Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d470d9-269d-331b-be15-36865bc8d667.roa
File:                     72d470d9-269d-331b-be15-36865bc8d667.roa (raw, json)
Hash identifier:          PPSVks+gHoNF9Gr+XWa7fsqUXQ6gyOYY/mt+kB5CheI=
Subject key identifier:   38:ED:3F:D5:B8:7D:CB:13:10:E0:CE:C8:07:F0:45:A7:0B:A6:63:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D81005889C392D08D08716660
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d470d9-269d-331b-be15-36865bc8d667.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     396552
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:58:89:c3:92:d0:8d:08:71:66:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=793fb27c-a1df-4680-9ee0-df3037f3ee0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8d:20:55:68:79:29:bf:d2:b5:34:2e:a5:07:
                    41:4b:74:ed:08:0e:b5:ae:2e:df:2f:f0:9e:21:d2:
                    7c:bb:93:6b:e0:1c:20:24:85:59:d4:17:51:87:5f:
                    c8:54:00:d8:ce:2b:f7:d0:91:be:b1:9d:1d:97:44:
                    a7:3b:8a:89:09:c4:06:1f:2e:7a:da:1e:a1:88:04:
                    cf:10:77:cf:1e:1f:09:6d:89:3f:79:61:9e:b9:62:
                    25:d7:c7:72:ce:2c:86:75:ae:72:81:8d:8e:d9:6d:
                    1a:52:66:5f:5c:60:af:f4:ec:fe:db:8b:af:43:9a:
                    9a:44:39:06:a2:77:d3:11:ff:94:ae:34:26:30:b3:
                    f7:59:4d:36:c6:c5:f8:57:3c:a6:25:39:bc:83:e7:
                    69:ae:1d:c6:a4:bb:bd:57:d1:98:41:b5:9a:37:ab:
                    c4:df:93:5d:2b:34:29:18:fa:ca:6f:33:b1:89:57:
                    d6:f5:14:e2:d0:bc:5b:6b:87:f9:f0:55:59:5a:55:
                    27:48:7b:0f:7a:7d:62:c3:f4:e0:97:7c:95:34:aa:
                    e8:92:68:64:6c:79:14:9c:4b:9e:1e:20:36:b3:e5:
                    67:b2:57:56:75:55:49:52:af:99:86:ae:d3:db:08:
                    f0:52:06:fc:20:f5:fd:20:72:bc:cd:d2:b8:f6:dd:
                    ed:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:ED:3F:D5:B8:7D:CB:13:10:E0:CE:C8:07:F0:45:A7:0B:A6:63:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d470d9-269d-331b-be15-36865bc8d667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:fe:39:b2:34:c2:f7:b6:49:4a:6a:38:a9:d9:77:ea:46:4d:
         7c:99:a8:2f:55:9f:9a:04:e2:f2:65:3e:1a:02:4e:ff:c8:7e:
         55:75:1b:da:22:18:ef:ed:64:8b:23:07:55:d4:1f:6b:90:1a:
         0d:ea:2e:1a:df:f9:98:40:4e:1f:5d:50:fd:83:50:bc:34:8b:
         00:01:57:91:aa:83:74:de:0a:3d:95:f2:80:16:51:ba:93:ac:
         d5:b1:10:9b:c6:2e:99:89:bb:85:2a:6e:00:3a:d1:f0:0f:bb:
         70:db:05:bf:cb:6c:8f:f6:18:4b:44:9f:71:64:12:50:05:54:
         51:1d:e7:db:de:8b:8a:da:6d:90:5b:37:6c:9d:42:e7:79:3b:
         63:3d:fc:95:cc:5d:31:50:29:ef:26:2a:c4:29:f5:63:3a:07:
         a4:df:ae:94:e9:04:c5:02:16:ca:bf:fd:fc:22:94:09:48:c4:
         ea:3d:79:a6:9b:ba:63:d3:0e:1c:14:f5:cb:60:3e:11:3a:52:
         6d:49:b4:c8:b1:07:b7:06:a4:86:8e:f8:d6:b7:39:78:5a:9f:
         cd:ed:96:99:85:b5:c7:ec:91:57:d2:b3:e7:d4:65:22:3f:29:
         12:a8:ac:af:d8:b9:8d:7c:66:3d:c5:89:d8:d0:5e:70:ca:ee:
         c0:09:ba:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:19 2026 by rpki-client