Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb3520f-9a8f-31ba-937d-35b1b1636efa.roa
File:                     7cb3520f-9a8f-31ba-937d-35b1b1636efa.roa (raw, json)
Hash identifier:          l3BjDebNqXqtc7woG5r6+o5kjbx2wo67NhgbuwwH+zY=
Subject key identifier:   28:BB:8E:2C:59:6E:E8:8C:A3:79:75:27:14:03:E4:A9:0B:22:B2:43
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A7F13C89055A91C9E74100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb3520f-9a8f-31ba-937d-35b1b1636efa.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     397198
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:f1:3c:89:05:5a:91:c9:e7:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=57768271-cdb5-4768-b5c0-6eea734f89f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:d3:93:27:8c:f5:1a:e1:fe:06:57:43:39:
                    ef:4b:03:fe:be:15:76:80:e3:1d:51:0e:dc:8c:dc:
                    9c:6e:de:4b:9b:5b:47:9e:11:22:ec:01:06:bd:4f:
                    c5:00:2b:a3:7c:43:29:d2:33:53:5d:a1:97:ed:15:
                    97:6f:8c:35:b2:ce:06:4b:64:cb:cd:96:fa:73:35:
                    26:38:a8:ea:48:9a:1e:c4:4b:a9:4e:fb:6f:9b:8e:
                    90:b1:23:95:6b:92:26:42:a0:e0:e1:a5:af:24:48:
                    13:eb:c2:db:a6:ce:06:78:89:7c:7e:93:97:2f:34:
                    f0:fd:2d:f2:69:62:34:2f:93:fc:31:fe:f3:66:40:
                    63:f8:b9:44:e7:d7:94:a2:e1:aa:a0:ca:98:97:f0:
                    db:37:b6:62:36:ae:9a:57:7f:4f:87:bb:09:e2:d7:
                    7f:a3:6b:43:1c:76:16:dd:f5:08:34:9c:c6:c5:f6:
                    0a:2f:d2:19:58:72:37:14:97:b9:b8:56:d3:a4:aa:
                    2a:54:e2:a2:78:e0:83:34:00:d1:7a:e3:35:df:aa:
                    e8:b6:cc:89:10:19:04:d5:90:ed:ab:23:5b:83:8f:
                    2e:cb:d7:7c:25:89:9b:81:c8:14:6f:8c:bd:5b:6d:
                    26:a1:49:c0:27:94:fe:56:89:9c:7f:4c:1c:b6:56:
                    98:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BB:8E:2C:59:6E:E8:8C:A3:79:75:27:14:03:E4:A9:0B:22:B2:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb3520f-9a8f-31ba-937d-35b1b1636efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:30:d8:b2:8b:ca:18:f3:0a:cc:61:ac:84:58:dc:52:de:08:
         15:36:f1:51:86:98:30:4b:6c:64:2c:bc:0b:72:b0:27:9a:9c:
         5a:b6:29:d1:a4:01:98:ac:b8:7d:a3:e8:b9:30:2b:7c:b9:70:
         36:4c:23:05:35:c7:96:1a:f8:dc:0e:cf:42:a7:3f:70:3a:eb:
         8d:48:e6:cc:16:07:8d:9a:90:92:c8:5b:1f:6b:e7:7c:f4:f3:
         64:df:0c:ad:56:ff:f8:57:af:a2:f1:29:51:ce:2c:97:99:c9:
         9c:9b:f5:6c:2d:d1:62:1e:85:48:39:1a:10:21:e3:19:d1:a0:
         e6:26:3e:42:5b:15:28:76:25:db:17:ff:74:99:0c:73:5a:32:
         17:26:a6:d0:fe:6b:d6:13:59:09:b2:35:6d:a6:94:71:86:cd:
         ac:e6:ce:f4:79:de:98:ed:97:9c:ad:4c:15:77:b2:19:a9:86:
         93:51:3c:61:53:38:7c:9e:c9:8a:6c:fa:b3:11:9f:ca:cf:65:
         55:2d:5b:0a:c1:e1:b1:b8:cb:53:76:da:27:41:a8:17:f3:7b:
         60:19:fa:16:ad:38:fa:c5:e9:ce:72:38:9b:76:48:e6:85:79:
         3c:b9:ce:2a:65:9c:b5:9e:4f:c0:bf:bf:35:66:1e:b6:f1:94:
         d5:42:37:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:57:34 2026 by rpki-client