Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c58ae9ff-3ba8-3cd7-907a-b3af4cea8a2f.roa
File:                     c58ae9ff-3ba8-3cd7-907a-b3af4cea8a2f.roa (raw, json)
Hash identifier:          kpPfjcx2KaUcwk433pbFk44Wv7FBAFujzIf2YCq6XB4=
Subject key identifier:   E0:D5:E2:C3:5D:07:B8:B0:C3:2A:33:47:98:72:B5:C3:6E:6F:1F:1B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8100566A0719D6612A27CD70
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c58ae9ff-3ba8-3cd7-907a-b3af4cea8a2f.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     396560
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:56:6a:07:19:d6:61:2a:27:cd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=81949e10-1966-4ed0-861d-cfb1329255f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:07:ca:7e:c3:96:82:3b:48:aa:4a:93:56:
                    f1:0f:80:39:1e:94:44:3f:50:46:c3:90:12:b3:04:
                    ca:32:b5:f5:e7:cc:89:7a:02:d3:c4:5c:9b:c7:07:
                    8d:53:73:69:ee:7c:4a:d7:b0:b8:de:6c:3a:b7:8e:
                    cf:05:0b:1a:8d:10:c2:fd:8e:3d:34:f7:83:5b:27:
                    04:48:84:11:70:c0:de:dd:3b:52:64:46:b1:ae:ce:
                    73:8a:84:81:64:f7:49:68:6b:cd:31:7a:8a:4c:a1:
                    16:dc:ce:1b:26:30:1e:d3:ea:43:7a:c7:42:6b:56:
                    ac:3f:bb:46:58:20:98:4b:03:a6:8c:0a:d3:47:f7:
                    69:4a:1f:c8:08:d0:6a:4e:06:e2:f2:12:4f:47:65:
                    92:b9:05:bd:4a:45:df:e3:40:24:ec:c4:03:33:f3:
                    28:64:b8:78:14:ee:df:10:d8:83:d1:e2:c9:a6:93:
                    6b:5d:9a:d1:c7:b0:98:0f:2b:ee:da:fd:80:4b:27:
                    1c:5a:f9:da:7c:ba:6d:e5:c7:9c:bd:7a:0e:a6:0f:
                    3a:12:83:0a:c7:47:21:5c:78:02:42:94:bc:1f:90:
                    d0:a7:25:dd:bc:6c:8b:db:86:d2:12:be:ce:e8:92:
                    c4:ce:97:bf:be:86:5a:f2:b2:33:94:fe:aa:e7:5b:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D5:E2:C3:5D:07:B8:B0:C3:2A:33:47:98:72:B5:C3:6E:6F:1F:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c58ae9ff-3ba8-3cd7-907a-b3af4cea8a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:0f:db:18:6b:6d:b8:2f:33:e7:9d:77:74:74:17:68:fb:83:
         1c:b1:97:3b:b6:96:2e:8a:a4:33:73:cd:e5:ce:11:b2:79:e4:
         7d:29:61:ef:73:0d:5d:b2:26:39:fc:f1:01:80:22:67:4a:9a:
         23:f4:54:ca:46:e3:a3:18:51:9a:e8:e9:75:32:81:52:ec:5e:
         77:2d:1a:38:14:8c:76:61:90:c5:5b:da:46:90:99:d2:52:31:
         0e:c4:a5:09:a4:a0:5c:31:94:b5:5e:53:ba:4c:2f:dd:1d:51:
         55:ff:d7:e8:96:ed:24:a2:26:47:62:0d:6f:08:39:92:63:34:
         7f:b0:84:41:44:9f:34:a7:1b:56:6f:ef:4a:d7:73:03:71:08:
         15:d3:7c:0f:2a:ec:37:73:4c:9c:0a:4b:79:0e:11:0c:39:97:
         d3:f0:3f:1b:43:74:14:b1:46:55:48:8a:5e:1a:c5:49:3f:4f:
         46:05:11:23:68:8f:3a:62:91:3f:ba:ea:f5:15:ee:28:8e:4e:
         67:b8:77:01:ba:64:98:58:fa:26:54:c6:b6:a2:3f:ce:8f:51:
         47:8a:6d:25:28:2d:13:0e:4b:cd:83:1b:87:bf:00:b3:0e:4f:
         13:b0:97:bb:dc:4b:4c:3d:52:aa:6b:cc:cb:43:61:85:e9:7c:
         55:bf:dd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:47:01 2026 by rpki-client