Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a636a453-b71e-34ab-a061-2bc47c57b022.roa
File:                     a636a453-b71e-34ab-a061-2bc47c57b022.roa (raw, json)
Hash identifier:          XhXJJTmyI6yBcljgnwTexsG0egYAfBLQkErJaZl5BUE=
Subject key identifier:   8D:D7:B3:19:0F:57:BE:D3:AF:F1:BC:51:76:80:90:A4:D0:6A:3F:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E614516E51A7FD3CF83EBBEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a636a453-b71e-34ab-a061-2bc47c57b022.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     40647
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:16:e5:1a:7f:d3:cf:83:eb:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=da022739-9b3a-49ad-9c6b-2f4679f92b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6f:c2:4f:91:67:26:bc:1a:c5:2b:e6:bf:f2:
                    d9:a7:9f:ea:e9:42:ef:48:ed:b2:27:6a:52:f6:41:
                    99:4e:8e:58:6c:f4:2c:ea:79:26:79:e0:2b:69:fb:
                    cb:3a:25:73:b6:66:b1:36:de:a4:61:49:95:b5:fd:
                    e5:96:2b:68:d9:87:5f:dc:0b:29:a5:4c:d2:cc:2e:
                    42:f5:4b:a7:16:8a:1e:c9:36:85:e6:f4:28:44:e4:
                    56:6c:b4:74:73:91:54:01:62:d6:69:fb:af:eb:dc:
                    98:fd:48:24:45:04:28:fc:44:69:59:c7:f9:58:c7:
                    58:87:d2:46:59:1f:b8:79:8f:61:c7:7d:23:23:ec:
                    89:c1:a5:99:2d:cb:36:c0:5c:4b:95:67:2c:b2:58:
                    27:51:84:9f:5e:54:d6:b2:a9:59:58:40:7b:4f:1f:
                    cd:03:47:b2:22:12:7f:ff:07:d1:86:df:15:c3:84:
                    87:79:95:e7:e6:4a:8d:25:13:1d:69:f8:84:52:67:
                    78:82:37:23:93:e1:93:0f:73:b5:a0:55:e7:2e:ab:
                    74:4d:cf:dd:e2:eb:e0:c8:fc:6e:4d:cf:cf:a2:e2:
                    59:38:cd:89:71:67:d1:3e:2b:1b:b3:94:05:6a:5c:
                    22:b4:8c:07:3d:c6:cd:a6:b5:f3:dd:e8:ee:95:7d:
                    6f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D7:B3:19:0F:57:BE:D3:AF:F1:BC:51:76:80:90:A4:D0:6A:3F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a636a453-b71e-34ab-a061-2bc47c57b022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:95:02:9b:f6:77:0e:64:b4:5c:34:0d:4a:ea:86:eb:a0:63:
         a9:5b:af:44:2d:b5:c8:28:59:cb:20:48:01:5c:23:28:68:4a:
         d7:6e:81:35:8e:01:f0:29:27:28:d1:06:d4:72:48:6c:88:d0:
         c8:1d:87:92:d3:48:04:1e:4b:78:f6:a1:e0:66:c8:aa:8a:bb:
         f2:aa:8f:9c:22:54:df:04:56:11:62:b0:26:6f:09:38:71:14:
         46:2a:54:6a:58:34:3c:4f:95:81:6d:1e:ae:10:a1:1e:79:ca:
         9c:e2:5c:3e:74:8f:d7:20:47:9d:d6:00:ed:7e:80:7d:83:98:
         18:46:f0:22:04:41:11:1f:cb:f8:6f:9a:42:31:6f:7d:ea:8b:
         65:cc:01:b5:db:94:d5:0c:ec:bf:12:d7:79:8c:0b:c8:d6:e9:
         86:0b:d3:b5:67:99:35:7e:1d:f0:ba:1c:e8:d2:ad:7e:7c:84:
         82:3f:a9:21:9d:9a:ff:ec:5c:8e:5d:ab:ef:ca:85:d0:32:d6:
         3c:18:4b:e6:5a:92:6b:c1:de:c7:25:1c:31:4f:49:ad:42:c2:
         64:7a:9f:69:07:be:bb:33:dd:01:7a:37:71:71:73:2c:1f:2c:
         8c:12:fb:ca:76:87:72:e5:16:49:e9:18:91:df:d6:8d:91:bf:
         bc:90:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:24 2026 by rpki-client