Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc71ba-f0e0-382c-bb62-f2ef6de28a71.roa
File:                     2fbc71ba-f0e0-382c-bb62-f2ef6de28a71.roa (raw, json)
Hash identifier:          gSdL3ERj/huJ1qtZY8cCn4YrqE6GsY/e02Uiq6ASswM=
Subject key identifier:   58:94:9F:40:D9:1E:7D:D1:B6:2D:8F:B1:0A:23:4C:B7:6C:70:CD:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A7F418E4087F322B75F260
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc71ba-f0e0-382c-bb62-f2ef6de28a71.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     36616
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:f4:18:e4:08:7f:32:2b:75:f2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=bfc05939-e0e4-40e4-ac4e-1a3073515b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:11:34:a7:54:1d:0e:4e:d4:4d:85:e5:cd:
                    4d:04:24:ee:ce:36:a1:04:aa:08:89:4c:4f:45:ab:
                    a2:63:c9:7b:d0:85:55:66:ba:c1:fc:1c:12:1b:ba:
                    46:d4:d8:22:60:c2:39:9d:d5:f4:6a:6b:7f:3a:76:
                    67:ca:75:2c:41:47:49:b6:7f:d1:f0:88:85:ec:d0:
                    c4:c3:49:7a:c8:50:2c:43:4a:6f:ff:18:38:e5:03:
                    c3:3c:04:d3:f0:a0:a6:98:01:79:f6:33:e4:69:8d:
                    dc:45:a6:a6:f4:13:2e:bb:ee:05:29:69:8f:84:96:
                    c8:75:17:e0:72:3f:06:8a:b9:37:4d:59:ef:33:cf:
                    f1:32:46:78:fd:ca:db:d0:b3:14:37:fe:4e:dc:10:
                    7b:56:34:b6:b7:73:34:0c:0e:ac:12:5f:00:56:81:
                    9e:34:9d:96:d2:ac:c2:df:ae:be:9e:2e:99:11:c6:
                    f2:63:63:71:e4:63:1c:d2:81:68:b6:17:20:24:8d:
                    cf:f3:eb:ba:c8:10:a3:32:fe:13:a5:73:f4:00:75:
                    d6:f1:a3:ae:45:35:92:02:48:54:4f:e0:46:bb:4a:
                    0a:5f:88:13:b5:62:a9:a8:dc:26:e0:68:32:5f:53:
                    67:a0:ea:00:ab:5c:bd:93:30:2e:49:61:b8:65:c1:
                    64:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:94:9F:40:D9:1E:7D:D1:B6:2D:8F:B1:0A:23:4C:B7:6C:70:CD:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc71ba-f0e0-382c-bb62-f2ef6de28a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:50:ae:e0:13:02:fd:3f:3d:a3:eb:9c:f3:58:db:fc:f3:d4:
         0f:48:52:7e:70:03:8b:8d:45:1b:46:96:c6:5c:11:45:db:2a:
         07:96:a2:3a:4e:3f:a6:c5:9f:0b:4f:23:67:25:af:40:63:ad:
         98:4d:1e:42:87:7a:61:de:34:be:50:5a:75:e5:27:cf:ba:ae:
         0c:5d:78:32:32:a7:b1:17:31:c6:3c:02:ff:64:84:6d:1a:16:
         94:9a:ce:a2:8c:e7:5a:f6:9c:a7:35:de:f6:31:d1:50:28:c4:
         84:da:08:a6:d9:e6:62:41:13:6c:06:90:81:93:64:96:2f:36:
         1c:03:7f:ff:e5:c6:db:4b:84:9b:be:ab:9e:55:00:17:f0:22:
         81:7d:26:42:22:ed:eb:1b:0d:c7:03:c3:b1:7d:24:5d:2b:28:
         f8:43:c7:5d:da:7f:32:95:5d:de:cb:d2:40:56:89:63:3f:eb:
         af:5f:57:31:46:ae:2f:0e:07:96:c7:d7:8f:96:21:3b:be:dc:
         3a:80:95:90:61:de:53:36:62:95:ef:2f:1f:d3:13:4f:e3:44:
         e3:a2:60:33:35:5c:c6:4f:01:ee:a2:7a:62:78:f1:73:1b:df:
         ec:16:60:a8:ef:6f:b7:b2:af:08:1d:08:1a:9c:9c:ca:0e:96:
         fb:a0:13:cd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp/QY5Ah/Mit18mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
YmZjMDU5MzktZTBlNC00MGU0LWFjNGUtMWEzMDczNTE1YjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD4RNKdUHQ5O1E2F5c1NBCTuzjahBKoIiUxP
RauiY8l70IVVZrrB/BwSG7pG1NgiYMI5ndX0amt/OnZnynUsQUdJtn/R8IiF7NDE
w0l6yFAsQ0pv/xg45QPDPATT8KCmmAF59jPkaY3cRaam9BMuu+4FKWmPhJbIdRfg
cj8Girk3TVnvM8/xMkZ4/crb0LMUN/5O3BB7VjS2t3M0DA6sEl8AVoGeNJ2W0qzC
366+ni6ZEcbyY2Nx5GMc0oFothcgJI3P8+u6yBCjMv4TpXP0AHXW8aOuRTWSAkhU
T+BGu0oKX4gTtWKpqNwm4GgyX1NnoOoAq1y9kzAuSWG4ZcFkRwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFiUn0DZHn3Rti2PsQojTLdscM2GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmZiYzcxYmEtZjBlMC0z
ODJjLWJiNjItZjJlZjZkZTI4YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA4UK7gEwL9Pz2j65zzWNv889QPSFJ+cAOLjUUbRpbGXBFF2yoHlqI6
Tj+mxZ8LTyNnJa9AY62YTR5Ch3ph3jS+UFp15SfPuq4MXXgyMqexFzHGPAL/ZIRt
GhaUms6ijOda9pynNd72MdFQKMSE2gim2eZiQRNsBpCBk2SWLzYcA3//5cbbS4Sb
vqueVQAX8CKBfSZCIu3rGw3HA8OxfSRdKyj4Q8dd2n8ylV3ey9JAVoljP+uvX1cx
Rq4vDgeWx9ePliE7vtw6gJWQYd5TNmKV7y8f0xNP40TjomAzNVzGTwHuonpiePFz
G9/sFmCo72+3sq8IHQganJzKDpb7oBPN
-----END CERTIFICATE-----
Generated at Sat Oct 3 11:45:38 2026 by rpki-client