Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04ff8464-6a29-3205-930a-2175d61c18a8.roa
File:                     04ff8464-6a29-3205-930a-2175d61c18a8.roa (raw, json)
Hash identifier:          5WK3hHlmkQRZbLJcLcDBQUInO5t2Yn6SZOrfLici8xE=
Subject key identifier:   F4:BB:CC:B5:2E:CE:A5:C0:69:E6:4A:FB:DB:76:5D:7F:CF:BE:D1:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE84B4EAA9BB015B5537FE280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04ff8464-6a29-3205-930a-2175d61c18a8.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     397204
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:4e:aa:9b:b0:15:b5:53:7f:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=b71c6464-e0ab-4cc1-b7be-cf7676c19801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f8:8a:91:e7:a7:66:6a:b5:24:72:39:77:ee:
                    dc:5f:5c:87:0a:a8:72:e5:3e:95:90:fa:5a:ee:52:
                    5f:86:a4:33:49:3a:3f:47:9d:aa:42:00:89:6d:1e:
                    50:62:0a:31:b3:d3:4b:60:7b:fd:41:2d:f6:0b:12:
                    0a:1a:a7:44:c5:31:89:88:d7:21:d1:55:94:a9:35:
                    56:33:54:2b:88:e5:96:26:3e:87:21:cd:a9:4b:38:
                    00:57:42:88:41:2b:05:36:43:68:e0:28:a2:41:f2:
                    1a:5a:64:8e:8f:a6:c6:41:ec:5c:bb:53:ec:1f:b5:
                    b7:b2:5c:40:35:5a:71:ad:fd:15:d5:6b:9d:d3:ed:
                    92:45:70:e3:d8:5b:64:9e:19:1b:a0:79:bf:fc:19:
                    2d:9a:fd:92:63:e5:1f:d4:fc:72:10:cb:51:ee:3e:
                    15:07:c7:90:87:50:5b:f9:aa:8b:18:3c:37:0d:45:
                    33:40:85:15:ff:87:a1:07:f3:15:b3:cc:93:09:21:
                    6a:52:28:50:aa:17:01:85:27:82:3a:44:cc:26:c3:
                    95:da:7c:30:6a:e4:75:02:07:7c:3b:27:c3:41:88:
                    c1:be:4f:5e:36:b3:57:75:05:50:d6:22:d5:6a:ea:
                    88:51:89:f3:90:ce:01:a9:19:f2:26:1c:eb:c9:27:
                    fe:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BB:CC:B5:2E:CE:A5:C0:69:E6:4A:FB:DB:76:5D:7F:CF:BE:D1:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04ff8464-6a29-3205-930a-2175d61c18a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:60:6f:ea:a1:84:b4:0f:b4:2a:1b:36:59:f9:95:ee:f0:1c:
         7a:20:29:e4:25:29:83:97:6d:10:42:e6:67:e1:3c:5a:d5:4b:
         70:52:94:59:67:1c:fe:df:8d:b5:d6:2e:19:10:f1:71:bf:a6:
         5d:80:55:45:e2:68:49:7a:e8:f5:12:f6:65:3a:c4:e5:f5:72:
         47:ca:27:e1:af:51:9d:b2:46:f2:68:e5:8c:90:7d:c9:47:a2:
         1c:d2:e9:99:06:88:6f:17:cb:26:09:c3:9d:ef:8f:58:03:af:
         de:96:a2:62:ad:5b:75:60:eb:81:c2:57:03:ac:8e:b2:a5:f7:
         85:75:d2:9b:e2:49:83:87:58:35:6a:e5:8d:93:a6:64:59:09:
         54:88:73:ea:68:e9:4f:fc:4f:b7:e8:5f:bb:b4:95:3b:71:47:
         08:5a:fe:f1:f2:3f:89:99:ed:08:a7:36:84:be:d5:9c:80:90:
         6b:bb:7e:30:14:7c:a3:5d:81:93:39:30:87:5e:26:ef:43:1a:
         5f:60:21:89:1e:39:4f:03:a8:ef:e4:a4:6e:4b:c2:47:ae:26:
         f8:55:40:e1:c7:45:b8:96:d5:ef:19:23:f9:b6:8f:6f:33:cf:
         dc:42:d6:ae:55:91:59:d2:70:9d:fb:0a:9b:7e:e6:23:7e:93:
         f6:56:f2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:26:53 2026 by rpki-client