Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/357b506c-bd3e-3199-9608-eb9621697a3b.roa
File:                     357b506c-bd3e-3199-9608-eb9621697a3b.roa (raw, json)
Hash identifier:          9DUnWAs2BHZDjc4rUOJQ88ZQ2EohptsuSii6qgVWvZo=
Subject key identifier:   94:8A:E3:E6:9A:5F:84:44:6D:F0:8D:BF:E7:6A:8F:42:89:7F:84:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8CC028BEF3E4E3B46780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/357b506c-bd3e-3199-9608-eb9621697a3b.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396545
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8c:c0:28:be:f3:e4:e3:b4:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=2f4b8fe9-ef5a-4c9a-accf-442c98beb09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7a:04:3b:b3:54:23:42:0b:f1:ee:66:a7:22:
                    0e:e7:ae:f3:9b:14:e2:8b:7a:54:9a:9e:3f:c6:65:
                    be:c6:c0:2b:03:54:55:07:3b:63:fe:99:d7:9e:a1:
                    8d:e3:eb:9c:a7:85:ed:f2:83:38:b5:c9:c8:82:52:
                    cf:45:38:e5:98:ce:50:5f:ce:35:a8:de:96:be:41:
                    96:e4:17:6c:d7:14:06:bb:8a:0e:36:a2:7a:56:0d:
                    6e:d9:10:50:37:b0:ab:7b:c9:61:d9:9d:28:84:3c:
                    6c:24:3f:92:10:91:02:65:f0:04:0e:99:29:b7:6e:
                    41:18:b9:a3:e3:d0:82:e0:37:43:47:31:3e:ee:32:
                    ac:19:57:fe:f7:68:5f:c0:36:5d:22:02:be:fe:d0:
                    28:da:88:20:15:e3:ea:4a:a8:e3:d2:e0:5a:05:aa:
                    91:6d:d8:cc:d3:09:58:88:8b:c5:23:8f:4f:ee:41:
                    92:8f:e0:7a:94:c7:e7:25:30:f5:f3:d8:2d:c5:07:
                    34:67:27:41:11:80:d3:34:37:86:f9:9e:06:1e:e2:
                    17:8d:ce:d7:d8:fd:e8:28:47:ea:50:37:62:38:4a:
                    77:af:c4:18:47:79:c0:ee:75:5e:f2:84:30:f1:48:
                    71:e2:12:8d:7a:d4:2e:e1:c1:4f:d3:fa:c9:11:33:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8A:E3:E6:9A:5F:84:44:6D:F0:8D:BF:E7:6A:8F:42:89:7F:84:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/357b506c-bd3e-3199-9608-eb9621697a3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:48:82:92:66:ae:59:e1:41:f2:78:09:9f:a9:d5:5a:8c:fe:
         8a:be:62:3c:14:ca:f8:14:da:4f:90:ea:52:95:eb:2e:1e:6d:
         b9:77:82:b3:3e:d0:52:f6:da:ae:6b:f8:e7:6d:fb:0f:4f:99:
         22:21:94:52:df:79:7a:e5:30:8f:8d:38:fa:27:48:10:6b:fb:
         6b:57:47:44:95:3c:26:3a:d7:f1:10:d4:b5:ea:b2:c4:12:fa:
         99:4a:3f:98:e3:67:0c:98:ac:34:11:4c:59:7e:4a:8c:1d:ae:
         59:69:8e:b1:1e:45:28:de:13:de:a0:38:28:b2:48:c9:d6:d3:
         a9:35:55:ec:aa:5c:bb:a8:06:45:c5:9e:07:f6:50:9a:ba:52:
         f2:0e:99:72:fe:27:07:1e:bf:9b:22:c7:16:77:d9:38:d0:ca:
         17:5e:c8:f1:0c:9d:e2:a2:44:cd:1c:0b:63:0f:54:f3:9d:ef:
         9e:38:43:0f:3b:c7:6d:53:4c:9c:6e:53:ca:37:65:68:28:93:
         82:c8:bb:9e:82:5e:1e:3f:db:6c:9e:c5:86:a6:ca:92:5f:f8:
         c6:b7:aa:f3:9c:cb:b4:30:2d:7c:02:b6:d4:54:3c:88:96:82:
         66:78:9f:d8:ed:01:cb:49:10:b5:be:3a:62:56:df:9c:02:25:
         d1:3a:98:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:45 2025 by rpki-client