Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2370f688-962f-378f-b250-638c1daebac6.roa
File:                     2370f688-962f-378f-b250-638c1daebac6.roa (raw, json)
Hash identifier:          EDrJ4zf71bzodrS0vd05zXRt39KvwVJoK74VcjGaSnQ=
Subject key identifier:   CD:E8:6A:B8:9D:FB:BF:58:C3:70:32:D1:53:D4:91:4D:54:3D:53:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A7F09364975672D5AC3B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2370f688-962f-378f-b250-638c1daebac6.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396591
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:f0:93:64:97:56:72:d5:ac:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=a464d497-4b54-44af-a152-fedd506aedbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ed:a1:1e:73:67:1c:43:ee:60:52:9d:1b:cc:
                    8d:78:b5:96:62:87:77:c4:1b:60:3b:1d:5d:6b:3d:
                    6a:59:d0:da:4e:20:60:bf:ff:99:0b:09:88:52:24:
                    d8:5f:21:92:d2:17:de:f2:e7:e8:b8:b7:3e:66:ea:
                    d6:9d:a4:6f:10:cb:51:12:56:54:f1:7e:24:dd:82:
                    16:bb:51:21:d0:db:78:28:56:9e:3d:34:d2:5a:ec:
                    88:5b:ea:e8:68:2d:86:cf:b3:93:a2:a4:9c:04:99:
                    11:2d:4c:ae:dc:a5:44:a1:06:e3:ea:04:74:3f:f5:
                    61:95:bf:a1:66:eb:e7:35:93:1f:bd:08:37:c8:a4:
                    3a:72:18:19:98:84:05:e5:91:e8:5c:d7:1b:53:23:
                    28:54:b2:b8:3f:d7:31:3c:1f:98:4b:bd:de:99:5e:
                    09:ed:22:22:22:a1:7f:62:76:1c:2b:38:c9:ad:6d:
                    97:47:b5:4f:58:80:c5:9a:4f:25:5a:60:06:bc:de:
                    52:d5:4e:4f:8b:89:4b:8e:90:77:d2:ad:c5:6f:31:
                    b7:12:39:b1:bf:92:af:ff:f8:d1:da:cd:d7:a9:79:
                    1d:23:e8:17:e2:c4:7e:9b:d5:55:99:c3:07:21:59:
                    2f:cc:10:10:4d:1c:d8:42:4a:fc:fb:d5:19:da:4c:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E8:6A:B8:9D:FB:BF:58:C3:70:32:D1:53:D4:91:4D:54:3D:53:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2370f688-962f-378f-b250-638c1daebac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b4:aa:b3:4c:33:8e:79:a0:d2:17:74:44:a4:dd:84:e5:ff:
         4a:ea:75:51:42:f2:95:ce:0a:0d:b9:a0:29:8a:08:96:a8:8a:
         96:29:42:57:e4:c3:d9:7d:df:49:80:35:02:bc:ea:6b:da:0d:
         d7:e9:b6:9e:68:a4:ee:89:8b:25:eb:45:29:92:96:62:05:b4:
         68:0c:c3:06:be:d4:70:5e:d6:f6:22:aa:7f:34:82:dc:36:0f:
         0d:7d:b3:f3:7a:68:a9:f8:ca:20:69:97:77:98:50:ad:73:d3:
         ad:0e:67:b8:14:8f:12:dd:77:72:49:d7:99:36:b3:7d:c0:a8:
         67:81:f1:c6:57:1e:1d:4f:16:35:7e:7e:79:5f:4d:55:49:8b:
         4e:09:19:6d:bc:7b:4a:49:2e:18:ef:c4:9d:4c:c2:8f:73:b3:
         02:d4:c6:86:f6:b7:05:43:9c:15:f0:f7:0b:f8:ba:85:d6:19:
         77:01:44:0b:f9:ec:88:55:cb:ee:0f:9f:04:ec:a3:a7:19:9d:
         8a:da:8c:a5:f8:67:45:fb:7f:3f:1d:ff:63:11:46:d3:de:9c:
         1b:77:b8:15:6c:d7:c9:de:7a:95:b7:ff:cf:c6:30:cd:e6:5d:
         4e:06:dc:80:5f:0d:a1:8e:d9:6f:77:02:77:c1:f2:6b:6b:91:
         e4:b7:cf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:59:50 2026 by rpki-client