Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9722dab7-2dd5-3563-ba22-f0910f7fc2aa.roa
File:                     9722dab7-2dd5-3563-ba22-f0910f7fc2aa.roa (raw, json)
Hash identifier:          5+0qB1JmqLO1FrTlriVkH8V0RVXJaSGFPLFZROBIol4=
Subject key identifier:   A3:0B:E1:8B:AA:8F:15:55:02:5D:42:61:A8:16:C9:7F:72:FD:4B:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D07AD0CC1B448A6F7C80E9F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9722dab7-2dd5-3563-ba22-f0910f7fc2aa.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     396612
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:0c:c1:b4:48:a6:f7:c8:0e:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=ec6cf1d3-f295-4a5c-8f18-8396d5665020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:86:06:25:7d:50:15:86:3a:9e:0b:b2:c6:c3:
                    64:8f:d7:35:4b:4e:f4:e2:59:eb:20:6b:df:a0:49:
                    aa:f6:13:dd:54:69:1a:2d:4b:bf:a8:14:70:b3:6c:
                    3b:3e:4c:67:18:a4:92:07:24:b4:84:e0:8d:b8:02:
                    c4:c1:7b:8f:51:cf:9c:d9:98:be:b1:f3:8b:f0:35:
                    f3:95:6f:58:5c:f8:c0:a7:1b:4a:2b:97:f9:5f:3d:
                    71:7f:49:85:20:ba:e8:9e:95:82:6a:a9:e2:15:10:
                    32:6c:80:99:fb:32:cc:51:c0:e9:8a:56:07:da:fa:
                    65:b3:8a:be:60:eb:e1:0f:dd:14:2c:0b:76:d6:47:
                    25:56:91:ac:9b:6b:b7:a3:55:f8:85:54:94:c4:89:
                    3b:62:e1:43:8d:2c:d5:cd:c7:41:8e:51:1a:e1:d1:
                    52:51:9d:c7:b4:c5:bd:9d:dd:1d:9d:96:74:e6:e0:
                    7f:a5:9f:14:94:14:97:65:f7:95:36:d0:4c:7d:fd:
                    74:bb:52:c7:7a:21:2e:45:a3:c4:b3:fd:25:b9:ab:
                    ee:1a:72:f6:1c:da:8f:26:ec:ea:e4:0b:70:22:d1:
                    dc:4f:42:52:26:1e:ef:d8:66:18:8b:f1:dd:1f:a0:
                    cb:29:2d:d2:4d:7b:e2:8b:06:d2:27:ce:38:55:be:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0B:E1:8B:AA:8F:15:55:02:5D:42:61:A8:16:C9:7F:72:FD:4B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9722dab7-2dd5-3563-ba22-f0910f7fc2aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:f8:ee:a8:a4:41:e5:33:16:f3:eb:b8:7d:69:59:49:37:1a:
         9d:40:95:49:5f:ea:04:22:09:89:9b:74:41:5c:12:63:0d:9d:
         6d:70:2d:f0:b3:30:59:1a:bb:cb:b6:4a:0b:e3:43:75:c2:0f:
         c6:04:f0:ab:21:24:d2:67:f6:71:ae:88:11:30:d0:cd:04:d6:
         f5:67:d3:0c:79:6e:07:78:8a:38:6d:ee:cf:cd:d4:f5:ef:ef:
         ee:ee:46:cc:93:5b:d3:aa:16:23:4a:82:8e:72:e2:cc:5d:c6:
         89:31:e3:5c:b1:11:5b:be:d5:66:86:f8:74:c0:b2:79:3f:16:
         f3:f6:28:cd:9a:cc:07:7b:d2:66:32:81:01:96:16:b9:63:44:
         41:3c:e9:ac:b9:91:4c:38:7d:1b:5f:3b:7e:83:7e:85:86:6a:
         8e:f4:5d:83:58:73:d6:c3:36:3a:05:63:31:3b:f8:6c:a3:63:
         42:e7:1b:e9:1f:bc:b2:5c:70:1d:7d:58:5b:96:c5:03:40:0c:
         70:71:ed:9c:5b:34:93:7a:99:2e:6f:3d:ef:08:35:fa:86:73:
         5e:be:c5:d1:e6:59:83:cc:f6:84:0b:df:6a:03:a0:89:c8:97:
         9d:87:ec:88:84:96:4f:d0:98:42:b1:e0:83:e7:df:c2:29:65:
         1f:65:2e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:55 2026 by rpki-client