Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23b0162-ede9-30e1-8539-5ca5505b2507.roa
File:                     e23b0162-ede9-30e1-8539-5ca5505b2507.roa (raw, json)
Hash identifier:          UIi2O+5GTDPh+93JtDMgyUZWaCJxgEA7qahPHHhgj7U=
Subject key identifier:   95:0F:73:F8:24:FF:8E:84:AC:14:42:F1:B9:D1:DE:29:8B:59:83:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A7F227490B75982ED7E180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23b0162-ede9-30e1-8539-5ca5505b2507.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396549
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:f2:27:49:0b:75:98:2e:d7:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=7fb91db4-1187-4467-9730-ead3c06ded08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:ff:8b:c9:8e:ee:82:cd:11:1d:b7:1a:f8:
                    62:7e:bf:e7:7e:a4:1d:86:0a:df:18:69:f2:bb:ef:
                    eb:d5:5b:2c:48:98:eb:ac:52:5f:f9:4f:95:6b:73:
                    d8:a1:a0:fd:cf:9f:4b:bf:bb:b1:ec:de:18:b9:73:
                    20:19:26:e6:2d:62:c8:e6:31:70:40:0b:e0:6e:ad:
                    35:ee:63:dc:66:5d:c9:87:22:ad:14:a6:5c:c3:77:
                    cf:23:09:a8:3c:9d:98:34:f7:f2:75:7b:a9:0f:b8:
                    39:a9:4d:0c:f9:e9:07:7d:42:c2:5d:8a:c6:a6:f6:
                    b4:a3:3f:25:3f:40:f5:65:83:c3:65:62:2c:7e:77:
                    a3:ee:21:48:ed:69:08:01:4f:2c:f3:85:a3:08:5f:
                    05:42:34:8e:0c:45:61:bc:43:6c:16:67:04:19:9c:
                    f6:0f:c7:69:5e:d6:11:f3:31:a6:8e:cb:37:0d:e6:
                    d2:06:4c:b2:00:12:b9:93:91:13:89:dd:39:2c:e5:
                    e0:81:6b:9a:7a:8e:f1:43:b1:d7:fa:17:17:ce:c7:
                    ff:9d:b4:b7:31:98:80:14:9d:a9:43:4f:2c:be:fe:
                    38:cb:75:ec:97:a7:e4:d4:cc:cd:5e:85:7e:89:9e:
                    16:b6:8f:d0:01:63:13:64:17:85:28:88:9e:dd:a5:
                    3f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0F:73:F8:24:FF:8E:84:AC:14:42:F1:B9:D1:DE:29:8B:59:83:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23b0162-ede9-30e1-8539-5ca5505b2507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a3:d8:e7:5a:ef:c7:b9:a7:68:85:e1:c2:65:91:45:fd:ba:
         1c:d3:17:2c:4d:d4:fa:d4:41:84:37:04:66:76:ba:7c:40:35:
         49:76:43:9c:3b:88:75:99:c9:4c:c4:91:97:4a:f5:4c:d6:ee:
         87:24:e7:3e:11:90:76:8b:d5:58:f5:32:ac:85:e3:d8:a1:97:
         f3:80:81:9b:93:dd:8f:09:95:18:2c:4c:87:ec:05:41:cd:04:
         cf:77:db:66:1a:a3:4a:da:98:cb:b8:98:4e:10:2a:89:cd:d1:
         3d:8f:b6:4a:23:98:50:5b:d8:28:37:aa:0f:a9:35:15:aa:de:
         59:db:fd:73:8f:61:00:f9:d1:ee:b3:1c:64:73:5e:ee:1e:47:
         a8:0e:36:b1:7f:74:c7:e3:f7:79:5f:93:36:f8:47:c7:83:98:
         31:04:86:af:83:e9:cb:53:7d:78:af:23:3f:51:4b:a7:e4:ae:
         b6:6d:5f:79:83:e3:99:c3:a4:ef:21:2b:d8:3f:9f:49:0f:af:
         c7:3a:3e:ce:56:ce:e6:66:09:c8:15:64:18:8a:5f:2b:91:8d:
         e6:42:c6:b2:89:41:9d:81:80:12:6a:bf:85:2f:38:82:83:fc:
         61:1f:a9:40:94:d0:c7:35:12:0b:64:73:e5:0f:1d:33:20:82:
         04:b8:2f:94
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp/InSQt1mC7X4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
N2ZiOTFkYjQtMTE4Ny00NDY3LTk3MzAtZWFkM2MwNmRlZDA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+f/i8mO7oLNER23Gvhifr/nfqQdhgrfGGny
u+/r1VssSJjrrFJf+U+Va3PYoaD9z59Lv7ux7N4YuXMgGSbmLWLI5jFwQAvgbq01
7mPcZl3JhyKtFKZcw3fPIwmoPJ2YNPfydXupD7g5qU0M+ekHfULCXYrGpva0oz8l
P0D1ZYPDZWIsfnej7iFI7WkIAU8s84WjCF8FQjSODEVhvENsFmcEGZz2D8dpXtYR
8zGmjss3DebSBkyyABK5k5ETid05LOXggWuaeo7xQ7HX+hcXzsf/nbS3MZiAFJ2p
Q08svv44y3Xsl6fk1MzNXoV+iZ4Wto/QAWMTZBeFKIie3aU/RwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJUPc/gk/46ErBRC8bnR3imLWYNeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTIzYjAxNjItZWRlOS0z
MGUxLTg1MzktNWNhNTUwNWIyNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQASo9jnWu/HuadoheHCZZFF/boc0xcsTdT61EGENwRmdrp8QDVJdkOc
O4h1mclMxJGXSvVM1u6HJOc+EZB2i9VY9TKshePYoZfzgIGbk92PCZUYLEyH7AVB
zQTPd9tmGqNK2pjLuJhOECqJzdE9j7ZKI5hQW9goN6oPqTUVqt5Z2/1zj2EA+dHu
sxxkc17uHkeoDjaxf3TH4/d5X5M2+EfHg5gxBIavg+nLU314ryM/UUun5K62bV95
g+OZw6TvISvYP59JD6/HOj7OVs7mZgnIFWQYil8rkY3mQsayiUGdgYASar+FLziC
g/xhH6lAlNDHNRILZHPlDx0zIIIEuC+U
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:58:43 2026 by rpki-client