Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3bd7b13-1cd1-338b-aca2-3f37d1cee184.roa
File:                     a3bd7b13-1cd1-338b-aca2-3f37d1cee184.roa (raw, json)
Hash identifier:          H0vxLU/NwIG//gOS9RJOaByuV38ZCNBQCn7AA3r7ZKQ=
Subject key identifier:   EB:06:B9:BB:22:18:77:67:01:08:D5:8C:29:25:56:79:D0:61:B6:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D97556BFC5F4E3B04FE8D6670
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3bd7b13-1cd1-338b-aca2-3f37d1cee184.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     396555
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:6b:fc:5f:4e:3b:04:fe:8d:66:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=5ade55fe-be76-4d80-8a9a-f0a01726046e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c1:0e:eb:83:2f:0b:e5:5d:e3:44:24:08:b6:
                    bb:4a:12:18:c3:f8:09:6d:ee:04:79:98:74:b9:1e:
                    6f:16:c0:90:4a:0a:d8:3e:f8:a9:2a:b2:64:8f:35:
                    53:1e:59:00:19:6a:19:a6:24:97:95:2c:aa:a6:a7:
                    6c:0b:8e:66:1b:1e:94:f4:77:4e:a5:87:d0:25:17:
                    00:39:9a:79:7e:38:0e:53:6d:92:7e:94:17:76:24:
                    4f:94:33:a5:61:aa:a9:3e:24:02:ae:95:c1:f2:2a:
                    3c:6f:4a:c9:d9:ac:63:d9:a2:3b:4d:55:a3:b3:c4:
                    7c:9c:df:b5:af:75:93:ae:3e:bd:f7:e6:55:5e:68:
                    13:3d:b6:ad:e5:ae:45:32:08:31:eb:c1:17:f2:04:
                    7d:74:8b:aa:6d:0e:c3:9e:5d:f5:c2:87:2d:1c:5f:
                    d3:31:a0:78:2b:45:58:3f:b5:c1:2a:df:39:7d:ea:
                    38:40:89:ab:c5:a6:d3:d0:51:7c:69:3f:2d:d5:e2:
                    48:d5:85:65:78:44:32:03:a0:a1:f2:b3:ae:cb:6e:
                    60:bc:6b:7c:35:73:6a:01:40:7a:40:e3:e9:60:73:
                    81:76:51:bc:3e:eb:3e:8c:19:ae:e1:d6:5e:e2:c5:
                    32:b6:32:b6:90:bf:15:6a:b6:7e:df:ab:23:92:51:
                    d9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:06:B9:BB:22:18:77:67:01:08:D5:8C:29:25:56:79:D0:61:B6:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3bd7b13-1cd1-338b-aca2-3f37d1cee184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ce:1e:22:dd:52:d5:2f:d3:96:11:cf:5e:05:65:3f:d3:88:
         0d:39:95:b2:3e:c3:b3:ef:0f:38:57:06:62:a9:42:04:17:a8:
         15:e6:6c:f2:d6:99:5c:cd:fe:1a:6e:8a:ac:92:81:5a:b7:0e:
         3a:41:03:e6:93:7a:87:1a:66:df:e2:bb:97:2a:ea:06:ff:25:
         43:bd:ab:1d:c0:68:b7:0c:68:aa:4f:dd:e9:24:c3:7d:fc:05:
         ef:79:23:b4:c0:fe:7c:36:c6:61:f9:a8:3f:b5:54:9f:5c:88:
         e0:35:1f:59:e0:09:f1:93:dc:4d:e6:ed:54:b5:82:19:99:a6:
         b6:98:81:86:9f:41:4f:51:29:6e:80:c4:80:a8:40:2f:bb:e3:
         15:09:98:9e:49:0a:42:60:36:bf:5f:d0:2a:c2:a2:43:ca:c9:
         7a:03:82:77:87:9a:3a:bd:3c:03:de:cf:0b:2f:c4:8f:6c:d5:
         fd:3e:4d:f7:9a:32:90:84:4b:ba:44:74:9f:2f:6b:ee:dd:73:
         7f:f2:f1:91:bd:05:4b:f3:b0:af:d8:21:79:f3:88:43:6c:21:
         b6:0a:18:b5:2e:4a:f0:ae:15:df:54:ef:35:40:64:37:e9:0b:
         3f:f4:89:d5:0a:72:a1:b1:7b:f7:46:5e:ad:9d:fb:d5:5f:13:
         a1:ce:d1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:17:40 2026 by rpki-client