Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0ebc216-48be-39e5-b678-cde5700d2f3d.roa
File:                     f0ebc216-48be-39e5-b678-cde5700d2f3d.roa (raw, json)
Hash identifier:          L7WbsKGk4DQ5yc2cRiWr8au3daLUry4JV3n9pqc0U2A=
Subject key identifier:   8B:60:D3:66:FB:AF:5A:7D:5F:F9:2A:7D:7B:E0:DE:60:DA:86:A8:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D81005647E78221F058A71900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0ebc216-48be-39e5-b678-cde5700d2f3d.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     396567
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:56:47:e7:82:21:f0:58:a7:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=113f44fb-4d40-48cc-b2bb-53b604e0e0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:68:af:f6:5a:fc:dc:ea:cf:a3:27:b6:e8:9a:
                    9b:43:c2:f4:ed:8d:15:26:3e:7e:e3:e8:d6:4b:bd:
                    7f:9d:dc:eb:59:6e:1f:91:24:99:a9:0e:12:8d:2a:
                    2f:3a:94:64:3d:36:bc:e6:65:0d:3a:91:c6:c2:25:
                    ee:31:8a:28:50:e8:62:eb:e2:cb:72:1e:64:d8:03:
                    2c:18:16:00:bd:b4:ee:34:42:09:d4:43:72:89:39:
                    06:4e:40:3e:c6:89:cc:6d:82:0b:21:c7:7e:85:ff:
                    1a:a0:08:8c:c5:bd:ed:b9:62:13:c6:c8:71:b8:27:
                    6c:16:5a:a6:7e:d6:3f:cb:b9:33:ce:c2:c4:01:99:
                    e7:b0:d7:da:1c:67:f9:94:86:19:b0:d4:6f:94:63:
                    a6:bc:d2:36:58:44:63:30:2e:50:4b:32:98:27:93:
                    fe:c0:b8:83:1e:f6:03:25:d9:33:71:c3:8b:50:ab:
                    31:8c:96:55:cf:ec:68:e4:5f:3b:1e:13:09:2f:10:
                    f5:76:0c:25:78:91:fd:c9:3f:b3:21:04:b1:04:a5:
                    3a:23:80:2e:28:f2:e1:ca:30:f9:60:e1:2b:c3:24:
                    ac:3e:fe:b9:df:ab:4d:10:8b:b2:f9:55:ad:35:d8:
                    73:c7:f4:b5:89:0b:2b:62:2d:2f:a0:72:6d:1f:27:
                    19:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:60:D3:66:FB:AF:5A:7D:5F:F9:2A:7D:7B:E0:DE:60:DA:86:A8:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0ebc216-48be-39e5-b678-cde5700d2f3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:18:4c:31:19:6b:37:aa:b1:42:bf:4b:8f:1c:fd:87:82:5d:
         ba:e3:05:07:f6:d2:02:7a:db:45:63:ee:f2:7a:41:42:c9:91:
         42:c4:93:ca:15:ba:83:23:21:90:d5:f0:bf:60:9e:af:57:31:
         03:1e:1e:f1:b2:6b:78:b0:61:c3:8e:10:dc:ae:9d:60:34:c6:
         91:2f:c5:71:3a:aa:5f:31:13:ae:9d:67:a6:0b:91:8d:9c:bf:
         b6:30:51:02:19:54:85:82:2e:1b:c4:56:1a:95:f9:e9:a7:cd:
         f6:4e:cc:ff:f3:62:a5:d0:47:6b:86:66:c6:ae:f8:a4:bf:77:
         af:30:1e:19:6d:b1:20:63:05:08:0c:87:cd:be:87:91:02:d1:
         29:7f:64:11:b4:4b:45:11:98:1c:78:c5:69:b1:96:22:82:a4:
         a3:5c:13:81:2c:13:76:8b:f4:10:27:f5:9d:95:07:7e:8c:18:
         d0:9c:58:7c:95:0d:dc:e8:92:89:08:6f:ce:ee:8b:5a:d8:a0:
         01:8d:77:11:81:5d:40:6e:c9:cc:1f:ff:3b:ec:de:d9:69:17:
         c6:82:1d:71:8f:7c:3f:eb:94:01:e9:03:ee:9a:1e:d6:ef:d5:
         8a:4b:2d:7c:fb:eb:4e:8f:94:b6:85:d7:b6:6c:c6:5b:4a:71:
         8a:af:3b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:51:02 2026 by rpki-client