Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4beda2e5-bce0-3a4f-a8b2-63bd67d52aa7.roa
File:                     4beda2e5-bce0-3a4f-a8b2-63bd67d52aa7.roa (raw, json)
Hash identifier:          QCpolNy/jzoDgdFnb1uVsIKlq3pnbsFG/p8wPNE1I10=
Subject key identifier:   FF:B1:6F:CB:2B:4F:DD:87:CC:E0:84:7A:CB:33:55:C8:53:6D:A1:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E614515972D72BF9A35FDF280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4beda2e5-bce0-3a4f-a8b2-63bd67d52aa7.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     396541
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:15:97:2d:72:bf:9a:35:fd:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=dafbd314-7f97-4aaf-9ea3-b7041ac35b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:99:f8:90:fc:3a:f5:0d:1d:2c:10:5c:b0:
                    a3:c7:6f:12:35:2f:af:98:cd:f9:bb:71:df:12:7c:
                    b1:94:ad:76:f0:15:24:99:c3:dc:a8:b8:e1:6d:b5:
                    a4:6c:62:39:61:d6:01:b3:14:57:bf:be:69:80:0a:
                    40:e0:30:b4:37:bb:ce:c1:ca:80:c6:5c:f9:fc:9b:
                    4b:dd:58:7d:5b:0b:89:ca:d6:01:69:ad:d0:a6:08:
                    22:08:04:40:f2:c9:ba:2d:23:96:19:ba:ca:49:5d:
                    70:92:b3:27:17:c8:90:03:cc:0e:cd:8d:3f:49:b3:
                    78:88:f7:fa:12:d3:19:a8:0b:8b:ee:1d:84:cf:0c:
                    79:68:bc:c3:6c:95:ff:9e:6c:89:63:3e:56:31:18:
                    c8:00:98:5d:6f:25:f4:88:b8:84:b3:09:de:d4:2c:
                    e3:d1:1a:bd:0e:ab:aa:ff:55:af:5e:8e:46:bd:c1:
                    c9:06:ff:0d:b8:68:69:51:ad:fa:ba:51:40:9a:4c:
                    cb:08:8d:33:64:46:a3:9f:c0:36:8e:64:bb:7e:67:
                    f9:95:ef:d4:cc:8a:99:d4:8f:4b:c1:5b:c4:38:39:
                    84:0f:c4:31:a0:53:cc:cd:40:34:f5:dc:6c:cd:d6:
                    09:98:52:57:63:e7:9c:be:e0:87:d7:5d:b0:a3:f5:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B1:6F:CB:2B:4F:DD:87:CC:E0:84:7A:CB:33:55:C8:53:6D:A1:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4beda2e5-bce0-3a4f-a8b2-63bd67d52aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:10:07:7f:b8:54:08:fb:4d:90:54:31:1b:f8:2f:cc:96:6d:
         30:0b:04:fa:84:5e:3f:e9:5e:77:93:8c:0b:10:06:fd:63:aa:
         75:b7:aa:e5:5b:b4:20:a1:07:30:4a:5b:9a:6f:b8:20:7e:15:
         a4:06:ee:c3:a0:dd:4e:88:46:fa:b5:c2:6d:78:64:10:a1:3a:
         29:86:c3:8a:d1:fc:30:6c:d9:78:65:03:c1:76:a3:59:22:89:
         6e:20:c6:15:0c:b0:e8:43:ba:2a:cd:85:24:fe:95:34:a4:dc:
         06:20:19:df:88:a2:8d:ea:11:0f:41:14:94:17:e7:41:8d:25:
         ec:2b:eb:29:11:3d:c0:b0:cc:6b:ae:53:cd:1c:09:36:14:66:
         fe:1d:42:68:bf:67:25:e6:e2:92:66:a7:ba:c8:6d:f9:dc:5d:
         64:3e:04:06:3b:0c:ae:e7:cf:6d:b3:ec:44:61:60:e2:f0:6e:
         0f:34:3c:2e:e0:d0:f2:1b:22:8f:70:8a:f3:81:b8:d1:02:92:
         8d:f2:cf:0f:d8:3a:84:13:cf:60:be:3b:a8:e5:5f:29:d2:41:
         6f:a8:4b:99:e3:67:0a:f3:25:15:dc:cf:67:1f:08:88:92:77:
         99:0d:14:fc:e9:a7:13:84:ba:13:75:4b:6e:80:ba:b7:79:05:
         bb:2c:10:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:36:43 2026 by rpki-client