Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34450fa1-a8b0-3ca6-aabf-4f9ae7ea2d6a.roa
File:                     34450fa1-a8b0-3ca6-aabf-4f9ae7ea2d6a.roa (raw, json)
Hash identifier:          2dwgCANuknm6UZDq7j2LXoA8/uJyG3Hqg/jSpNx9k7s=
Subject key identifier:   69:94:CA:C9:02:C7:5D:57:45:1A:CA:E5:EC:F4:C0:10:3C:95:D9:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE41B2E127F045B59C55EA4E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34450fa1-a8b0-3ca6-aabf-4f9ae7ea2d6a.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     397198
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:2e:12:7f:04:5b:59:c5:5e:a4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=f68ccdb4-7035-4af7-b9e8-9dacc3ec424c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:b6:c7:64:71:76:3d:33:71:44:81:97:77:
                    5b:7b:4d:0c:94:44:1c:08:ef:4d:7d:79:e2:a0:7e:
                    38:8d:c1:3e:45:82:f7:c6:15:5c:d7:03:1b:d2:13:
                    79:20:19:33:a5:69:8a:7e:61:83:b1:22:49:70:ca:
                    8f:dc:a9:3c:6d:cb:76:38:8a:35:1f:85:b7:7b:4c:
                    b1:ff:7e:92:d9:31:db:54:12:91:1f:40:b8:0b:63:
                    54:74:e4:00:7a:94:4d:6e:80:08:b0:d6:fb:92:f0:
                    e1:3f:b6:11:54:97:24:ce:fc:ef:c3:3c:8e:8f:bf:
                    50:79:7b:8a:fc:c9:18:56:8b:25:c9:3d:28:e3:53:
                    44:c9:74:2d:4c:de:fc:ba:87:a0:eb:65:39:d6:fb:
                    cc:45:19:ea:cf:3d:ba:70:69:2f:dd:30:ba:9e:6f:
                    fa:a5:89:86:33:e8:60:fa:49:e2:39:1e:d6:bf:29:
                    1f:c2:c4:69:6b:6b:e9:39:6c:58:88:13:b7:ba:d0:
                    af:1d:2f:4a:c1:39:d0:f4:be:4a:80:af:fa:44:80:
                    74:99:4c:97:a6:9f:3e:22:03:59:44:11:46:d5:2e:
                    32:5d:ed:31:1b:bd:b4:a8:ae:0b:f3:99:7d:2e:02:
                    62:e7:da:7b:90:be:76:2e:a3:ca:1d:50:61:a4:c5:
                    da:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:94:CA:C9:02:C7:5D:57:45:1A:CA:E5:EC:F4:C0:10:3C:95:D9:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34450fa1-a8b0-3ca6-aabf-4f9ae7ea2d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:66:7e:a4:63:97:df:97:2f:31:86:7d:47:b1:14:f3:66:74:
         a1:fd:ff:ad:2f:c7:9a:b7:fc:d8:68:8a:d7:cc:b9:d5:c0:6e:
         78:b7:7b:5d:3c:0c:a8:35:58:b3:76:3d:2a:1e:f8:77:10:95:
         ad:51:80:31:76:b9:8b:1d:bc:13:bc:74:5a:b4:3a:1b:c1:60:
         f2:a5:fd:fe:7e:e8:21:d1:26:b4:d1:60:ca:6e:bf:a3:56:cc:
         16:c0:e0:d4:4c:3f:67:e2:f7:0f:9a:bc:7c:2a:ae:2a:9d:8b:
         4b:1d:c0:f6:a8:a1:4d:3e:b6:cd:b5:ed:f0:c3:de:da:c9:1a:
         b8:b0:4e:8f:bc:b5:fa:52:cd:68:91:78:10:23:47:92:78:4d:
         dd:ca:de:45:58:b9:2d:b8:7a:2e:fb:53:48:d7:6a:cb:ac:0c:
         0f:68:50:ac:a9:50:4b:65:5f:73:97:04:1b:17:59:33:ea:29:
         aa:71:80:2a:d7:92:eb:89:02:43:23:55:80:75:97:5b:5b:f7:
         ba:6e:f1:1f:0d:47:92:1d:e4:a1:79:1f:af:82:ca:39:8f:ff:
         ad:7b:0e:6e:3b:b2:34:ae:66:d4:89:00:07:1f:8c:65:e3:78:
         6e:93:66:ca:53:d4:db:36:c7:0b:60:f4:a6:ba:58:29:ce:0a:
         f2:11:cd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:42 2026 by rpki-client