Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5304bdb1-8dc7-3d50-a384-9b5425a9b36a.roa
File:                     5304bdb1-8dc7-3d50-a384-9b5425a9b36a.roa (raw, json)
Hash identifier:          0VdGUzuVIGVJbwkeAFyDzcA09493SAM8orGnkrbyVDw=
Subject key identifier:   9E:DA:28:C4:9D:F9:14:83:DF:C4:70:2F:D1:45:96:BE:BA:FD:D8:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F19FCEDEED04DDDFE081DBA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5304bdb1-8dc7-3d50-a384-9b5425a9b36a.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     396614
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:ed:ee:d0:4d:dd:fe:08:1d:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=f80b49ba-9cd0-4cbe-8786-9edca5b3e02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:9d:81:00:4c:56:b9:84:00:cd:c4:45:8a:
                    39:39:ef:a8:da:8e:19:05:d8:cd:ed:da:34:ab:35:
                    6f:1d:3e:2d:5f:9f:ff:9c:59:03:1e:c5:bf:4d:af:
                    f9:81:8d:11:ff:9b:43:43:55:85:a2:fc:8c:dd:66:
                    18:30:64:fc:03:b0:98:98:2c:d4:b4:9d:9b:30:57:
                    a7:27:7f:bd:f0:5f:5e:25:69:eb:2b:c3:de:f2:f2:
                    f1:30:50:b1:71:4c:a9:a7:af:2b:cf:ce:f0:ed:ff:
                    c7:ad:26:4d:b2:b3:48:fb:b3:5f:28:09:6c:58:ca:
                    79:86:8f:dc:fd:b5:9c:4b:ff:3c:00:d9:14:6c:c4:
                    f4:7f:9a:d3:0f:ef:9b:29:43:d5:5c:b1:0e:4a:17:
                    d7:2f:4e:a0:c8:cf:20:6c:a1:24:a2:59:1d:20:05:
                    2d:45:55:fc:1c:69:3b:35:c5:1e:b3:1d:4a:f6:c0:
                    3d:b3:01:e8:24:0d:96:5f:39:d8:bd:70:85:6e:1d:
                    72:0e:cc:d4:62:27:cd:5b:e1:20:70:58:b4:5c:15:
                    d3:33:41:94:99:3e:3e:69:5d:00:1f:24:f6:18:b1:
                    7f:2f:d7:15:96:b3:65:e4:8f:a2:43:2f:0f:f3:c8:
                    8a:b3:e4:b8:cd:0c:33:ec:8b:97:8c:b6:52:bd:a4:
                    5d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DA:28:C4:9D:F9:14:83:DF:C4:70:2F:D1:45:96:BE:BA:FD:D8:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5304bdb1-8dc7-3d50-a384-9b5425a9b36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:95:91:90:5c:69:98:3a:51:e2:a7:9c:a2:ef:da:fe:f5:2a:
         b7:db:51:f3:08:2d:87:94:0a:0c:e0:7b:08:3f:97:d4:d4:73:
         2a:e8:a1:92:ed:cd:b9:24:1b:c0:d3:5d:3f:fd:8c:fb:71:87:
         77:67:73:bc:92:ab:66:9b:d3:6c:33:5c:87:c6:0d:02:c7:8d:
         82:97:7c:0d:62:7a:85:db:35:63:3b:bc:89:4a:0f:77:46:5d:
         b7:88:32:92:86:f6:07:69:fd:0f:af:d9:e2:93:ec:d0:a8:6d:
         8f:69:1f:87:41:df:8b:2e:18:11:c8:f5:e7:69:35:36:e2:7e:
         64:d2:21:d6:f0:1e:45:15:e9:c3:c5:0e:05:e0:5f:a9:3b:a3:
         c2:c1:8e:69:f4:a7:18:67:f2:3b:53:05:8a:f0:05:7e:ed:8d:
         99:98:e8:ce:7c:28:96:3a:db:65:13:aa:42:64:19:24:52:f0:
         d5:ab:4e:a0:b7:c6:42:55:73:bd:37:70:9c:ae:3f:57:b4:17:
         a3:49:42:bd:00:17:74:39:4e:72:a1:90:2f:26:77:58:b1:96:
         e1:b7:57:a9:2f:6a:7d:e6:46:09:07:82:95:f1:da:20:f5:bf:
         22:2d:39:c8:ef:79:2d:1d:0d:14:57:7d:62:4c:b0:3d:8d:75:
         80:46:47:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:41:07 2026 by rpki-client