Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dabe502e-20c1-3571-8fe8-7a1fff541460.roa
File:                     dabe502e-20c1-3571-8fe8-7a1fff541460.roa (raw, json)
Hash identifier:          vsEZYiAa1W+CK6w9U1gVJ5V6dT0cylmyLx5p7VqTBZw=
Subject key identifier:   F5:46:57:76:FA:19:5C:DB:BA:DE:D6:DE:7F:14:EE:B1:52:92:5C:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D810057AAFC272BF48FBE8F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dabe502e-20c1-3571-8fe8-7a1fff541460.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     36630
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:57:aa:fc:27:2b:f4:8f:be:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=bd0c0d8e-c998-4812-84e0-da45859583c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:08:44:51:1d:34:54:95:cf:d9:c2:3e:9f:
                    59:3a:77:36:f5:bb:f8:11:dd:c9:07:97:b7:96:2f:
                    8a:61:71:fb:01:f5:7a:77:4d:fb:76:81:e8:26:86:
                    54:0f:a8:7d:a3:f2:c4:8a:4e:4d:36:95:ef:28:fa:
                    29:ba:a1:09:6c:aa:dc:63:49:8d:7a:a9:7e:3e:2d:
                    b3:f8:9c:08:1b:c4:b1:b7:4d:b3:2e:42:08:93:87:
                    af:3c:13:e9:e1:f8:38:34:ec:9f:49:04:1a:d9:be:
                    d5:a1:80:01:de:17:2c:2b:94:d7:2b:3d:1f:b9:18:
                    5b:65:77:bd:61:99:95:78:9b:eb:93:94:8e:71:41:
                    e3:3e:b7:4f:86:eb:1b:af:18:6b:e5:61:87:80:cd:
                    af:d2:a0:a7:8a:e4:7a:9e:1b:c1:3b:73:4a:ac:3b:
                    65:69:58:fc:7d:c0:d0:87:8e:62:cb:ff:95:bd:9a:
                    58:8b:c2:2f:df:aa:1b:8a:67:40:f3:9d:bd:62:14:
                    b7:ee:f0:df:6a:bd:48:d2:e6:22:81:45:d7:63:4e:
                    2b:f5:fa:5d:0a:42:44:27:5e:83:f4:b5:d2:0a:7b:
                    a5:28:09:e5:7a:40:a8:d1:62:ec:bc:c1:b2:52:f1:
                    f7:4a:c4:a2:e4:e5:d0:6e:2f:58:1a:b9:e4:66:ce:
                    07:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:46:57:76:FA:19:5C:DB:BA:DE:D6:DE:7F:14:EE:B1:52:92:5C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dabe502e-20c1-3571-8fe8-7a1fff541460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:4d:23:34:df:04:72:97:0a:d3:e7:ce:a9:3f:27:71:39:15:
         40:87:67:09:35:34:5e:dd:79:55:88:86:0b:0f:54:64:3a:48:
         32:18:74:f6:4f:4e:f4:d1:48:0f:26:2a:38:d7:96:6e:b2:15:
         f0:d8:2e:ad:ed:8a:0c:6b:8d:4e:f7:0a:83:aa:14:f9:98:b6:
         13:fd:f7:e9:88:1d:ca:95:fb:ad:cb:93:4e:a4:9f:46:2b:5c:
         ad:c5:0a:88:80:1e:90:d5:c7:2c:e9:6f:af:74:0a:e0:d0:94:
         9d:e8:b5:da:b5:f6:2f:ce:8c:cd:4f:03:ee:17:9a:24:68:a4:
         f4:30:97:cb:4f:4b:23:e5:eb:1d:fb:20:6d:e2:fd:96:b3:51:
         a2:23:1d:88:f8:91:e9:e9:1f:fd:b0:7f:f1:bc:75:21:00:7d:
         79:6a:d7:5c:06:de:1a:2d:0a:90:b5:d3:42:49:1a:06:9b:fc:
         ed:dd:f4:3a:f5:7e:2a:14:80:5a:27:b1:59:dd:43:d5:b8:7b:
         b1:ff:ae:1a:43:71:6c:78:8a:a2:04:d0:49:90:4e:6f:0c:d2:
         cd:60:6e:e4:59:84:ab:c9:9b:6b:7c:2e:71:69:b1:1b:0e:7f:
         a5:46:36:60:6b:92:51:da:ae:f3:e4:e0:cb:9c:fc:e5:c6:3b:
         1b:1f:b6:ff
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BAFeq/Ccr9I++j4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
YmQwYzBkOGUtYzk5OC00ODEyLTg0ZTAtZGE0NTg1OTU4M2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMsIRFEdNFSVz9nCPp9ZOnc29bv4Ed3JB5e3
li+KYXH7AfV6d037doHoJoZUD6h9o/LEik5NNpXvKPopuqEJbKrcY0mNeql+Pi2z
+JwIG8Sxt02zLkIIk4evPBPp4fg4NOyfSQQa2b7VoYAB3hcsK5TXKz0fuRhbZXe9
YZmVeJvrk5SOcUHjPrdPhusbrxhr5WGHgM2v0qCniuR6nhvBO3NKrDtlaVj8fcDQ
h45iy/+VvZpYi8Iv36obimdA8529YhS37vDfar1I0uYigUXXY04r9fpdCkJEJ16D
9LXSCnulKAnlekCo0WLsvMGyUvH3SsSi5OXQbi9YGrnkZs4HcwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPVGV3b6GVzbut7W3n8U7rFSklwJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGFiZTUwMmUtMjBjMS0z
NTcxLThmZTgtN2ExZmZmNTQxNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAqTSM03wRylwrT586pPydxORVAh2cJNTRe3XlViIYLD1RkOkgyGHT2
T0700UgPJio415ZushXw2C6t7YoMa41O9wqDqhT5mLYT/ffpiB3Klfuty5NOpJ9G
K1ytxQqIgB6Q1ccs6W+vdArg0JSd6LXatfYvzozNTwPuF5okaKT0MJfLT0sj5esd
+yBt4v2Ws1GiIx2I+JHp6R/9sH/xvHUhAH15atdcBt4aLQqQtdNCSRoGm/zt3fQ6
9X4qFIBaJ7FZ3UPVuHux/64aQ3FseIqiBNBJkE5vDNLNYG7kWYSryZtrfC5xabEb
Dn+lRjZga5JR2q7z5ODLnPzlxjsbH7b/
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:44 2026 by rpki-client