Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a14ce4b1-f379-38c6-8279-d99e03a68013.roa
File:                     a14ce4b1-f379-38c6-8279-d99e03a68013.roa (raw, json)
Hash identifier:          SKfNkdfWZWFw+04ouBbIpHb2skMFPeiWFkzsqSKqZg0=
Subject key identifier:   07:35:99:D8:55:C3:AC:2C:D3:11:F4:CB:89:10:1E:6B:94:46:7C:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE84B52020D3FF35A5E666000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a14ce4b1-f379-38c6-8279-d99e03a68013.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     36632
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:52:02:0d:3f:f3:5a:5e:66:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=0e387a8e-1ee9-4a72-9cd4-48f2f9603806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:70:4d:75:db:7c:3b:c5:01:ab:f5:fe:31:90:
                    98:c8:99:1b:1a:0b:d8:1b:4f:cd:cc:8d:fb:e9:70:
                    ca:e5:1b:85:d4:2b:55:6b:b4:47:ee:d8:27:b7:30:
                    ba:7b:be:a9:f6:a7:60:02:71:e9:9b:ba:b9:4e:11:
                    7d:80:4d:ee:51:66:4a:87:db:f5:e8:ec:49:46:f3:
                    a8:76:c2:e2:46:f3:7b:e8:d9:64:b0:c3:21:49:45:
                    e0:fb:8f:a1:87:09:aa:48:52:9d:19:34:b7:6f:36:
                    09:d2:14:a1:3d:1d:07:2c:ac:ca:f2:be:18:e0:61:
                    f6:cf:90:03:56:7b:40:c1:1e:b3:3c:bd:eb:09:58:
                    6c:86:61:b8:24:6d:0c:e5:25:50:45:75:4a:0e:e8:
                    b2:7a:08:3a:59:5e:fc:db:81:64:0f:cb:38:62:84:
                    c3:a7:90:0b:6a:94:be:41:b8:e9:2b:12:a0:d1:0d:
                    19:54:30:5e:69:f2:7d:d6:2b:31:3c:57:b5:b5:a0:
                    c4:72:1d:65:74:0a:0e:7e:d6:ff:d2:d7:27:2f:f4:
                    e5:58:60:7d:d1:fc:b4:f9:db:82:bf:3f:2c:e8:f6:
                    9c:6d:2d:66:8d:60:40:38:09:d2:6f:73:f7:57:c3:
                    49:28:bc:64:ea:ae:03:1b:59:30:b0:11:1c:dd:fa:
                    aa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:35:99:D8:55:C3:AC:2C:D3:11:F4:CB:89:10:1E:6B:94:46:7C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a14ce4b1-f379-38c6-8279-d99e03a68013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:59:29:a8:00:38:97:df:be:72:a0:fd:89:a1:83:ba:cc:4a:
         92:2c:95:3a:59:aa:04:52:1e:87:1a:50:9f:05:ad:a5:7b:73:
         93:5d:31:29:3b:97:56:7a:1d:68:36:6b:f5:9a:dd:28:b3:35:
         54:43:f0:71:eb:d6:21:40:38:84:c9:46:e6:e5:20:9d:e4:ca:
         3b:a8:b5:75:16:bc:d4:58:72:79:85:32:f1:66:88:91:18:fd:
         60:50:c0:fc:a5:9f:58:92:ff:c8:d5:94:67:bd:17:bf:59:7f:
         8a:48:c5:c4:c0:37:f4:5f:f6:87:88:c1:76:e5:db:2f:60:ec:
         aa:6a:32:d5:bc:97:df:75:59:92:a6:fd:3a:ba:06:e1:ea:c7:
         a8:96:6a:9c:ae:9c:15:1a:a4:a8:a1:31:99:48:5a:03:c7:bb:
         8d:2a:c9:f2:09:74:90:e2:47:52:17:f7:df:11:e2:de:ec:15:
         17:0e:01:ab:0e:00:25:94:4f:52:fa:1b:3d:f1:6a:79:28:14:
         1e:a0:9e:3c:70:31:9f:35:58:23:d0:ea:38:00:7e:35:d3:61:
         83:f3:a2:89:da:29:36:76:ad:c1:48:76:66:ee:56:42:ac:fb:
         fc:38:4e:c0:d0:df:96:49:e3:e2:d7:b8:4c:08:95:04:39:36:
         ba:8e:24:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:30:51 2026 by rpki-client