Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30866ea6-a4f9-3715-9730-c0c8164b5c66.roa
File:                     30866ea6-a4f9-3715-9730-c0c8164b5c66.roa (raw, json)
Hash identifier:          mbxzqgcn6Z6r7IhwP3ZYLmJh3mBivqm0NXM+20slgZg=
Subject key identifier:   63:62:AC:93:50:1E:69:48:E2:6E:B1:E7:92:7D:70:FA:65:95:AE:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D81005844644690CE2C680800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30866ea6-a4f9-3715-9730-c0c8164b5c66.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     397208
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:58:44:64:46:90:ce:2c:68:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=eda13a94-1594-4832-a96d-bce4cf1f3c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c2:c4:ad:d8:ab:0e:40:40:49:5b:7f:b9:ea:
                    1c:f7:2e:41:91:53:21:25:cf:41:18:50:3e:2a:3c:
                    2e:8b:3e:27:c3:1c:ba:e0:d7:90:a3:6e:5d:52:c6:
                    78:20:d7:3c:32:19:f0:be:7d:20:f1:27:62:fc:17:
                    05:09:25:f2:8a:18:36:52:99:1d:e9:b9:4c:34:c5:
                    c8:c9:52:0b:42:bd:f4:ae:56:ae:c0:51:05:c9:bc:
                    24:0a:07:2c:8a:6d:57:88:03:df:1d:a9:c9:de:35:
                    b6:75:0f:91:06:76:a0:f0:cf:5d:4c:9f:95:d7:bc:
                    da:dc:73:a8:09:55:11:b1:1b:f8:5f:52:9d:a2:dc:
                    b2:04:d0:25:74:a5:72:8e:41:34:45:b8:62:3f:1c:
                    ee:2d:11:20:df:e7:06:21:22:b9:1b:4c:f5:a6:a1:
                    5d:ba:57:fb:45:a0:64:5e:77:7a:44:74:e2:7f:3f:
                    b8:1b:ff:54:b6:59:f6:72:fd:16:a9:28:3d:35:ec:
                    6c:0a:c2:6f:56:ec:79:33:7b:11:13:c5:6a:5f:28:
                    b7:56:23:d1:3a:f2:2d:e5:f8:83:34:20:59:f4:78:
                    b5:1e:1d:a8:2d:00:6e:3d:c8:2a:f0:7e:9a:d2:cf:
                    67:0a:62:3e:31:eb:31:39:6e:cd:cd:92:96:7e:b8:
                    33:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:62:AC:93:50:1E:69:48:E2:6E:B1:E7:92:7D:70:FA:65:95:AE:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30866ea6-a4f9-3715-9730-c0c8164b5c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:6e:3c:94:8f:8a:35:86:f1:8c:a7:85:6b:10:30:55:3d:c4:
         df:43:84:c6:83:e7:f6:bc:c5:bc:f1:06:cd:cc:a9:29:7a:6d:
         71:16:51:7d:a1:15:04:32:2b:29:77:ca:1b:51:b5:e8:ae:27:
         4f:5f:98:b7:ca:32:2e:c6:99:c4:32:30:d1:d0:a1:da:34:6a:
         a9:45:63:76:1f:b8:7d:58:56:3a:6a:c1:3f:db:b4:75:b4:2e:
         fa:35:ff:6a:cf:9d:a9:d4:f3:74:92:37:ce:6e:ad:4c:c5:1e:
         eb:ab:64:2c:1b:27:d8:14:6d:b4:fb:a8:f3:cd:23:49:1c:60:
         4e:fe:b5:6d:36:39:c4:fa:cc:bf:c7:f3:ae:f1:fe:d5:d0:8f:
         86:40:ef:0f:5b:5e:8e:a1:31:0a:36:66:a4:25:51:71:a6:57:
         d2:e0:c3:99:45:1e:b0:f2:5d:95:d3:3c:a5:89:74:2b:43:95:
         52:22:bc:1a:ef:a9:ea:5d:56:50:92:13:a3:db:2d:e0:7f:11:
         8c:77:09:af:14:f5:57:3f:47:ee:b0:74:14:b3:c9:fb:8a:1e:
         5a:0e:bc:43:13:cf:2e:91:c3:ff:2e:3f:68:f1:e7:11:d0:82:
         96:a1:e5:6b:3f:61:c4:af:be:3e:16:ae:88:f6:3f:5d:04:e1:
         a9:da:fb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:57 2026 by rpki-client