Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/833474d6-ce4c-3227-978b-99e2e87c6211.roa
File:                     833474d6-ce4c-3227-978b-99e2e87c6211.roa (raw, json)
Hash identifier:          9GTkA/l0g4herq7jobPvzMaYZkK8NJqiLyq5KOKS5Lc=
Subject key identifier:   94:75:92:E0:1D:8E:C9:CA:49:07:E0:94:36:27:A9:71:CD:21:25:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8100587EF2139D65F12CC780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/833474d6-ce4c-3227-978b-99e2e87c6211.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     396540
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:58:7e:f2:13:9d:65:f1:2c:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=717d0557-679d-45e6-b27f-bacb215b351c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8d:7a:83:52:f0:a7:bd:58:2a:c1:ae:b5:60:
                    28:7a:d6:38:1d:d9:84:dd:3e:c9:b3:8d:7a:f9:8c:
                    c9:75:58:c2:e2:55:db:76:e9:7e:3d:0b:c3:e2:5d:
                    ea:7d:dd:f8:28:e6:d2:33:19:40:e8:d1:52:18:92:
                    9d:4b:4b:2d:29:78:1d:2e:c8:5a:b4:cb:c5:25:68:
                    cb:d7:9b:f8:59:fa:d7:d7:cc:92:b7:8e:81:57:b2:
                    46:13:d7:d7:d7:41:b0:75:c9:e5:6e:85:01:55:66:
                    78:19:ca:21:a3:65:c7:fd:86:e0:96:16:95:56:77:
                    09:09:28:1c:ea:92:e4:a9:86:19:6e:40:93:93:70:
                    94:73:63:64:fd:13:8b:32:78:54:bb:a8:79:a6:04:
                    12:4a:02:6c:83:3f:ff:ea:fb:c5:8f:38:9e:90:4e:
                    a6:44:bc:75:7e:8d:0e:6a:58:2b:b9:23:c9:ad:e3:
                    b1:93:c7:e9:ef:7b:62:e1:5a:3e:09:2d:f3:7b:85:
                    ed:91:61:bb:6f:83:32:87:0d:0d:fa:95:e8:98:6b:
                    f6:e8:55:dd:2f:ff:e6:6c:49:8e:6c:77:76:40:23:
                    ae:ca:8d:14:fc:86:71:ca:79:2e:56:6e:a8:41:b7:
                    19:aa:f3:57:e8:d9:f4:10:5d:cf:7b:20:6e:c2:23:
                    51:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:75:92:E0:1D:8E:C9:CA:49:07:E0:94:36:27:A9:71:CD:21:25:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/833474d6-ce4c-3227-978b-99e2e87c6211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b5:c6:1e:86:fa:26:19:3a:70:bd:5d:b3:72:3a:ff:be:89:
         99:50:1b:67:9b:e8:fd:d0:50:e8:6c:c7:d1:e3:e4:a0:f3:a6:
         5b:94:7b:ac:d7:fd:c1:f7:84:b9:5d:3f:e5:9c:74:15:a4:22:
         e9:06:03:71:d6:25:a6:b0:8f:9c:ef:28:8b:93:70:24:e0:5d:
         30:0f:23:9b:7f:50:e6:35:b0:be:46:51:b7:c3:9a:13:98:4f:
         52:ca:0d:4b:17:bf:9e:02:e6:fa:03:48:2d:d7:75:c3:52:56:
         92:93:45:49:d4:a5:5d:aa:02:e5:fb:85:49:58:63:8f:f6:46:
         19:14:db:c7:ea:1a:85:3d:2c:24:8d:5a:6a:93:c9:06:ab:5a:
         74:b4:27:4c:1a:15:12:b6:5d:24:b6:1a:d3:3c:ea:b3:31:14:
         68:c4:c7:c0:57:c1:93:85:30:d0:47:00:07:97:08:7e:6f:58:
         b9:43:29:4e:16:e7:88:5d:d7:04:ad:b1:a8:cf:0b:98:2e:18:
         30:6d:b0:8b:a4:90:a6:d8:17:df:ac:15:3e:2c:fa:53:d6:5c:
         88:88:72:57:55:ff:e0:b7:87:3f:a4:09:54:6e:46:47:3b:ac:
         0d:69:76:ea:e3:91:f2:53:43:23:02:8c:f0:60:54:c0:84:33:
         89:a8:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:04:24 2026 by rpki-client