Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc71ba-f0e0-382c-bb62-f2ef6de28a71.roa
File:                     2fbc71ba-f0e0-382c-bb62-f2ef6de28a71.roa (raw, json)
Hash identifier:          bHgBGjH8VpQOVbnDHPRuD85a0SIoOXJDByrnqaHy1ps=
Subject key identifier:   96:58:31:A7:EE:98:92:26:93:F0:30:58:E5:9D:C5:3D:D8:A7:14:52
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE031A3EDE7FB27C0AEDF0F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc71ba-f0e0-382c-bb62-f2ef6de28a71.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     36616
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:a3:ed:e7:fb:27:c0:ae:df:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=5a0148e1-4fe7-4f58-9e8a-61af11973f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:36:92:a2:23:82:34:d1:f2:28:ab:c2:46:
                    78:b4:3e:68:8c:fd:66:bb:89:a4:42:90:76:f5:fc:
                    8c:cb:7a:19:4c:10:c2:cb:2e:c3:4b:53:7c:a0:a4:
                    b4:55:3a:15:c2:c8:29:e5:04:66:99:9e:a5:7c:29:
                    37:89:a5:2a:e1:49:14:db:af:91:c4:bc:36:bc:fc:
                    b2:bf:51:c7:95:39:20:de:a8:13:f6:eb:f7:68:1a:
                    1c:18:67:39:c9:b7:a7:c3:7a:9c:f0:ef:b3:50:61:
                    25:13:81:bc:f8:d5:f5:ba:0b:e7:bb:0e:8f:86:d1:
                    d8:3b:2b:16:5f:04:cf:70:b7:12:8e:99:e0:a3:48:
                    08:62:44:5e:61:1e:4f:dc:26:00:fe:cf:69:ce:cc:
                    34:c5:bd:66:37:c9:c5:e9:17:33:f5:80:f9:ea:36:
                    02:cf:bd:6d:51:8d:71:11:35:fa:d4:fa:ef:03:5b:
                    36:fc:36:38:8a:cb:95:1f:e5:e3:ca:c9:e9:a7:69:
                    c4:17:cc:71:4f:00:3c:08:c2:01:8c:c4:f8:6d:1e:
                    5f:a3:8f:60:00:45:cf:ea:16:fa:54:0a:3c:45:8d:
                    de:53:9f:09:43:9a:c0:9b:8b:22:71:f1:d4:dd:c0:
                    49:53:96:1b:aa:01:30:a8:07:93:19:4f:94:89:08:
                    31:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:58:31:A7:EE:98:92:26:93:F0:30:58:E5:9D:C5:3D:D8:A7:14:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc71ba-f0e0-382c-bb62-f2ef6de28a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:bd:3b:73:8c:68:2a:7d:03:ee:03:58:bc:92:ef:6d:da:4a:
         34:4b:8c:02:98:69:f8:e6:09:09:5a:03:57:99:36:c9:10:e1:
         86:1b:cf:2c:47:19:72:c0:42:2d:29:d5:2f:56:23:03:18:df:
         b7:37:c8:21:ad:c6:47:07:4e:28:6a:88:ee:ed:d8:55:ce:8d:
         5c:cb:8c:2a:a5:2b:04:72:94:b0:25:21:a2:5c:ab:7a:bd:62:
         16:74:9a:d5:0a:3a:3a:c5:aa:c3:dd:fd:bf:11:0a:c8:1a:8a:
         0b:4b:89:be:83:8e:0d:5c:77:74:8e:04:83:35:0b:fe:12:57:
         03:d8:a6:87:84:ff:6f:60:ae:54:3c:39:89:9b:5a:7f:88:ed:
         aa:6e:70:9b:ab:4f:75:cc:da:1d:66:31:06:38:5d:36:71:3c:
         9c:5d:3b:7c:26:36:4f:01:0b:20:df:9e:6e:5b:d6:a7:ed:a3:
         21:40:a5:28:33:ee:cd:da:78:b0:90:9e:6b:df:3b:00:ca:53:
         3c:a1:68:cb:45:6a:6d:b1:54:9b:de:00:77:79:64:f5:3a:72:
         38:53:b7:47:fd:5d:d6:c8:91:1c:0b:f9:29:de:87:55:02:bc:
         de:af:11:4a:e3:a8:e0:b9:7b:af:d5:ec:f2:fe:b6:49:f8:97:
         81:3e:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:08 2025 by rpki-client