Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3721b45d-bd3c-30f0-bf2a-8be93f3df635.roa
File:                     3721b45d-bd3c-30f0-bf2a-8be93f3df635.roa (raw, json)
Hash identifier:          WcAdI4u4hmxoRz1r3KMrMvbUmMvrVMH5ygeJHANB/FE=
Subject key identifier:   AE:C2:46:29:81:E3:8D:73:C3:0A:8E:A5:9C:9C:B5:8C:E0:49:CE:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C84C58FB09B67C2E84700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3721b45d-bd3c-30f0-bf2a-8be93f3df635.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396582
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:84:c5:8f:b0:9b:67:c2:e8:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=756fcb6a-c8d2-44ab-a724-0790cb323ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:b0:9d:99:16:90:23:ff:94:38:19:21:6e:
                    87:7b:cf:a9:c2:d2:5d:22:4f:73:38:f5:55:a6:34:
                    1a:fa:73:a5:c5:92:89:ae:db:c2:b7:81:3a:98:d7:
                    ef:9c:17:b1:6c:1d:5e:2a:43:2d:fe:85:8c:cf:2a:
                    a3:d2:46:b7:b6:cc:71:da:c6:ab:a3:29:37:40:af:
                    85:32:50:69:78:a4:ad:04:00:df:d5:4a:45:6e:e5:
                    37:d8:0b:42:35:ce:f8:ca:4d:7f:b2:af:b8:0d:13:
                    55:b0:f7:20:fb:3f:9b:d3:37:16:61:a6:76:c9:80:
                    92:df:d6:5d:09:92:f8:1b:a8:dc:e4:60:44:27:ee:
                    61:af:14:fc:b3:f8:0f:46:37:21:0d:44:22:5b:e9:
                    df:66:42:e6:62:02:a4:e4:eb:27:73:87:54:ed:69:
                    85:ab:07:71:65:8e:b4:97:bc:f0:32:d6:47:b0:aa:
                    88:a8:db:22:eb:d3:be:22:15:2c:91:a9:40:05:e2:
                    f9:7e:a2:ad:9e:74:d1:7c:39:4f:97:e1:f5:48:27:
                    40:cb:ff:13:54:8d:91:fe:2e:d5:e8:58:ac:0b:54:
                    ca:87:57:55:29:40:c1:71:12:00:10:53:3d:3a:5b:
                    d6:92:ad:92:ec:6e:cf:78:0b:11:10:67:94:d0:3a:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C2:46:29:81:E3:8D:73:C3:0A:8E:A5:9C:9C:B5:8C:E0:49:CE:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3721b45d-bd3c-30f0-bf2a-8be93f3df635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:03:e0:09:27:72:02:0a:73:59:40:6a:78:df:b7:4c:0c:64:
         9f:4e:4e:ab:a6:b2:f0:d7:1f:33:32:c2:8c:b6:81:37:5e:5c:
         ab:3f:bc:f0:1e:b0:91:dd:5b:83:3b:52:b7:48:cd:49:f0:4e:
         42:f0:c4:a3:77:51:ea:47:46:8c:41:5c:d0:44:e6:a0:04:9d:
         b3:77:9f:27:eb:d4:f4:1d:e9:d6:de:35:a1:7e:96:c1:56:5f:
         7e:f5:c7:14:3c:01:96:d8:3d:c4:ce:3a:23:78:68:e5:3f:ec:
         e0:72:04:bc:fb:5a:5f:03:9f:7b:6a:9e:f7:fa:01:99:79:5d:
         3f:82:b3:de:8f:4f:4a:9d:04:2c:01:f0:57:49:5c:36:8d:70:
         e4:18:54:b8:20:36:8b:da:8a:92:bf:2f:e7:be:ad:09:86:6d:
         2e:24:7b:6f:95:e6:8c:dc:9b:c6:95:89:05:65:9f:cc:2d:ea:
         98:b3:42:73:21:72:13:cc:97:84:10:3d:5a:c7:7b:52:85:5e:
         39:a9:bf:fe:0c:e4:59:c2:9e:e1:71:1a:7b:8a:0e:69:7d:3a:
         c7:c8:ae:21:e1:4e:d6:bb:30:58:94:b2:27:24:c7:46:ed:71:
         6d:bd:ab:e6:34:00:96:ac:06:2c:b5:a1:0d:9f:fb:9a:c5:31:
         ee:82:5e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:11:50 2025 by rpki-client