58:89:5b:48:0c:48:38:0e:77:0b:5e:9c:ed:
         8c:10:42:45:e2:e0:29:b3:8d:c1:10:86:ac:d6:15:24:a1:9a:
         12:2d:4e:c4:fa:c5:f7:a3:85:ec:d3:6b:10:a6:7e:ff:d2:f1:
         78:6d:75:7f:ee:c6:85:7b:79:40:8a:24:fc:11:0f:67:55:71:
         93:53:b3:89:d0:e2:11:46:51:e5:fc:45:9b:d0:2e:8d:d3:3d:
         c9:20:76:ef:89:cd:96:25:d8:cb:28:eb:3e:73:ce:d3:e8:08:
         6d:de:59:64:60:99:20:e6:14:bd:49:de:d9:97:35:99:5d:c3:
         f1:94:22:91:bd:a0:f8:1d:1e:63:e5:a7:92:aa:86:37:eb:d6:
         1e:fd:c9:c7:1e:b2:6f:3a:c6:ac:15:ee:89:35:56:d8:41:67:
         96:08:b9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:29:15 2026 by rpki-client