Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988a3538-be61-39c9-a1cb-f7b48e5b1200.roa
File:                     988a3538-be61-39c9-a1cb-f7b48e5b1200.roa (raw, json)
Hash identifier:          8McRVstFGtAVhhh6KmKZ9SOYydV07IZAf6jPM+VH3lI=
Subject key identifier:   3F:C1:68:0C:88:8E:76:85:72:8D:B9:63:2A:99:7B:EF:33:3C:6E:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D810059348D529B18D3CAC600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988a3538-be61-39c9-a1cb-f7b48e5b1200.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     21313
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:59:34:8d:52:9b:18:d3:ca:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=dd0b8a50-27d5-4c90-91cd-c8c468c369ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:27:f0:44:c1:db:c9:4b:b5:4c:ed:6d:90:4a:
                    44:df:be:94:84:eb:40:53:e0:11:d4:a9:19:08:85:
                    c1:90:7d:d1:64:b2:7f:80:36:0c:31:45:84:1e:3d:
                    76:c6:70:02:01:b4:1d:4f:46:6b:3a:68:4d:61:2c:
                    7e:f1:98:f4:6a:fd:b1:e9:04:38:e8:47:15:db:09:
                    f4:a3:e9:63:5d:f9:92:0a:f4:a8:7c:73:05:cc:89:
                    58:fb:6b:fb:8a:4f:22:bf:e7:2b:17:f6:28:dc:08:
                    54:5c:7e:ee:f5:d9:05:7c:67:38:d3:67:24:88:c2:
                    03:01:73:50:1d:29:2e:59:af:6a:d1:48:32:9a:f7:
                    c3:84:8d:e3:f9:c1:53:fa:f3:a6:fa:47:4e:4d:39:
                    1a:d0:06:a4:13:96:55:c9:b5:9e:0e:a1:c7:83:f7:
                    ab:71:22:bb:65:5a:a8:32:97:70:2b:bd:95:d7:e8:
                    bc:27:a6:bf:59:f6:ea:52:be:e3:da:4e:a4:b8:43:
                    d6:a2:e3:60:2d:e8:55:20:04:5d:26:19:1a:2a:4d:
                    65:90:cf:5e:be:d4:0d:b7:59:00:ea:24:98:44:0f:
                    cc:3b:bd:69:c4:7b:c3:f2:33:d3:82:12:2f:ce:39:
                    66:83:d9:37:9e:fa:9b:8f:84:c0:bd:b8:ee:80:bf:
                    86:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C1:68:0C:88:8E:76:85:72:8D:B9:63:2A:99:7B:EF:33:3C:6E:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988a3538-be61-39c9-a1cb-f7b48e5b1200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:2d:d4:57:c7:40:21:87:6a:91:78:12:48:a4:53:08:9b:
         8e:03:ab:de:9c:f7:13:c4:76:36:14:ed:da:56:7c:9b:ce:75:
         e9:28:81:3a:ba:1e:86:60:d2:5a:81:de:9a:3b:81:20:c1:d4:
         03:d9:42:67:5b:94:7d:99:48:c4:4d:cb:e1:9f:55:56:04:16:
         38:ab:46:24:c4:4a:41:a7:c0:bc:ca:54:ae:41:d1:20:a9:a2:
         dc:94:48:3d:a1:5d:65:06:c8:c6:e0:34:9d:41:63:11:fb:72:
         b5:10:62:ce:85:78:ed:4c:99:05:e6:ae:81:8f:e9:ee:95:84:
         6e:25:fe:5b:61:64:87:02:34:12:a7:4f:bc:50:26:e0:80:ea:
         cc:13:45:12:8d:79:ee:89:ea:ee:6b:3d:c7:f7:f2:fe:c4:77:
         55:b2:ba:4e:2b:89:3c:93:3f:11:d4:2d:0d:e6:31:25:ca:7c:
         51:91:1e:42:6a:e6:06:08:ba:e6:6a:31:f8:32:b1:77:7a:2f:
         69:1b:14:87:2c:d4:4b:24:08:41:47:bf:36:45:f4:25:bf:74:
         27:af:eb:39:72:30:5c:f9:e5:7d:7f:6d:e8:6b:e7:20:59:c5:
         7e:8e:8d:92:46:62:7c:cb:21:f7:89:f2:8f:8f:59:e5:c1:10:
         3a:84:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:48 2026 by rpki-client