Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/190028a8-8802-370c-a320-c0ca2cbe4be1.roa
File:                     190028a8-8802-370c-a320-c0ca2cbe4be1.roa (raw, json)
Hash identifier:          HmTxOBtxxKLfED/szGKC5gFyYa92SkAlfBe5QbNt+IY=
Subject key identifier:   42:78:35:70:BF:E4:B4:B5:6C:81:6E:E7:36:6C:66:FE:FD:7C:A9:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A7F4821645730808A86A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/190028a8-8802-370c-a320-c0ca2cbe4be1.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396594
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:f4:82:16:45:73:08:08:a8:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=9b401256-85a0-4158-aebd-9746a20e9fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:84:ed:9c:d1:51:4d:a4:00:d1:da:73:c7:
                    c2:c4:2b:59:53:8d:d4:96:69:a9:ff:63:88:5e:9b:
                    d9:71:51:08:c1:ee:cd:35:02:57:47:0a:eb:96:ba:
                    a2:c4:ed:a1:a1:13:b9:54:d0:42:58:ba:44:37:73:
                    c3:9e:56:18:d7:b2:31:99:33:8a:a0:02:a4:ed:0c:
                    b4:a0:2a:40:bb:c5:4b:56:49:0a:ed:ce:1f:97:66:
                    48:00:3d:0e:cc:ee:3c:f8:8c:1a:32:70:31:e5:cc:
                    68:32:1c:eb:4b:e5:f3:5a:3d:bd:13:f9:e5:a8:a9:
                    49:ee:6a:78:21:91:a5:a6:ac:e2:72:1c:9d:77:ac:
                    1b:5a:91:85:c3:55:a4:26:dc:fd:ac:2b:4c:65:71:
                    4a:fd:a5:41:a6:de:05:69:76:e3:ab:5a:95:17:70:
                    56:45:4d:3b:d2:d8:a4:0c:2a:96:a0:8f:cd:82:3f:
                    4c:6b:af:d6:74:7b:d4:2c:fc:0c:a9:94:11:54:c2:
                    24:e6:7e:18:9e:17:d7:cf:f6:8b:c0:71:e4:39:38:
                    9a:d9:ab:f0:3c:25:b6:b1:85:28:43:d5:68:72:74:
                    5c:dc:62:d5:53:55:dc:9d:1c:69:40:33:cb:4f:dc:
                    55:02:77:b2:8b:70:3c:f6:bd:55:47:d6:75:72:83:
                    93:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:78:35:70:BF:E4:B4:B5:6C:81:6E:E7:36:6C:66:FE:FD:7C:A9:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/190028a8-8802-370c-a320-c0ca2cbe4be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:08:c6:41:2f:4b:cd:f7:14:a0:71:01:d7:d7:32:d7:cf:6d:
         c4:e4:6e:24:f5:35:7a:2e:db:c1:a1:de:8d:50:e8:d6:76:16:
         0c:44:35:88:e1:d6:6b:d0:e8:63:fb:63:88:78:74:d5:71:5b:
         ae:3b:d7:29:bf:c3:44:66:fe:09:af:ff:3c:15:e7:68:c5:d4:
         30:93:9c:ba:bb:16:3b:ab:49:bd:05:80:e0:b2:dc:96:69:ca:
         72:98:e5:14:62:ab:64:be:c2:79:e7:5c:59:1d:60:29:6a:84:
         b9:a0:ce:b4:80:36:2b:4a:02:47:34:c5:29:46:a4:f5:0c:67:
         13:70:5d:37:1f:9d:08:6e:5e:cb:84:13:5d:17:c1:50:c8:10:
         42:58:a9:d1:50:f3:37:f0:04:ea:2a:b3:d5:a7:d1:79:0f:48:
         e4:e0:55:60:de:c6:a7:bf:84:14:38:20:e6:e9:37:b5:fd:55:
         e5:20:86:34:5b:82:a5:4a:2b:d0:d9:39:56:00:f7:9c:74:e1:
         9e:1f:96:99:fc:6c:32:79:91:38:89:4d:94:69:bb:6b:b5:0f:
         34:8f:2e:09:6f:ca:4d:30:04:e2:1f:31:d1:c6:7e:88:a1:ec:
         7a:43:49:40:8c:f8:37:e7:65:81:99:ad:c7:52:91:08:28:db:
         44:14:07:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:18:17 2026 by rpki-client