Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e32dd0c2-9f36-3db6-b6aa-332ee52f088f.roa
File:                     e32dd0c2-9f36-3db6-b6aa-332ee52f088f.roa (raw, json)
Hash identifier:          tnuJRDUqXzRvZO0fCvbD4FkzynuQvRxYvRXQY05Qmwc=
Subject key identifier:   15:85:9B:D8:FB:83:77:3F:D9:DD:F5:67:88:77:F8:D6:D5:B3:CE:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79229F1001EE6F6A5AEE680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e32dd0c2-9f36-3db6-b6aa-332ee52f088f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397206
IP address blocks:        192.68.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:29:f1:00:1e:e6:f6:a5:ae:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4dfa3a9e-f7f6-4b7c-92c7-a64b8df8e494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:18:40:ce:80:9f:22:16:54:b5:1a:0e:73:bf:
                    d9:e7:28:50:9e:0e:9b:69:40:fc:1e:ac:25:0b:c4:
                    8d:0d:74:3c:e8:da:a7:1a:46:e8:38:e1:0d:60:05:
                    d2:dd:a2:8a:fa:09:97:db:ea:6c:d6:42:67:18:9c:
                    31:6b:0b:01:e5:7f:55:47:9f:31:ac:a7:7f:65:98:
                    6e:2e:c0:e9:aa:1c:ac:28:5f:09:4d:ad:e9:9c:36:
                    25:e7:34:2d:da:0f:29:bd:21:21:2e:ff:5e:98:28:
                    e9:f0:9f:63:9c:8f:3b:14:92:06:33:4a:7b:b0:ab:
                    0e:4c:4e:64:68:17:b5:cb:63:9f:57:bc:18:25:e6:
                    7c:a2:64:be:16:4e:ef:79:02:0a:bf:72:d7:2f:90:
                    2e:d0:d4:16:ab:3f:f3:77:b1:ab:45:64:ed:bf:e8:
                    c2:8b:3d:85:d7:20:29:cb:99:b0:30:24:b0:e0:7a:
                    6b:c0:41:a3:1f:42:b9:77:4d:83:9a:95:7e:fa:33:
                    23:91:6d:f7:cf:ed:de:ba:47:bd:b8:0e:f3:e6:97:
                    3f:72:4e:b3:03:d0:c2:a5:22:a1:86:ec:28:c4:17:
                    90:1c:42:76:1c:bd:26:fe:23:7d:90:fc:21:17:c4:
                    75:fa:22:45:fa:4d:de:81:3e:54:0a:6d:b4:5b:bf:
                    88:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:85:9B:D8:FB:83:77:3F:D9:DD:F5:67:88:77:F8:D6:D5:B3:CE:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e32dd0c2-9f36-3db6-b6aa-332ee52f088f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:40:a7:b5:d2:c7:58:98:6c:f9:8b:0c:bd:ae:cf:62:e4:44:
         1c:30:8e:a6:19:1f:21:54:8f:b9:67:0b:a8:d2:65:62:30:e8:
         b7:56:af:00:23:d0:16:91:3d:a7:be:9c:05:4c:9e:da:09:07:
         fd:d8:eb:cc:bb:10:3c:a0:11:c4:b6:5b:e5:44:e1:7e:14:9c:
         a7:e4:41:ed:fe:19:f7:22:67:a8:6f:fc:05:c9:e0:85:9c:98:
         15:05:fc:49:eb:9b:a0:50:77:d9:3c:e6:5b:f9:c0:75:dd:bf:
         5e:78:2a:fc:52:41:a1:73:ea:d5:b0:54:47:fb:5e:06:3e:11:
         45:7c:ed:27:bf:9c:be:dc:3f:9e:72:33:b4:5a:10:97:27:dc:
         ac:d6:88:55:d7:e7:b5:0f:bc:f6:26:bb:5e:90:4f:0e:0e:1e:
         3f:87:c6:87:9c:03:68:5c:a2:17:59:f2:5e:e7:97:00:1b:16:
         e2:7a:b6:6e:2d:d9:54:8c:9c:5a:c2:55:95:2f:be:b7:6d:33:
         8e:05:0b:04:c1:97:ec:3f:b7:9e:b5:f4:ef:c0:26:21:a0:92:
         54:d0:d7:1b:da:86:b8:09:cc:b9:cf:0e:a5:60:e4:90:66:24:
         4b:9b:2e:88:96:d8:ee:e5:8a:5d:10:de:0f:18:73:a5:e2:08:
         fd:c9:fb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:51:58 2026 by rpki-client