Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd505c1e-801b-36d1-b7c3-d75bf81130b7.roa
File:                     fd505c1e-801b-36d1-b7c3-d75bf81130b7.roa (raw, json)
Hash identifier:          v7LOh8t4ZcgkgAwLey1NZ5KvKEEhBUGp0faZRWCW9fw=
Subject key identifier:   AF:FB:D3:87:B9:F9:A5:1C:67:BA:B1:9A:35:62:16:DB:CD:6D:6E:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8100580AF11C4FA464CABD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd505c1e-801b-36d1-b7c3-d75bf81130b7.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     396582
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:58:0a:f1:1c:4f:a4:64:ca:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=397847df-fc23-4afa-bf31-03edbaca7faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8c:f2:66:ee:ad:37:1d:7e:25:50:e3:3c:f2:
                    07:bd:c9:53:14:40:2b:2d:fa:bd:e8:7f:ed:26:10:
                    04:72:3b:c4:c3:af:ef:13:28:aa:26:40:d8:ce:3e:
                    fb:c6:57:53:68:e3:b2:6b:70:44:68:1a:ff:5f:98:
                    70:19:4f:16:a0:4d:1e:49:24:7c:b4:98:b5:e2:25:
                    2e:d5:83:b9:77:64:06:f3:73:e0:c9:2f:04:9e:4a:
                    f0:c2:2a:eb:5a:e4:ff:14:dd:2b:dc:db:f2:b5:a8:
                    68:1f:fc:34:f3:4d:a3:71:18:3f:19:79:03:f7:78:
                    f5:c2:03:87:8c:c6:b9:d1:99:a4:c5:89:69:aa:31:
                    7c:3b:90:82:f0:e0:4b:7d:82:b6:bb:34:2c:b3:db:
                    91:3c:48:3f:72:56:66:da:ce:7c:58:f7:ae:3c:0c:
                    47:05:25:56:98:f2:60:3f:a7:a2:b0:32:72:f6:11:
                    62:3c:65:7c:4f:1c:a2:48:d8:57:ec:32:3e:fa:a9:
                    28:7e:a1:6e:d3:5b:ed:3a:13:7f:bf:8f:85:33:eb:
                    fa:2e:9e:d5:d4:d3:1a:d2:b2:c1:ed:21:55:af:33:
                    d4:78:0e:7f:c7:6b:11:3e:6d:51:61:0a:bb:0c:7f:
                    af:52:6e:ae:fd:30:9c:05:62:b5:3f:db:33:05:eb:
                    b1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FB:D3:87:B9:F9:A5:1C:67:BA:B1:9A:35:62:16:DB:CD:6D:6E:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd505c1e-801b-36d1-b7c3-d75bf81130b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:ba:28:b9:75:21:5d:fa:b7:d0:cc:c7:e5:e1:6d:75:26:5c:
         3e:0a:b6:ae:57:08:df:c7:90:6b:81:89:9a:53:6e:f6:0d:90:
         8d:8a:22:b8:bc:52:a2:30:18:9c:bf:cd:af:91:e4:59:83:41:
         fc:fb:80:d8:23:10:3d:2c:1e:e2:5c:c3:cd:ce:37:e6:c3:b4:
         de:b3:af:4f:83:6d:e5:c5:f4:9b:4e:ca:48:c5:f5:2b:64:f6:
         a9:06:92:d4:64:a6:53:74:b5:54:c2:b4:98:eb:5d:5e:a0:60:
         14:60:5b:81:29:6f:90:11:d7:6a:47:59:6e:5c:48:79:5a:d6:
         1b:29:42:d4:76:25:ca:77:42:cb:9a:43:57:dd:e8:d0:6b:c4:
         4b:93:6d:15:f2:36:42:13:53:4c:0b:20:c0:2a:7c:10:2a:01:
         90:06:12:ae:93:f4:d5:ae:38:b5:29:7f:4c:21:77:83:df:3b:
         b6:87:a6:72:88:30:26:ee:76:4f:ec:8d:95:bb:2d:73:eb:76:
         d7:31:bc:91:e5:e1:f8:fe:aa:ae:ac:46:d5:06:00:27:52:77:
         bb:a9:fb:4a:0a:18:82:29:66:c8:bb:6b:6b:1b:2c:69:6f:c2:
         e3:74:c1:96:44:6b:53:cf:c2:6d:be:b7:8c:8c:03:63:d6:24:
         06:66:5b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:49 2026 by rpki-client