Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa
File:                     9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa (raw, json)
Hash identifier:          zw6/EnSN29U9tyywJTpXuinxeh4fUk+1DUPK7UWgp+k=
Subject key identifier:   54:DF:18:AE:C4:96:7A:4E:72:30:FC:C6:09:1D:F7:02:93:93:09:0F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8100563BF4D4DF5049690540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     396602
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:56:3b:f4:d4:df:50:49:69:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=1b74b11e-3587-49da-af1f-78bc0da4a351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:84:af:8d:e4:3f:48:70:ad:39:d9:59:77:
                    9a:9a:dd:ed:71:c1:8b:01:7d:82:db:5c:05:06:1f:
                    c9:7d:22:b8:ec:7b:97:bc:47:97:76:8c:42:82:0d:
                    c2:43:96:57:8a:e0:0f:c3:12:ff:b1:85:41:3c:ce:
                    32:ce:b3:4a:29:8b:6a:17:64:2a:ff:1d:16:84:9b:
                    c1:9f:19:21:25:f5:55:22:85:de:6e:f7:d2:ba:02:
                    0f:4d:5d:36:62:fa:7e:88:d4:31:96:26:d9:27:5f:
                    b2:cb:ea:ab:f2:8d:41:b6:06:c7:73:3a:79:e1:94:
                    91:e5:d6:52:a7:5f:3f:e0:9f:e3:30:f2:87:3a:5d:
                    d3:34:22:b8:6f:a6:3c:5c:ba:fd:26:c8:3a:0c:14:
                    34:29:74:ff:44:7d:4b:f9:df:d7:75:df:25:6e:7f:
                    08:7c:9a:cc:fe:b4:18:e2:ad:e5:15:82:57:09:22:
                    5d:d0:4b:47:38:7b:c8:eb:f2:6c:6d:c3:26:03:61:
                    d6:09:85:26:2f:3d:d1:02:7b:09:45:02:e0:3d:f3:
                    3d:e3:a6:f3:3d:e9:55:04:8a:b1:07:a7:b5:87:f4:
                    0f:00:12:e7:04:4c:3e:03:ea:21:00:75:3f:74:3d:
                    c0:70:8f:ab:35:c1:6e:d3:7f:23:b9:1d:70:b9:a3:
                    0d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DF:18:AE:C4:96:7A:4E:72:30:FC:C6:09:1D:F7:02:93:93:09:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:51:de:6c:44:c2:89:47:61:ae:09:50:d3:54:89:4e:46:58:
         5b:5f:fb:97:26:5a:9c:4c:57:53:ab:46:79:bb:3b:66:bc:b0:
         c7:93:f7:96:40:57:6f:a9:13:0c:33:d0:d3:05:b0:5b:02:c4:
         57:2e:03:35:11:84:47:9f:f7:60:a4:e8:d0:07:a1:c4:6e:24:
         24:eb:53:ab:e7:86:62:f0:2e:e3:2b:3e:38:10:9f:10:a2:08:
         82:84:7c:19:5e:5f:af:23:bb:a6:32:4d:a6:bd:f6:de:0e:d2:
         2c:eb:3f:1a:c7:61:93:75:cc:ac:cc:eb:b0:82:fa:e7:16:17:
         63:40:94:9e:1f:81:fb:0a:dd:eb:dd:9a:bc:33:f4:3b:69:7f:
         74:e7:61:c2:73:f0:3c:10:5c:ed:83:2f:5f:0f:df:7b:22:d9:
         c6:e9:17:8e:0a:10:a5:98:83:f9:f5:d0:9d:82:73:5c:0a:f4:
         eb:5d:83:a4:cb:73:dd:e8:67:a1:6f:71:4d:f7:90:c6:78:f0:
         70:b9:b4:f1:cb:e9:ca:79:90:3b:02:4d:99:82:6c:ae:04:6a:
         2c:2a:6a:76:db:ee:64:de:1b:cb:76:c0:25:b2:96:3d:e1:ba:
         f9:47:7a:ab:ad:2a:56:7c:72:6d:55:36:bd:70:48:d5:fd:06:
         c6:1f:07:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:21:57 2026 by rpki-client