Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32468368-1aeb-3862-ac4f-ff8a8b2f8f10.roa
File:                     32468368-1aeb-3862-ac4f-ff8a8b2f8f10.roa (raw, json)
Hash identifier:          4P1BJGIc46YKy9mxkuXsCKCO2Uiajtd7BhLWejQYMDE=
Subject key identifier:   58:BD:63:4D:BB:82:92:CA:02:43:D0:51:BF:4F:48:03:B3:B8:78:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D97556A454D015B055375CD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32468368-1aeb-3862-ac4f-ff8a8b2f8f10.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     36623
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:6a:45:4d:01:5b:05:53:75:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=daec6623-fca6-4746-8ea9-29be9f0794a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:93:8c:0c:cd:ac:ab:0d:41:ec:7e:31:43:44:
                    c7:eb:fd:eb:76:0e:9a:34:03:c6:32:46:ce:91:3f:
                    2d:3e:b9:76:43:e4:85:ce:ee:a2:94:a9:96:0b:cc:
                    da:24:2c:9f:55:46:2f:18:6d:dc:32:d8:35:8c:c3:
                    d7:1b:11:e6:a0:69:88:67:f6:6c:3e:5e:c6:f4:59:
                    10:0a:0d:6b:34:00:73:a6:41:69:a4:3a:7c:b9:67:
                    b4:88:28:7d:e6:5c:b7:de:8f:aa:99:91:aa:d4:fc:
                    e8:3c:bd:ec:c7:9e:2c:cf:fd:7f:d5:21:27:f0:12:
                    c0:bc:77:29:fe:f0:bb:13:4a:9e:34:4c:a1:79:c3:
                    09:9c:4e:ce:27:66:e6:27:8d:43:55:46:3f:5c:eb:
                    ee:38:10:56:cc:3d:1c:1f:9b:4f:6d:12:89:ec:8a:
                    5e:16:cc:d8:15:db:f9:b4:39:d1:d9:a7:d1:e3:fa:
                    7e:27:40:fe:3c:d2:77:33:1b:e4:67:98:59:24:b2:
                    45:90:45:70:d5:6f:71:e8:42:56:d8:50:1e:bc:0d:
                    87:ff:b9:49:45:54:d6:c9:18:0d:18:30:96:bb:97:
                    1c:21:4d:18:fe:0c:20:d5:8a:3c:51:70:34:cb:8f:
                    f2:76:34:3e:b6:6f:cd:be:d2:2f:1c:76:9a:46:01:
                    61:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BD:63:4D:BB:82:92:CA:02:43:D0:51:BF:4F:48:03:B3:B8:78:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32468368-1aeb-3862-ac4f-ff8a8b2f8f10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b7:17:ec:51:c1:35:f7:ea:56:64:e0:fd:2e:de:b1:a9:9c:
         22:30:66:6d:d6:be:43:c2:c1:62:f8:3f:ed:9a:44:b6:9a:0c:
         3f:66:8f:c2:64:c9:6a:19:2f:0d:40:3e:a5:41:77:4b:06:c3:
         65:4a:c2:b6:1c:f0:34:37:cc:41:0e:34:66:d5:f7:c4:13:c3:
         f1:c5:81:17:bc:73:4c:ed:b8:72:e2:f7:7c:73:6b:54:d6:51:
         b5:20:1b:ea:33:24:c5:60:9e:7e:37:06:19:28:cc:d9:70:21:
         66:4b:8a:a8:f8:e7:fa:91:87:d9:6b:96:3f:26:fd:1a:23:3b:
         48:69:6b:0f:1c:cc:a7:6c:ca:0a:45:00:d4:32:c0:f2:0f:40:
         ab:e8:9b:a5:a5:03:44:50:e7:a7:a9:a6:52:fb:c3:13:13:0f:
         3c:5a:be:6f:55:40:7a:5b:1f:c5:b1:37:a6:78:24:f7:fb:4a:
         dc:08:ed:61:4e:00:9f:3d:5d:6f:63:ea:66:ce:a7:bf:31:cc:
         fd:21:95:4d:bf:59:d2:a5:63:be:75:15:a4:c6:23:38:7e:b5:
         ea:a8:a3:98:79:ef:f7:fc:24:04:cd:9b:2e:19:b4:3a:b5:90:
         ed:25:cb:5d:a8:98:3e:ea:3a:6a:44:ee:f3:f1:71:c7:da:2f:
         a6:1e:f2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:45 2026 by rpki-client