Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29d5c2e0-fb8d-32ac-b082-4ba15837062f.roa
File:                     29d5c2e0-fb8d-32ac-b082-4ba15837062f.roa (raw, json)
Hash identifier:          gyNx//vIwCRDyjcenb7q3wFRKea7dZdLguwXC2l7hM8=
Subject key identifier:   51:04:D2:81:83:4F:D9:5B:16:C4:23:81:99:24:D4:E5:EB:80:E7:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E61451857E5CA5889438A0740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29d5c2e0-fb8d-32ac-b082-4ba15837062f.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     396563
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:18:57:e5:ca:58:89:43:8a:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=854b5132-1709-4203-849c-5ff92cac8042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:63:cf:61:60:e2:7e:1e:a2:a9:a7:d2:d9:
                    f5:6b:84:c8:3d:ec:df:d7:74:be:89:f4:4d:66:7a:
                    c9:27:06:8d:72:bb:63:e1:5e:69:a4:13:31:a6:16:
                    e3:21:70:14:01:b7:91:39:4e:5d:3b:0e:d1:d0:53:
                    74:71:98:0d:4f:92:61:e0:1d:25:ad:84:9e:1e:97:
                    df:2e:95:c3:6f:d3:52:5d:6c:03:f9:91:99:6a:e8:
                    38:64:a9:f6:72:e1:e4:d0:55:1e:24:e4:20:89:ad:
                    3d:d7:76:5d:f1:a1:f5:b3:c5:4c:b4:a7:58:df:4d:
                    ae:7a:4f:cc:1a:89:fc:94:5d:c1:19:ed:bc:b7:65:
                    27:5c:b6:2b:09:da:0e:5e:b4:26:ac:d5:13:bf:60:
                    28:2b:e8:ad:9d:6a:92:4c:86:05:71:de:f1:0c:b9:
                    30:e9:86:d9:c8:33:cb:7f:fa:5b:60:cf:24:e6:0c:
                    00:c7:84:25:30:b8:d1:d3:13:99:7f:55:1b:44:9a:
                    f0:0d:cf:fb:0a:21:fc:17:3a:0b:1f:3e:80:09:43:
                    bd:99:cd:9a:87:ba:ea:84:ad:a3:19:b9:d4:5f:42:
                    23:31:4b:a6:9c:7a:5e:c3:84:13:4a:c8:c4:f0:9b:
                    6f:a6:1b:56:57:7e:ed:38:f8:11:fa:76:52:d1:f9:
                    60:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:04:D2:81:83:4F:D9:5B:16:C4:23:81:99:24:D4:E5:EB:80:E7:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29d5c2e0-fb8d-32ac-b082-4ba15837062f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:75:17:87:71:51:55:ad:5d:98:d0:e2:c8:e3:aa:32:f3:ef:
         c2:d3:03:25:21:00:d5:2d:c2:76:ed:49:82:6e:bd:a7:f7:24:
         89:68:a6:91:8e:6a:ce:71:dc:4f:1e:1f:53:f1:ff:04:4f:a5:
         9e:18:98:00:f4:21:a0:67:50:e3:86:58:b6:32:79:a9:f2:fe:
         9f:39:ca:08:2a:9e:52:c6:35:b7:78:f4:83:98:c6:03:70:12:
         19:40:ce:90:c3:a6:5d:76:e3:66:2f:5e:78:07:ec:e4:48:5b:
         de:51:6d:3e:0d:d6:94:54:98:db:83:5f:7d:d2:af:65:a3:ca:
         80:79:a9:69:4b:da:f8:19:43:95:c9:6e:21:ee:33:7a:a9:c8:
         0d:92:a7:0b:a5:28:38:64:39:7e:57:bf:f4:2d:a9:86:fd:4f:
         18:e6:53:ee:43:98:14:22:b8:96:cf:0b:75:30:19:c5:78:7f:
         c3:07:f5:e2:e6:c3:7e:4f:7e:d5:14:6b:6e:f3:8a:b1:5c:80:
         50:cb:16:93:35:2d:78:3f:04:13:d0:5f:80:3e:9f:5b:5b:bb:
         fe:44:42:50:fb:9d:31:2b:17:da:c5:af:10:89:09:af:b9:2a:
         18:37:af:35:39:52:f3:ef:fa:52:13:94:82:64:52:7b:4e:9c:
         9c:a8:7d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:09:03 2026 by rpki-client