Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e6489a-a7da-364e-a1a6-f2459dc66045.roa
File:                     d4e6489a-a7da-364e-a1a6-f2459dc66045.roa (raw, json)
Hash identifier:          HKOenzahSMWzJkgMeofHjV36URVk6P7wbomods+k8oY=
Subject key identifier:   BC:46:7C:9A:4D:03:07:B3:BA:D9:64:B4:8D:72:A2:01:80:EA:F5:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA791EA12276E39E574EDE580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e6489a-a7da-364e-a1a6-f2459dc66045.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10515
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:ea:12:27:6e:39:e5:74:ed:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=84e2f1e9-b413-43b2-b7cf-abca361371a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a9:9f:44:56:91:ec:39:09:9e:37:d3:91:16:
                    12:89:ee:12:46:07:d0:9b:da:56:48:d3:cc:b3:82:
                    db:96:1f:30:e1:6f:0f:20:0b:62:9d:7d:0d:3f:26:
                    b0:30:bb:30:ec:09:19:db:1c:9d:51:4b:c1:9f:a8:
                    70:05:5f:44:6b:5f:c9:8e:54:28:04:07:45:59:ff:
                    c8:4f:1a:6f:e5:9d:a0:c2:e3:3c:46:ab:18:24:0b:
                    23:5e:c4:0c:84:97:14:d1:c4:03:a3:a0:7f:d4:1a:
                    74:c0:a1:ea:4f:e6:d3:df:e8:55:35:b8:b5:1b:fc:
                    6a:da:5a:8a:ba:45:0c:82:28:88:75:38:bc:b0:35:
                    04:a4:36:6d:c7:de:50:0d:0c:f7:e1:b2:f4:a3:ed:
                    3e:a0:45:02:e7:6a:32:b9:50:87:5f:96:7d:e7:d7:
                    d0:a0:c9:06:67:53:3d:00:b6:c8:ca:4e:ff:00:f1:
                    7f:48:93:62:2a:af:eb:59:90:36:27:6c:a9:02:34:
                    e8:15:e6:9e:24:fb:c9:5b:e7:91:c5:10:16:ec:31:
                    60:63:31:0e:74:fa:70:7e:49:61:ef:12:ae:98:b0:
                    88:dd:f3:12:3e:60:cd:ca:bb:7d:5d:57:46:5f:32:
                    df:9f:fd:4c:04:5b:87:2a:08:c7:b8:09:76:38:1d:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:46:7C:9A:4D:03:07:B3:BA:D9:64:B4:8D:72:A2:01:80:EA:F5:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e6489a-a7da-364e-a1a6-f2459dc66045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:c5:f0:34:4a:5d:9e:fe:08:df:99:31:29:85:b9:dc:c1:ba:
         f6:a6:94:d3:2b:a6:03:30:f8:a2:93:4a:bd:70:08:84:d1:71:
         db:f6:9c:91:7d:77:49:3c:48:c0:d8:9a:ac:1d:00:6e:ee:59:
         20:8e:96:c1:8c:63:c4:eb:56:7e:df:e3:43:f0:61:b5:12:fd:
         52:69:cf:f6:a4:77:16:7e:54:f8:63:0e:5d:4d:89:3a:82:96:
         b0:ac:aa:f1:ed:d5:dd:bf:d2:e5:b1:d5:f2:8b:59:d6:47:81:
         bb:d3:3d:77:a0:2e:a7:39:b7:fc:e2:9b:d4:28:1a:7b:9e:5e:
         a2:b2:ca:b8:a5:61:f6:89:28:8d:ad:33:0d:fa:3a:76:dd:6e:
         49:97:7c:95:81:ca:63:73:c9:16:12:a0:7e:81:15:73:3b:39:
         bb:41:b4:f7:a7:27:10:6d:80:52:3b:f3:88:1a:08:b1:6d:f8:
         2a:db:ee:2c:67:c3:df:ea:c8:49:3a:e4:d4:bd:fa:c6:87:21:
         9f:9e:71:fa:4d:13:10:ad:af:52:26:3a:d8:e3:09:4a:0c:d9:
         bf:59:4b:9a:10:eb:cc:70:6b:83:20:3c:6c:ee:b6:fc:e6:45:
         22:45:3d:6f:79:9a:a4:38:be:24:de:c9:90:fc:87:29:42:27:
         1a:47:9b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:55:15 2026 by rpki-client