Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2c5774-84a9-36bf-baaf-1c9f08fa772b.roa
File:                     1b2c5774-84a9-36bf-baaf-1c9f08fa772b.roa (raw, json)
Hash identifier:          42n2GkLaLR/vjWNWZqUEs4KSNPH31StJfGX7uoQajJA=
Subject key identifier:   87:D3:B6:41:FE:2E:CE:6D:B6:CC:6D:7B:C9:38:6D:F8:FE:F3:33:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497DA6209375D483261E7AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2c5774-84a9-36bf-baaf-1c9f08fa772b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396547
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:a6:20:93:75:d4:83:26:1e:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ea533f40-3022-4b67-8638-80424e309529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:57:95:94:d5:d7:ab:51:c9:7d:f0:d5:5b:e7:
                    15:02:d1:21:87:dd:50:89:ea:f6:a0:04:a3:e5:91:
                    41:de:90:eb:88:c2:46:c5:e5:99:9f:24:69:16:3d:
                    82:f3:de:e3:a3:86:24:29:79:e4:e6:d7:e0:9b:bc:
                    76:c6:53:22:a3:e2:3b:4d:89:41:18:8a:21:16:76:
                    c9:2c:20:88:29:5d:f9:67:fc:d5:aa:b8:ad:3e:83:
                    7a:bd:88:3c:ec:0e:14:81:97:b6:5a:89:41:4a:a0:
                    db:05:e9:03:f2:35:ab:da:2c:5d:04:6a:4a:8c:e3:
                    6d:a5:0d:ca:d3:b1:70:ec:57:da:f6:4d:6e:b4:be:
                    ca:dc:de:4f:f4:6a:9c:ba:59:ae:86:14:7f:7d:a6:
                    47:d5:62:2b:2d:5a:ef:9d:96:66:a2:06:66:37:bb:
                    16:4c:c3:8c:1f:5d:84:ea:17:dc:cc:fc:65:ee:f7:
                    b3:77:22:d5:a3:32:e9:07:b5:2d:7c:1f:d6:83:57:
                    b9:80:18:6a:81:d6:59:d2:02:73:47:62:0c:c6:97:
                    c7:2e:07:c3:80:ff:4b:2f:9c:45:64:ee:9c:25:0c:
                    9c:f9:ba:65:62:72:84:be:5e:32:bc:9c:56:e9:6c:
                    79:e8:4a:fd:bf:bd:79:94:05:43:3e:b1:bd:3a:48:
                    7d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D3:B6:41:FE:2E:CE:6D:B6:CC:6D:7B:C9:38:6D:F8:FE:F3:33:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2c5774-84a9-36bf-baaf-1c9f08fa772b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:21:f0:e3:c9:6c:88:f7:66:a2:b8:8b:58:19:82:43:aa:07:
         aa:92:a1:e6:1d:89:26:4b:6f:6c:db:26:3a:a3:80:e3:70:81:
         1b:bc:44:21:61:29:bc:7b:35:94:32:51:9e:82:8b:1d:c5:9d:
         52:f9:ff:ef:5a:20:2c:25:86:dd:3a:45:d5:f8:b9:f9:e7:ba:
         56:7b:bb:68:d3:2d:d9:f1:d9:66:2e:42:d6:32:a2:de:f0:33:
         da:2e:64:30:85:4f:6a:62:ec:14:4d:ed:c8:c6:d3:86:ab:71:
         39:ad:0f:a7:31:30:58:50:c7:6f:56:6d:d7:10:fd:d4:4e:87:
         0c:dc:0f:24:d2:39:b4:38:ed:7c:8a:7e:b6:91:b9:ae:ea:30:
         1b:12:a0:27:a7:b4:b5:8d:41:66:62:f2:6f:76:68:8b:5c:0e:
         af:60:cb:75:4f:77:d0:56:b7:a6:59:d6:51:52:eb:5c:08:cd:
         0a:1c:81:4e:ce:21:75:d3:57:cb:4a:65:83:6a:15:48:0c:2e:
         3e:da:c1:e4:eb:b2:98:07:12:d8:d3:27:a4:c8:f3:14:18:bd:
         8e:52:9c:22:4a:77:9b:5f:0b:8d:ce:c0:0c:ca:f5:62:5f:f5:
         d2:bd:6d:eb:d8:80:a4:4c:2d:71:96:47:07:eb:ba:08:36:f9:
         15:77:57:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:28:15 2026 by rpki-client