Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b30aa8b-3f0a-3dd6-af8a-f765d1aaaea7.roa
File:                     1b30aa8b-3f0a-3dd6-af8a-f765d1aaaea7.roa (raw, json)
Hash identifier:          faRpeFOk8LP3j6WescBOh/pF3DJ8rgb70PmXA/eO3xU=
Subject key identifier:   D0:04:F1:85:53:80:A8:D2:84:EE:8D:D1:B2:02:9B:DB:3A:31:B8:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E779A1D8BD2F62FD0505D0680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b30aa8b-3f0a-3dd6-af8a-f765d1aaaea7.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     397198
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:1d:8b:d2:f6:2f:d0:50:5d:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=6e08a26e-f544-4089-82ec-ee3a50f22b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:49:37:c0:49:78:d4:e3:fa:95:95:85:06:
                    4c:14:40:b3:de:a8:4b:db:65:31:82:9f:31:e3:cc:
                    f2:f9:bd:43:d5:c2:d2:37:b0:54:27:4e:8b:c8:d3:
                    0a:3f:8d:c4:8e:e7:19:ae:e8:c4:d0:5b:56:94:ab:
                    d1:d0:6c:27:3c:1c:13:74:5b:72:93:67:c9:4d:74:
                    19:5f:65:6b:5c:ec:7c:19:99:8b:1e:32:06:86:3f:
                    ac:c6:67:02:01:6c:5b:d2:7a:a1:4d:15:77:7e:58:
                    af:a6:5c:46:d9:9a:cd:b9:29:c6:25:3d:79:86:66:
                    73:fd:a3:23:96:02:a3:c2:03:54:c1:b5:a7:e8:b3:
                    6a:09:f3:80:b6:34:fc:57:20:70:98:87:80:e7:9f:
                    78:40:63:89:c6:f9:a0:6a:2a:ed:20:e1:a3:bb:cc:
                    9b:fd:dd:4c:0e:b8:80:b4:14:63:01:e4:e0:1c:f1:
                    af:9d:bc:1b:19:71:a9:8a:a5:87:83:fb:52:7d:42:
                    c5:20:05:ef:9f:64:92:7e:5a:11:b0:f5:c2:35:b1:
                    f3:44:e9:72:30:0a:da:74:a9:41:d3:0f:24:62:e5:
                    a3:ea:6b:71:9b:b7:e2:55:a7:ff:48:28:19:ae:74:
                    62:fb:9f:e5:82:84:c2:aa:d0:62:84:56:8d:92:66:
                    56:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:04:F1:85:53:80:A8:D2:84:EE:8D:D1:B2:02:9B:DB:3A:31:B8:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b30aa8b-3f0a-3dd6-af8a-f765d1aaaea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:8f:8c:40:26:da:2d:29:02:be:07:9d:6c:fa:4e:98:af:2f:
         76:1f:b9:4a:2e:b9:80:da:7e:73:8d:ae:77:6e:7b:25:e6:dc:
         e2:73:32:ab:6a:5e:b4:5b:62:6f:75:65:aa:33:b6:75:7c:65:
         1c:cd:71:f6:79:55:56:75:9d:90:24:d8:9e:3b:c1:db:a6:2e:
         ed:c7:a8:2f:67:6c:29:f0:b6:43:82:64:a5:04:8a:7a:06:47:
         68:1a:a5:62:01:96:52:2e:31:ca:f6:c2:38:4a:0f:60:f6:4f:
         4f:0d:f2:e4:12:a4:5c:22:d2:0f:0c:2c:4e:f1:a3:95:21:df:
         96:7f:56:3f:fa:a5:d9:32:cd:22:7a:20:e3:58:f9:26:14:61:
         ac:d3:ea:44:36:ec:31:77:e9:ce:d0:31:0b:78:12:47:ed:53:
         5a:49:38:7e:d9:a3:d7:6e:18:63:63:bf:1b:ba:c8:a2:22:01:
         7e:12:16:33:15:28:09:f3:49:a0:ce:90:a0:70:06:fa:0c:32:
         15:0f:4d:c2:f8:3f:5e:3b:00:47:ac:60:0d:d3:23:71:6a:30:
         d1:b6:0d:a7:e8:80:5f:69:c9:43:cb:51:13:c4:54:d6:20:fc:
         47:00:a6:24:e7:7e:37:f6:9b:97:05:a8:7b:7a:57:40:42:93:
         c6:82:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:16:57 2026 by rpki-client