Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f4c810d-b98c-344f-90bc-be674b2d63af.roa
File:                     4f4c810d-b98c-344f-90bc-be674b2d63af.roa (raw, json)
Hash identifier:          BlKRHjpSZraZlSleSCfG2G1O5zpzwjzRC20kYFTk6Nc=
Subject key identifier:   D5:B0:C4:34:53:86:F8:63:1E:F9:99:EA:E5:A1:2D:B9:20:CD:82:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8F3B8503A2858834A4EE3680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f4c810d-b98c-344f-90bc-be674b2d63af.roa
Signing time:             Fri 18 Jul 2025 13:01:05 +0000
ROA not before:           Fri 18 Jul 2025 13:01:05 +0000
ROA not after:            Thu 16 Oct 2025 13:01:05 +0000
asID:                     397210
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8f:3b:85:03:a2:85:88:34:a4:ee:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 13:01:05 2025 GMT
            Not After : Oct 16 13:01:05 2025 GMT
        Subject: CN=ec2a08cd-46b9-4ce3-b089-993f190c48e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:30:2b:17:4b:a1:d7:a1:88:d2:22:29:60:3f:
                    3d:42:a0:df:a0:cc:8a:c1:6d:48:e0:ec:5e:94:af:
                    a7:26:00:a1:e5:bc:01:d5:24:d6:73:df:fe:f1:4f:
                    e7:f7:c7:40:82:0d:3c:f4:bf:52:5e:ca:d8:b7:af:
                    b1:9a:46:2a:8d:13:09:95:76:bd:9d:6f:5c:d4:c7:
                    bc:cf:a1:f5:8d:06:90:2d:8a:0a:ec:69:a7:5b:35:
                    62:f9:c6:e9:36:48:e6:cd:59:bd:4b:c5:ea:d2:a5:
                    65:70:c6:bc:be:e0:c0:92:69:39:52:10:65:ff:3a:
                    d4:1c:59:87:cf:1a:f9:63:d4:56:41:ba:f1:71:8e:
                    4e:b3:7a:b9:1b:4b:3a:a0:7f:c5:a1:d8:73:c0:10:
                    30:66:45:62:be:f3:8d:68:c5:81:3e:d5:f2:df:79:
                    aa:af:7b:10:21:9d:d1:26:54:72:10:7c:e1:4e:51:
                    0b:84:64:82:e1:8b:42:2e:0e:dc:6e:3e:80:96:a3:
                    50:ec:c0:a1:04:8f:94:c4:60:ad:37:fd:79:cb:87:
                    56:07:58:d9:97:e9:e4:19:b8:c9:65:c9:e7:53:87:
                    92:4d:bb:59:67:46:6c:8c:6e:be:1e:c3:7b:3d:6e:
                    39:d5:bd:d0:6b:c5:96:c8:fb:26:eb:08:3d:fb:7a:
                    bc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B0:C4:34:53:86:F8:63:1E:F9:99:EA:E5:A1:2D:B9:20:CD:82:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f4c810d-b98c-344f-90bc-be674b2d63af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ab:66:17:26:6b:79:30:ee:f5:6b:f5:84:14:82:8e:54:23:
         7b:8b:1e:3a:17:4d:6d:b2:d1:25:04:1c:f4:f6:82:69:f1:86:
         ed:b3:93:bf:d0:70:55:f3:86:5e:70:e7:49:4c:c6:18:59:cc:
         c4:b8:59:f8:44:ea:dd:fe:6c:b8:d6:2d:7a:40:9d:6f:40:9c:
         81:9f:8d:70:bd:71:11:2a:a4:5c:a3:fa:c1:5d:62:11:60:bd:
         98:0d:aa:98:9d:50:86:39:df:58:0d:94:c6:5f:30:73:74:f4:
         82:6b:11:b6:54:bf:9a:5c:c3:76:79:51:48:b3:50:05:da:39:
         e1:e4:45:d5:d8:88:33:69:bd:50:7d:7d:ed:63:94:bc:b9:37:
         d8:70:de:fd:78:0c:29:bd:13:87:7e:3d:49:34:0f:f2:94:0b:
         bf:d7:78:80:32:91:98:18:57:cb:db:0c:83:58:c4:82:6a:55:
         d9:8e:a8:19:6b:40:2e:83:b4:f4:f2:35:9b:16:83:62:62:d9:
         21:b5:1e:76:d5:01:a1:b3:c7:f2:09:b0:0c:71:12:5b:cd:a2:
         c9:be:d2:d9:6a:5f:46:3c:34:ed:06:43:f4:d1:a7:8e:6b:1c:
         5c:5e:4d:db:ec:c5:df:b2:1e:3c:72:66:95:7c:d0:a5:44:71:
         10:19:8b:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqPO4UDooWINKTuNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxODEzMDEwNVoXDTI1MTAxNjEzMDEwNVowLzEtMCsGA1UEAxMk
ZWMyYTA4Y2QtNDZiOS00Y2UzLWIwODktOTkzZjE5MGM0OGU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzArF0uh16GI0iIpYD89QqDfoMyKwW1I4Oxe
lK+nJgCh5bwB1STWc9/+8U/n98dAgg089L9SXsrYt6+xmkYqjRMJlXa9nW9c1Me8
z6H1jQaQLYoK7GmnWzVi+cbpNkjmzVm9S8Xq0qVlcMa8vuDAkmk5UhBl/zrUHFmH
zxr5Y9RWQbrxcY5Os3q5G0s6oH/FodhzwBAwZkVivvONaMWBPtXy33mqr3sQIZ3R
JlRyEHzhTlELhGSC4YtCLg7cbj6AlqNQ7MChBI+UxGCtN/15y4dWB1jZl+nkGbjJ
ZcnnU4eSTbtZZ0ZsjG6+HsN7PW451b3Qa8WWyPsm6wg9+3q8OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWwxDRThvhjHvmZ6uWhLbkgzYJMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGY0YzgxMGQtYjk4Yy0z
NDRmLTkwYmMtYmU2NzRiMmQ2M2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJCrZhcma3kw7vVr9YQUgo5UI3uLHjoXTW2y0SUEHPT2gmnxhu2zk7/Q
cFXzhl5w50lMxhhZzMS4WfhE6t3+bLjWLXpAnW9AnIGfjXC9cREqpFyj+sFdYhFg
vZgNqpidUIY531gNlMZfMHN09IJrEbZUv5pcw3Z5UUizUAXaOeHkRdXYiDNpvVB9
fe1jlLy5N9hw3v14DCm9E4d+PUk0D/KUC7/XeIAykZgYV8vbDINYxIJqVdmOqBlr
QC6DtPTyNZsWg2Ji2SG1HnbVAaGzx/IJsAxxElvNosm+0tlqX0Y8NO0GQ/TRp45r
HFxeTdvsxd+yHjxyZpV80KVEcRAZiyo=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:14:22 2025 by rpki-client