Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86663264-d0be-3b18-8387-15c4db542f5d.roa
File:                     86663264-d0be-3b18-8387-15c4db542f5d.roa (raw, json)
Hash identifier:          LBoczpjqyXlqtEN3k92ankft7l5/LDcl/DNCyZblEKU=
Subject key identifier:   D8:D8:90:1E:55:EF:7A:CD:24:77:6D:55:EE:BF:72:13:F6:AE:0F:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D810058CD883A2DAD66B25400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86663264-d0be-3b18-8387-15c4db542f5d.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     396589
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:58:cd:88:3a:2d:ad:66:b2:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=7cc294b3-611a-4d6e-a251-1fa074ccf1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:61:c7:30:93:59:bd:c5:ff:c2:09:54:3b:
                    00:cc:c6:31:79:2c:fc:19:4d:b4:c3:1b:c5:b7:09:
                    5c:9b:47:1a:7c:4c:ff:f9:e0:7e:c2:3e:6f:17:63:
                    75:04:67:df:58:5e:14:45:56:d0:19:ec:08:aa:f1:
                    17:3c:99:42:71:4c:0c:fa:d2:0c:1c:88:ce:ad:6f:
                    63:25:e8:04:11:f5:01:f9:e8:d1:e5:ae:af:cd:c4:
                    92:0c:37:dc:c8:cb:88:7a:e1:23:4d:de:a3:e7:1b:
                    58:13:d7:f6:99:f8:d9:cf:08:99:8d:2f:a6:a8:66:
                    d4:56:8a:da:ca:28:fb:2a:31:81:0e:b1:c4:87:8a:
                    2b:94:1a:75:78:05:e4:c2:61:0a:2b:a3:63:d3:d0:
                    5c:ef:ab:62:ba:f8:27:b4:89:e3:2d:50:f8:18:77:
                    31:da:06:40:db:81:d7:c7:f9:ec:a5:a1:5c:ff:34:
                    56:8d:b2:0c:61:76:f6:79:4d:6f:16:0d:72:7b:3b:
                    e0:28:58:b2:39:45:68:35:ca:4d:f9:8a:c2:ef:7e:
                    b1:f6:96:e5:6b:e2:05:16:c6:d2:ef:7c:ec:49:a2:
                    a6:72:ac:cc:89:5b:ef:84:c9:ee:06:c9:ed:17:64:
                    ca:90:52:fe:b6:9b:8c:08:87:3d:c1:ce:72:d5:8d:
                    8e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D8:90:1E:55:EF:7A:CD:24:77:6D:55:EE:BF:72:13:F6:AE:0F:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86663264-d0be-3b18-8387-15c4db542f5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f6:a8:20:c7:32:00:eb:27:6d:0d:3a:a3:1f:4b:4b:67:04:
         2a:3b:0c:05:c7:65:cc:71:ce:4a:2e:a9:f8:69:95:08:67:8f:
         bb:69:00:5a:56:5c:ff:f5:11:11:6f:e7:e4:2f:7a:bc:88:b0:
         f3:16:4e:d3:02:d5:78:37:6d:77:20:f6:df:9d:de:20:66:d9:
         2c:ab:7b:c9:19:5c:89:e6:9b:e1:38:08:f0:77:cf:77:0b:d3:
         a0:6f:a4:f4:8b:e7:d6:54:09:a6:12:64:d7:a9:40:a0:77:bc:
         60:41:6d:8a:c5:21:ac:70:a8:ae:cd:98:4e:c1:a5:c8:87:6a:
         a2:84:19:07:37:80:8e:9d:68:4c:d1:7e:94:96:b9:7a:52:dd:
         d2:b9:69:07:d2:26:ae:70:e6:56:a5:5d:74:30:57:15:74:e7:
         fe:10:57:24:8c:3a:6a:48:d6:96:02:b0:86:c4:c4:ad:28:88:
         74:64:61:e8:1d:e0:32:d6:3b:24:cd:33:56:e8:9f:5a:1c:cc:
         d9:4d:16:e4:0b:b8:1c:da:db:5c:13:4a:32:2b:7d:cb:14:fb:
         2e:a3:88:73:8e:2e:26:2a:de:b0:e3:71:12:f9:be:4c:f9:b6:
         83:13:a6:ce:39:0b:8a:58:2b:e8:e2:06:94:f9:1e:33:0e:e3:
         7c:29:55:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:27:53 2026 by rpki-client