Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37bd206f-7df9-328c-bffc-26dd0a89fdc2.roa
File:                     37bd206f-7df9-328c-bffc-26dd0a89fdc2.roa (raw, json)
Hash identifier:          Qbu//PcjWikzsWLeo1c4Wu7pBL2KdkNqvkj2k4T8k5U=
Subject key identifier:   99:EF:E6:F6:08:C3:88:0D:24:11:93:D7:74:0F:24:C2:81:5D:C9:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6145198BCBDFC86BA917B8A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37bd206f-7df9-328c-bffc-26dd0a89fdc2.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     396604
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:19:8b:cb:df:c8:6b:a9:17:b8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=22cd94f6-9fc7-4ddc-a8b2-c83a1f8c61f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c1:5c:ea:50:99:7b:b2:f7:47:57:9a:55:a6:
                    fe:68:4b:19:dd:98:de:00:e7:fe:17:97:1b:03:48:
                    98:9b:9d:bb:94:41:be:ca:0e:7f:79:8d:b2:58:60:
                    20:b8:15:e7:41:59:c5:60:5a:4f:57:07:32:55:51:
                    63:b8:5d:c3:8d:9b:9c:81:f9:1e:b0:e7:ba:35:fd:
                    7a:cb:3d:ed:b0:10:74:49:25:98:12:c2:53:f9:32:
                    6c:60:2d:2c:7a:b4:2e:95:ca:7d:79:00:4f:80:5d:
                    ac:9b:95:5c:45:f4:bd:05:c3:3f:38:e7:d6:83:f2:
                    e4:f4:c4:15:fc:75:6f:2e:72:9a:18:de:70:d4:0d:
                    0c:d6:51:61:9b:93:ac:3c:1a:b3:06:d4:76:92:a4:
                    a4:c4:f3:6c:cb:c9:cc:9a:32:ac:87:3a:49:e0:74:
                    dc:a1:11:e2:9c:8e:4b:1f:48:cb:a9:21:9f:77:3c:
                    49:3f:ab:3b:f9:d3:cf:07:8e:7f:29:1c:be:12:23:
                    3e:be:b7:f3:3b:5a:ff:5d:b7:db:ce:20:10:cf:7c:
                    81:a2:e9:3b:1c:db:88:d5:c4:7b:77:71:51:55:e6:
                    74:24:88:1f:1d:48:dd:c7:47:b1:64:2c:bd:73:b6:
                    1a:b7:96:51:07:ea:44:09:a4:81:b0:24:78:35:b3:
                    32:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EF:E6:F6:08:C3:88:0D:24:11:93:D7:74:0F:24:C2:81:5D:C9:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37bd206f-7df9-328c-bffc-26dd0a89fdc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:8f:f5:6a:1f:5c:fc:ff:b4:94:03:40:95:0d:fe:c5:29:0a:
         75:d9:06:4b:59:f3:ae:00:bf:de:2d:34:c1:e3:e1:60:f4:43:
         f0:92:6d:9f:d8:85:c3:f2:96:29:d4:dc:9d:9c:54:ab:b9:08:
         6f:ca:41:a3:07:e3:d7:18:31:ce:e1:7c:4e:fe:fc:e9:82:31:
         a2:d6:1d:18:54:ac:14:df:42:62:98:e2:7b:7c:37:76:20:0c:
         e6:fd:f5:88:05:ff:f6:ef:63:dc:c1:a6:7a:f8:93:7b:4a:28:
         10:65:b9:85:fe:0b:d0:89:64:52:4c:c2:c8:ea:cf:21:5b:8a:
         ee:79:5b:ac:f3:36:3b:fc:7d:cf:59:16:1f:ba:e7:9b:bd:78:
         e3:83:b5:03:10:72:fe:fe:b0:0e:28:1e:e6:d8:84:2f:a3:ff:
         a8:c1:f2:53:b6:db:65:e7:f6:28:1e:1a:e0:9c:8f:1a:3f:a2:
         de:50:eb:aa:c2:5e:47:08:93:39:95:ba:43:fe:53:5f:a0:9b:
         1c:e4:ad:d9:d1:3d:dc:4c:44:c7:7d:cd:e7:70:e5:9e:fa:2f:
         4f:ac:1a:05:9a:52:30:d6:6f:4c:4d:46:1a:b3:ea:c7:39:03:
         ba:f1:06:89:7a:06:24:b0:84:fb:8d:76:75:24:57:ae:f0:b4:
         28:0b:b2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:03:03 2026 by rpki-client