Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa
File:                     f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa (raw, json)
Hash identifier:          13Es/0qgcDDUL2lNNa8NUxjH/eKXu/Uws+OMyuzyspY=
Subject key identifier:   7F:9F:8E:FE:43:5D:5C:29:04:F3:14:00:B3:07:EB:D9:FB:A1:25:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D810056967B354FE2B600E7F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     396603
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:56:96:7b:35:4f:e2:b6:00:e7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=15ca7326-2e91-4513-9321-7d972b0cdc6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5a:22:11:61:c2:8c:71:89:16:cc:28:b9:39:
                    9d:a3:32:a0:bf:ef:99:6b:87:47:19:58:ff:7f:06:
                    78:70:c7:ff:8b:17:5f:dc:3d:70:d9:c7:a8:2c:ff:
                    39:29:7d:b9:2e:7d:a1:45:fc:4f:2a:ed:ea:1f:1a:
                    08:ca:0d:9d:1f:20:3a:6c:08:e1:74:34:bb:b4:a7:
                    c5:00:be:4f:5d:ff:56:c6:8c:dd:00:64:9b:7b:bd:
                    37:ab:fd:a2:70:ca:38:c3:a2:8a:85:f3:51:e5:eb:
                    84:eb:c9:f0:1f:60:dc:a0:82:35:14:ef:03:32:9c:
                    a8:9e:68:ce:f3:ff:a4:96:92:15:85:26:ee:c7:3a:
                    0b:8a:72:59:31:38:92:e5:3e:84:8d:29:e3:77:56:
                    29:52:63:1b:c9:e7:0d:99:2f:3f:cf:d5:8b:3e:1c:
                    77:ac:2d:f9:ab:22:93:1c:11:e4:e3:e3:f7:7b:ed:
                    33:fb:fd:86:0d:8d:3e:25:46:a2:58:1f:d8:b0:a4:
                    0c:ae:f6:96:0b:a2:ac:86:ff:59:f0:10:70:d3:f8:
                    be:df:08:8a:be:f4:3e:3c:8f:c8:ab:ac:ea:20:4e:
                    6a:e1:4d:db:43:86:35:92:10:21:aa:cf:9e:b7:a8:
                    16:1b:f6:17:73:f2:05:fa:3c:82:cd:b2:17:13:82:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9F:8E:FE:43:5D:5C:29:04:F3:14:00:B3:07:EB:D9:FB:A1:25:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:6f:f0:0c:07:8c:f6:39:22:8f:50:65:6f:5b:c5:7a:97:a9:
         2e:bb:73:e7:dd:b4:40:15:f5:54:63:f4:fd:a7:f8:b2:17:e7:
         fb:30:04:a1:c4:f7:7b:ac:92:b4:46:de:e8:c3:af:db:16:49:
         72:ed:67:ff:34:54:cb:ef:ae:43:e1:a5:a3:75:57:fc:8a:de:
         58:c7:f1:87:a0:85:e5:27:39:0a:5a:65:27:d7:35:b3:fa:95:
         b9:b3:73:16:88:11:16:a2:6f:8f:91:e4:ef:c4:ea:96:0c:ae:
         4e:22:0e:fa:e3:1e:d5:1c:14:c8:4e:51:0a:51:08:e2:ff:60:
         17:10:82:54:f7:11:d5:86:45:2f:2b:6a:57:c2:80:d6:0c:6b:
         7e:7d:40:98:ad:94:34:c3:ac:00:69:f2:77:4b:46:5f:27:ba:
         a8:f7:aa:9e:8f:e5:fd:b4:8a:94:9e:b2:76:49:b3:38:87:36:
         ce:95:12:03:d2:53:12:af:10:13:b9:4b:0b:50:23:90:c6:13:
         d1:58:5a:b6:52:1d:67:5c:f5:10:cf:93:fc:74:a4:fe:ca:47:
         e5:73:9b:70:e8:1f:01:e6:7f:02:b1:b4:91:42:92:1f:91:c2:
         56:17:93:7c:d3:09:b6:19:b6:58:67:5a:c7:d7:30:8c:8d:e2:
         c5:c1:7a:8b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BAFaWezVP4rYA5/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
MTVjYTczMjYtMmU5MS00NTEzLTkzMjEtN2Q5NzJiMGNkYzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVoiEWHCjHGJFswouTmdozKgv++Za4dHGVj/
fwZ4cMf/ixdf3D1w2ceoLP85KX25Ln2hRfxPKu3qHxoIyg2dHyA6bAjhdDS7tKfF
AL5PXf9WxozdAGSbe703q/2icMo4w6KKhfNR5euE68nwH2DcoII1FO8DMpyonmjO
8/+klpIVhSbuxzoLinJZMTiS5T6EjSnjd1YpUmMbyecNmS8/z9WLPhx3rC35qyKT
HBHk4+P3e+0z+/2GDY0+JUaiWB/YsKQMrvaWC6Kshv9Z8BBw0/i+3wiKvvQ+PI/I
q6zqIE5q4U3bQ4Y1khAhqs+et6gWG/YXc/IF+jyCzbIXE4LofQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFH+fjv5DXVwpBPMUALMH69n7oSUTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjJiZWNiZGEtMDMxYi0z
MTZjLTlkNzUtYmQ4YzRmNmE1N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAYb/AMB4z2OSKPUGVvW8V6l6kuu3Pn3bRAFfVUY/T9p/iyF+f7MASh
xPd7rJK0Rt7ow6/bFkly7Wf/NFTL765D4aWjdVf8it5Yx/GHoIXlJzkKWmUn1zWz
+pW5s3MWiBEWom+PkeTvxOqWDK5OIg764x7VHBTITlEKUQji/2AXEIJU9xHVhkUv
K2pXwoDWDGt+fUCYrZQ0w6wAafJ3S0ZfJ7qo96qej+X9tIqUnrJ2SbM4hzbOlRID
0lMSrxATuUsLUCOQxhPRWFq2Uh1nXPUQz5P8dKT+ykflc5tw6B8B5n8CsbSRQpIf
kcJWF5N80wm2GbZYZ1rH1zCMjeLFwXqL
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:33 2026 by rpki-client