Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db1393d3-47f3-39d3-84ec-203a9059d0e4.roa
File:                     db1393d3-47f3-39d3-84ec-203a9059d0e4.roa (raw, json)
Hash identifier:          3bQuF5rslxPPtSXozlCXkynSJ0xUXEWoEm1gZlNLTRg=
Subject key identifier:   CE:C6:2D:14:65:F0:1F:21:44:D0:7D:2C:65:A6:C2:AF:18:4A:51:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D975569E926CB381990194800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db1393d3-47f3-39d3-84ec-203a9059d0e4.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     396580
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:69:e9:26:cb:38:19:90:19:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=6c84a8d7-e4a5-43ed-aa50-835387755338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:31:f6:6d:44:c6:df:ce:05:d2:e8:a2:9e:
                    c8:82:e1:a7:cf:2a:9d:e2:d6:66:c1:c4:84:c8:e6:
                    a7:aa:a6:94:4b:a5:ce:19:0f:1c:e9:fd:0d:20:ee:
                    d0:9b:22:53:df:ec:7f:a0:74:06:3c:8d:f7:d8:91:
                    4e:43:cd:c5:d4:f6:2d:30:a6:27:4e:a1:f0:a0:22:
                    64:bf:92:d6:9a:77:28:b5:9f:2e:8e:95:5f:5a:26:
                    cf:88:b2:d6:42:02:48:4c:16:c3:fa:e4:b9:72:37:
                    d5:1a:f6:33:22:0f:78:19:9d:3f:db:8c:24:5d:44:
                    40:f6:53:fb:c1:83:36:53:db:91:c6:ad:a7:e3:d4:
                    ea:45:e7:d8:85:23:58:42:f0:f1:99:9d:86:f7:7d:
                    a8:fa:52:64:79:a1:7b:3a:0d:af:40:b5:7f:06:4d:
                    d3:fd:01:68:38:84:ed:93:ba:b6:29:f3:de:ed:76:
                    c2:e8:fe:31:37:43:7e:e4:8a:48:87:d8:ed:d5:2e:
                    d6:91:56:5c:19:f2:79:8f:10:b6:2e:ae:49:90:67:
                    14:56:bc:dc:aa:6d:c1:af:50:22:f7:02:6e:63:de:
                    0a:92:75:07:7c:0a:57:c4:81:20:df:b0:6e:b3:11:
                    7f:41:b7:4e:d0:af:e4:12:6d:14:62:d7:63:cf:d5:
                    53:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C6:2D:14:65:F0:1F:21:44:D0:7D:2C:65:A6:C2:AF:18:4A:51:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db1393d3-47f3-39d3-84ec-203a9059d0e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5c:85:29:3f:38:be:c8:1b:02:72:39:16:bb:cc:41:07:40:
         db:a8:78:4f:57:37:20:d3:e4:17:73:90:c3:36:8a:92:74:ab:
         a3:18:f6:e5:b7:d4:dc:b9:74:ac:83:91:00:4f:39:aa:21:65:
         a0:09:18:bf:c0:e7:30:bc:8b:38:be:db:e4:6b:99:5a:5a:c2:
         bf:28:4b:69:5f:d6:f7:3e:66:a0:6b:61:04:7a:78:7f:1a:c2:
         4a:a4:b8:a3:53:d6:d7:75:7d:2c:49:dd:e5:00:bf:a0:42:cb:
         0d:68:3a:e6:45:49:d8:59:4c:b7:c3:e4:fa:47:9a:59:f3:61:
         da:66:42:43:68:7d:6f:71:4b:ea:fd:d5:bc:bf:57:63:f5:aa:
         01:33:cf:94:35:f7:ce:6b:8a:a1:4d:16:10:e8:b0:9c:58:12:
         6b:6b:cf:32:94:4e:9f:59:3b:72:9c:6f:8d:1b:a2:56:6f:4e:
         a9:4d:80:01:ed:69:16:3e:9f:50:65:d0:73:9f:e8:75:59:03:
         99:6f:23:a8:de:a2:12:2c:3f:1b:66:8e:cc:12:90:cc:47:59:
         81:4e:1b:01:07:e0:e7:d3:54:2c:6f:d8:13:a4:33:b6:05:11:
         0d:69:09:47:ab:4e:6e:6a:4a:2e:19:20:67:6e:68:b9:62:e5:
         07:93:63:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:11 2026 by rpki-client