Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e0a8d59-aaf0-3a40-9c4c-05756cbdab6a.roa
File:                     7e0a8d59-aaf0-3a40-9c4c-05756cbdab6a.roa (raw, json)
Hash identifier:          x3huaRAYb16LnvfZ6TD9vmQP0lJEeDQnEKvszSLDodk=
Subject key identifier:   50:ED:B7:70:30:08:21:81:85:0C:34:F4:25:D7:5B:A0:A8:EA:26:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D97556BDA3E3EDE1FE2A26880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e0a8d59-aaf0-3a40-9c4c-05756cbdab6a.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     397199
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:6b:da:3e:3e:de:1f:e2:a2:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=2122f015-b584-401c-9711-192563235202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:df:0c:a5:d2:82:48:56:13:7b:00:e4:58:29:
                    63:2d:9f:f8:f7:26:d7:08:11:8e:d1:12:c0:cb:e2:
                    31:18:26:ec:03:1b:56:79:e9:b2:5b:cd:5e:47:45:
                    4f:96:1e:eb:20:da:55:6b:64:b5:c1:0d:3c:41:7c:
                    7f:40:82:bb:04:b4:44:f5:15:c6:fc:b7:71:9b:a2:
                    72:a8:95:98:d8:13:d0:f6:f9:8d:ec:b3:8e:0d:40:
                    59:73:39:0a:d8:33:53:83:f1:58:7c:d9:34:04:88:
                    40:ef:12:48:a9:2f:6b:68:2e:87:01:af:c8:ec:97:
                    02:fa:d2:51:5e:ae:d6:9f:b5:64:d2:d8:84:6c:c8:
                    4e:29:6b:67:c0:55:20:66:f9:21:b9:08:39:21:14:
                    bf:80:c0:09:f7:80:27:5c:5c:06:44:73:01:da:29:
                    5d:bd:ca:97:02:2b:db:07:a5:97:fe:6a:bb:e8:59:
                    67:eb:74:7f:cf:f9:98:dc:4d:9e:04:b0:8d:d0:db:
                    61:83:dd:37:3d:83:aa:80:ba:a0:4b:1b:b7:0f:6b:
                    68:0f:6a:5e:9f:07:35:31:ad:53:54:c4:b0:ef:46:
                    2c:2d:80:f7:c1:65:c9:15:e7:d6:22:1b:63:bc:de:
                    2b:eb:f2:7e:88:b8:47:b0:fe:7e:05:38:57:24:93:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:ED:B7:70:30:08:21:81:85:0C:34:F4:25:D7:5B:A0:A8:EA:26:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e0a8d59-aaf0-3a40-9c4c-05756cbdab6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a3:03:ba:34:45:2b:09:ce:68:73:14:06:b4:17:85:b9:60:
         96:65:e1:e7:0f:88:89:35:83:ec:80:2a:19:f3:59:87:c3:b8:
         33:ac:35:e8:ab:ea:e1:d6:b8:d0:a8:c4:ab:96:0d:72:92:1f:
         3e:90:2a:15:18:af:5b:88:3c:ae:c6:37:64:02:e2:3f:c9:ce:
         99:37:99:4f:c3:9c:fe:1e:fd:3f:ed:4b:13:f6:98:df:b3:13:
         c3:4f:8e:d4:3f:65:f3:bc:da:f9:26:da:e4:d0:8d:2b:45:f7:
         6a:7c:99:1e:62:40:d7:cd:86:9d:40:da:9e:b0:17:92:89:30:
         99:04:7d:3c:8f:3a:c0:94:bc:d7:a6:8a:5b:27:f6:ff:3d:66:
         f8:42:99:0d:f1:36:6a:53:40:2b:a9:a7:ca:1b:26:c9:2d:19:
         40:35:0a:aa:44:62:e0:f0:fa:d4:87:96:87:0e:b3:2f:d0:4c:
         42:0d:2a:16:1e:7d:f7:f2:e1:fd:9d:68:1c:97:9d:31:c9:75:
         16:1d:97:69:fb:98:ec:ad:3e:d4:8c:ec:12:a6:f0:81:eb:ff:
         a9:28:08:7a:ab:bc:00:f0:8f:09:bb:a1:d3:6d:ed:3c:7c:f0:
         69:9d:d6:aa:bb:a5:07:c0:f7:4f:f4:e1:c2:ad:a8:52:28:a5:
         dc:a1:21:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:42 2026 by rpki-client