Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/079ee32d-ddc3-3713-9616-c25a3fa8b4e1.roa
File:                     079ee32d-ddc3-3713-9616-c25a3fa8b4e1.roa (raw, json)
Hash identifier:          gqfSQMqZANHTGf2dOstW2xB4ObIwe9Fr9mAJ5m1zIXg=
Subject key identifier:   A6:89:C2:FC:1F:D9:2B:48:68:2D:A1:11:1E:C2:E9:DE:32:DF:2F:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497DA5CB7A46ACEBB4838D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/079ee32d-ddc3-3713-9616-c25a3fa8b4e1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396613
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:a5:cb:7a:46:ac:eb:b4:83:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cf41d8b7-37e8-44d3-b31c-41de53befac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ef:25:0d:af:ec:90:bf:45:ea:3c:47:81:cc:
                    40:c9:cc:9d:88:87:f5:1b:dd:26:95:fb:1b:6d:4e:
                    d1:67:ae:b6:95:58:e6:8c:a7:cc:fa:77:d7:1f:46:
                    a4:10:2b:79:ae:f0:f4:14:c0:c0:7f:df:9c:6a:1f:
                    59:e1:92:10:b9:50:93:d1:90:af:66:23:ce:d6:c9:
                    05:f3:c7:9b:9c:4c:26:00:93:16:13:9b:ea:6f:89:
                    2c:25:22:e6:16:fc:1f:35:a3:0d:ad:06:87:0b:d1:
                    14:dd:33:f6:84:b2:3b:32:e8:90:d5:9e:df:d9:8d:
                    be:71:31:ef:a2:06:50:a7:9d:c1:42:66:3c:e2:6b:
                    0d:bf:03:57:83:53:a3:8a:7b:2e:2e:8b:25:d6:9d:
                    72:e3:cc:f1:d9:2f:83:a8:ff:7a:02:07:1a:2f:29:
                    cf:41:2f:34:d7:0d:d9:61:82:83:a8:61:47:cd:49:
                    fd:4c:c1:3b:37:b9:0d:6a:64:4a:85:2e:b9:2a:31:
                    61:d4:0b:bb:94:3d:f4:15:c5:ed:1b:08:d7:cb:68:
                    1e:43:1e:e5:f0:fd:be:83:a9:ba:e3:25:71:ea:e4:
                    5a:83:d1:3e:36:6c:a5:dd:e0:e2:13:51:18:28:12:
                    94:e6:09:bf:73:45:11:3a:9d:95:2f:0b:b5:99:a0:
                    e3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:89:C2:FC:1F:D9:2B:48:68:2D:A1:11:1E:C2:E9:DE:32:DF:2F:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/079ee32d-ddc3-3713-9616-c25a3fa8b4e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:29:e1:7c:80:42:d9:37:66:61:f8:e9:06:05:49:0f:9f:75:
         47:ab:e0:75:8a:cb:23:75:fb:d5:02:ae:72:45:4a:78:db:fd:
         f6:91:b4:78:06:6b:78:91:5a:03:7a:36:4e:fb:15:26:5e:0a:
         32:9e:c9:34:04:c2:9b:43:28:e1:d8:4a:f6:e3:1e:fa:f6:9d:
         44:71:fb:76:04:2c:f1:51:61:e8:52:6b:31:64:d2:ca:c3:ed:
         dd:26:4f:0d:db:1d:0f:19:e1:33:30:bf:ea:6c:97:d1:4e:0c:
         33:43:76:b6:78:27:38:f3:8c:6c:36:c0:26:12:66:36:97:58:
         b1:75:d6:4c:33:8b:66:c4:1a:e7:9a:09:d8:60:a7:e2:ea:33:
         8d:1f:79:da:72:db:0e:6d:cb:2c:f0:c0:c6:26:ad:e5:19:bb:
         ff:b7:96:f1:ca:1a:a5:b6:38:1c:4e:42:62:87:cf:3e:6b:d0:
         25:52:5f:e0:8d:ea:51:57:84:ef:21:03:1e:22:6e:02:c6:2b:
         00:af:c1:93:be:93:52:a0:a9:da:52:53:2d:1a:b0:a2:7f:ba:
         93:00:23:95:73:e5:74:16:a0:68:13:56:4d:3b:f9:1f:ec:0b:
         5d:b6:d8:9a:4c:44:c8:3b:bb:26:42:58:79:7a:04:06:e2:b8:
         6f:d2:9f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:29:45 2026 by rpki-client