Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5c8f921-4cb2-39b5-a045-460f43cc1c29.roa
File:                     d5c8f921-4cb2-39b5-a045-460f43cc1c29.roa (raw, json)
Hash identifier:          Cwj6WeYJWiA/tW++F4MKzy4bVbi7pdoI3LAeS4z0MMc=
Subject key identifier:   EF:E5:3F:45:44:A4:A5:D0:A7:1B:7C:D5:01:3C:CC:70:AB:3A:3C:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8100575E8A7121C5DEE91980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5c8f921-4cb2-39b5-a045-460f43cc1c29.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     397203
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:57:5e:8a:71:21:c5:de:e9:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=ecbea4c1-4261-4ce1-b7d3-17c4957ff56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:34:6c:61:cd:4f:55:7b:5c:17:f2:7e:c6:
                    64:77:19:15:04:d3:91:24:3d:62:63:27:a1:93:7c:
                    a8:81:b5:8b:86:6f:c9:2b:7a:41:ba:25:63:9c:71:
                    0c:5e:ed:bd:c6:3b:f3:b8:27:73:bb:40:66:d0:04:
                    d7:bc:dc:80:11:ef:0b:ae:58:18:d7:39:f1:7a:62:
                    c1:53:d5:f1:e0:06:d0:75:67:d1:0f:23:c0:46:f1:
                    9b:de:6b:96:17:dd:a4:e3:0a:cc:0b:95:b2:a5:21:
                    1c:7f:69:3c:ac:83:dc:f1:56:c6:b1:94:20:7f:67:
                    5d:42:1e:db:a2:b5:22:bf:4c:4a:01:7f:3f:ed:a3:
                    57:35:de:37:df:f4:c0:e5:54:7e:22:a0:c5:34:81:
                    d9:99:87:45:34:9a:3b:b3:b7:40:bb:2c:91:d0:0f:
                    5d:f0:28:5c:19:0f:17:3c:59:98:f0:2f:3e:db:92:
                    c8:30:d6:0c:49:b0:8c:e1:b9:cb:17:9a:2f:bc:2c:
                    1d:5f:e4:0b:79:98:73:57:c4:81:78:c6:e2:03:eb:
                    d8:ce:e7:96:ab:65:c0:66:b1:c4:c4:81:af:6c:bf:
                    15:54:63:4e:3e:b0:97:d3:3c:ae:cd:ee:44:8c:0e:
                    d6:f7:cc:87:93:f8:2f:7c:14:29:b9:92:0f:b9:d7:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E5:3F:45:44:A4:A5:D0:A7:1B:7C:D5:01:3C:CC:70:AB:3A:3C:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5c8f921-4cb2-39b5-a045-460f43cc1c29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:d5:0d:1b:6e:01:23:62:60:4b:a1:7e:b9:75:05:40:6d:
         69:f8:7a:3b:0b:25:65:13:8a:95:65:72:3c:09:e2:21:cb:55:
         c3:44:85:25:d6:99:05:e0:ab:d7:84:fa:f0:34:75:16:85:60:
         08:fd:69:7d:c4:46:c2:21:dd:20:53:be:86:08:a6:38:22:c0:
         61:7b:b7:95:88:e8:63:69:47:d7:14:ba:43:78:e8:38:22:74:
         d0:b7:da:9e:80:d8:bf:9f:d6:45:af:be:7d:15:14:d4:2c:3b:
         6c:cc:f4:c3:37:e0:79:ad:ab:07:5d:bd:0d:29:8c:19:32:19:
         ba:5a:a9:6e:d5:2b:59:a1:a1:09:37:25:3c:ed:52:a7:4d:d5:
         c1:19:5d:1e:2e:04:d4:60:37:18:a6:58:d7:0e:03:cd:9a:78:
         57:8f:22:a4:f1:d8:fe:75:9b:79:77:d8:ea:a1:d4:e2:d8:16:
         f3:2a:17:04:e0:4f:e1:02:71:09:24:22:3f:33:e0:d8:09:a9:
         21:af:93:8c:c3:5e:9d:ff:e0:6e:18:70:51:8f:15:41:0a:91:
         14:b1:dd:38:1f:f2:34:17:a0:39:f4:e8:7a:c8:a2:26:7a:74:
         0c:7b:2e:91:1a:7c:f5:bb:b3:a7:05:e0:f4:b0:41:d3:97:cd:
         67:9b:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:25 2026 by rpki-client