Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d428083-837e-3b7a-b490-7b10864d80ef.roa
File:                     3d428083-837e-3b7a-b490-7b10864d80ef.roa (raw, json)
Hash identifier:          BKjH1TbQOJxGHH0aqNIsNvfE/jTDfxTsaedTo0YLk2o=
Subject key identifier:   01:09:77:AF:46:2E:72:B0:C8:84:D1:38:F0:05:C8:9E:FD:C1:CF:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8F3B7F02369314B346660DB0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d428083-837e-3b7a-b490-7b10864d80ef.roa
Signing time:             Fri 18 Jul 2025 13:01:05 +0000
ROA not before:           Fri 18 Jul 2025 13:01:05 +0000
ROA not after:            Thu 16 Oct 2025 13:01:05 +0000
asID:                     25485
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8f:3b:7f:02:36:93:14:b3:46:66:0d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 13:01:05 2025 GMT
            Not After : Oct 16 13:01:05 2025 GMT
        Subject: CN=1721f9c7-8777-4332-ae0d-8785195e229e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:d7:c7:7d:d7:d5:25:f9:61:f6:12:33:9c:
                    27:e6:f7:4d:c1:f4:d8:32:71:6a:82:9f:6f:e8:7b:
                    32:33:1e:a1:d5:1a:38:01:13:d3:f1:32:33:85:1c:
                    f4:8f:0c:be:b4:30:78:2d:97:1d:b4:3a:79:cd:be:
                    f1:87:7f:6b:4d:f1:bc:65:64:4f:4c:e4:e5:aa:41:
                    16:98:f7:db:4c:8c:65:ba:3d:4b:8b:2a:ce:5a:8e:
                    bd:6c:a4:2f:40:f7:c9:d7:af:51:6b:67:64:dc:48:
                    97:27:4c:a4:10:08:b3:0d:9f:68:38:ce:3c:7b:ec:
                    8d:54:d2:aa:be:01:45:5a:94:92:af:56:50:71:00:
                    2f:e8:55:1f:6c:f2:72:b4:8c:69:90:db:19:5c:e9:
                    c7:1f:52:71:07:8d:f6:01:20:d4:40:36:5b:d7:30:
                    3c:aa:6c:25:47:1f:b8:fb:c9:f2:08:36:0f:c6:03:
                    91:06:fc:3b:dd:4d:df:2d:a1:82:e9:50:77:a4:8e:
                    f4:63:b8:ba:ca:cb:42:db:c1:ad:a5:fb:72:08:3c:
                    ba:d8:bb:05:3e:85:05:c5:ae:21:7e:3d:33:ea:bd:
                    54:f7:b5:9b:12:4f:71:61:c8:b5:09:9f:e4:04:89:
                    7c:58:d4:42:49:81:44:54:38:a8:08:16:4d:70:d8:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:09:77:AF:46:2E:72:B0:C8:84:D1:38:F0:05:C8:9E:FD:C1:CF:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d428083-837e-3b7a-b490-7b10864d80ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ec:8b:50:24:3a:84:95:a6:22:88:7f:75:15:c2:15:dc:a8:
         53:5e:c5:79:4d:33:c5:78:56:4f:5f:41:d9:35:eb:9f:66:47:
         d0:29:7a:76:86:25:c2:5e:77:5d:ce:00:8c:f3:9f:21:4b:64:
         87:73:20:83:28:45:87:33:b9:4e:c7:b0:78:76:8c:12:cc:fb:
         50:7b:58:2a:2f:45:04:ba:18:f4:98:17:a8:5c:a6:1c:b1:53:
         33:4c:ea:4f:19:a5:ea:a3:ff:83:f2:bd:03:20:b5:61:1d:8d:
         54:69:37:5d:ff:07:e9:ea:97:55:fc:4c:23:f3:2e:e7:3c:53:
         95:5c:bf:8e:cf:be:53:8c:49:3d:47:3c:51:db:54:8f:58:9e:
         de:f7:73:cf:90:c2:74:cc:1e:a5:5f:c0:f2:24:ac:0e:08:9a:
         80:fe:a7:35:37:41:0e:d5:a0:eb:39:8a:bb:9a:9e:aa:4f:89:
         1e:9d:05:9b:8a:40:01:2f:cb:45:be:b4:9a:5e:d4:62:da:4c:
         72:cd:3f:96:2b:50:f8:48:cb:d4:4f:c7:9f:c5:68:e8:f7:25:
         eb:31:c5:1f:00:37:34:26:76:de:1f:36:86:5b:c2:32:da:60:
         27:23:68:e0:a9:3e:db:4e:c4:88:43:56:16:d7:ee:24:19:ee:
         92:2b:00:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:57:15 2025 by rpki-client