Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b6a9365-cfe1-37f3-bf32-2092a32ccf51.roa
File:                     1b6a9365-cfe1-37f3-bf32-2092a32ccf51.roa (raw, json)
Hash identifier:          7y02Wn5U3nEMg3268+ihAMA8+R6Jl2j+xKNgOEL9aSg=
Subject key identifier:   10:89:64:92:F8:C3:D0:A9:CB:09:87:23:3C:E6:57:63:7B:51:AC:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E779A20C7112008C3F8E9CD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b6a9365-cfe1-37f3-bf32-2092a32ccf51.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     397200
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:20:c7:11:20:08:c3:f8:e9:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=1bf98069-2e32-4e65-a556-cd43e82aa53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:70:a4:6e:c6:00:b6:ca:3f:12:c9:6e:27:17:
                    e5:47:47:f8:bf:75:2e:07:e6:c5:de:26:e1:fc:3a:
                    b7:7d:ca:08:03:d4:ff:58:ab:d1:84:36:e0:45:d8:
                    ce:ce:17:8b:9a:7b:cb:09:ad:30:1e:5e:d2:8b:96:
                    1a:3b:17:c9:05:01:e9:6f:e3:1f:bc:e6:0e:1d:d1:
                    cf:96:d9:39:b2:22:53:55:cd:4b:24:ec:2d:d8:42:
                    b3:63:ab:5d:cf:3c:1e:c1:95:f6:a1:ad:c7:47:1c:
                    51:d4:c5:92:ab:01:22:9b:a3:f8:f8:53:92:98:fa:
                    cd:ee:7c:94:cc:91:46:49:60:ae:a0:ce:92:b8:3e:
                    60:70:5f:0e:f6:3f:83:63:ab:1e:69:24:8d:1d:bd:
                    0b:f6:ca:84:e8:0b:03:65:1c:32:12:a7:15:8b:4e:
                    25:18:63:25:49:5d:8e:e0:31:ba:1e:9e:e8:93:90:
                    cb:20:ab:fc:21:9f:af:e3:e5:33:44:b0:e1:c2:a9:
                    08:89:9e:6b:0b:2b:7c:f7:38:54:38:e0:31:44:81:
                    be:f6:d8:ad:50:a5:22:e7:e8:f1:89:74:3a:23:3e:
                    08:97:a7:53:38:ea:08:a6:d5:a8:78:20:01:fb:82:
                    dd:56:e3:f2:7c:9f:52:bf:fb:9e:54:e6:fd:37:36:
                    df:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:89:64:92:F8:C3:D0:A9:CB:09:87:23:3C:E6:57:63:7B:51:AC:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b6a9365-cfe1-37f3-bf32-2092a32ccf51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:12:d3:2c:ea:ff:eb:dd:35:29:44:66:8b:fe:f7:6d:47:00:
         47:03:8b:db:bc:86:40:88:5f:1e:22:5e:b2:dc:dd:06:1c:82:
         73:12:f8:d0:a6:bf:09:ee:23:51:5c:69:3d:28:ae:b8:16:6a:
         92:f6:4d:eb:ad:0d:d5:c7:d6:f9:d8:4c:af:4d:1a:31:a2:85:
         83:43:73:36:3f:e4:29:64:dd:23:a5:45:d5:1b:f9:c9:36:a7:
         33:69:f0:22:24:97:c7:05:74:22:3c:a9:57:b1:87:ae:58:8f:
         5e:94:a7:d3:4d:ed:cb:42:30:d9:8a:b5:d7:96:fd:4f:ac:19:
         1d:b7:74:bb:41:df:8f:4a:5e:30:c4:e3:46:8c:8c:27:b6:82:
         76:6c:e5:66:ba:62:97:b5:4d:63:e6:10:b7:77:b2:14:b4:28:
         b7:8f:75:45:ba:0a:03:b4:fc:80:ef:a4:65:2d:35:15:a4:2e:
         95:87:d4:6b:94:ca:70:e4:b2:ff:d8:43:cd:ba:64:58:a5:61:
         77:fb:6b:51:10:1d:e7:f1:aa:ad:99:40:4e:69:77:d4:97:60:
         2c:72:a3:18:f9:f3:fd:49:90:e6:ca:09:d3:68:26:aa:30:90:
         ee:a4:aa:7c:95:1b:c6:ce:40:f8:c7:10:20:ec:52:0f:be:7f:
         d9:7f:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:12:16 2026 by rpki-client