Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cc36797-bbea-3417-b137-bb83bc3b7064.roa
File:                     3cc36797-bbea-3417-b137-bb83bc3b7064.roa (raw, json)
Hash identifier:          kqYiujD+a6yKHEbbovTc1MeUlR9WGNdkz2t0Wuz6Fzk=
Subject key identifier:   13:A2:C7:FF:56:64:F9:53:AD:CE:4B:94:E6:9A:05:99:A2:35:6A:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4974295ED753090ACD331980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cc36797-bbea-3417-b137-bb83bc3b7064.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397196
IP address blocks:        192.68.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:29:5e:d7:53:09:0a:cd:33:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=62d35a31-4396-4638-95a9-0b33d8b4b089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:37:99:ad:f3:75:57:b7:bf:98:a1:2c:06:88:
                    8d:ff:49:64:d5:e9:7a:05:cd:e0:1b:81:cb:ae:3a:
                    1e:cc:04:8c:bd:0b:8e:cf:6c:3c:10:ee:24:99:60:
                    0f:76:04:4d:5f:67:73:8d:6d:66:45:bf:22:66:0a:
                    eb:3e:26:7d:09:3a:2e:1f:83:8e:56:c7:61:3b:0d:
                    0c:21:4c:55:73:0b:41:20:35:e0:81:d9:0a:00:44:
                    8b:03:50:5d:25:e6:fb:df:b6:1c:3b:52:c2:75:80:
                    81:04:0f:87:67:a7:99:9e:e1:d0:b1:ff:05:c6:e4:
                    88:93:c2:97:0f:02:ed:ee:ee:57:04:85:08:00:83:
                    30:8a:99:65:ad:9c:1c:94:2e:58:bd:a1:68:8a:f5:
                    f5:75:04:99:89:15:b2:5b:9b:ff:61:38:9b:b7:ef:
                    21:88:68:f1:80:cd:34:2c:7c:30:96:1d:d0:ee:5c:
                    10:2e:29:9e:87:44:4f:ba:a1:93:17:10:25:5e:08:
                    6f:52:c7:6a:1e:5e:58:d3:a2:ae:69:50:14:f0:68:
                    5f:40:11:be:77:bf:f8:5e:c5:24:e5:83:0c:ad:ba:
                    13:c6:12:d1:36:e5:e1:7f:d9:cd:40:73:63:2c:fa:
                    b3:9b:0b:f8:d5:ac:e2:a0:8b:b7:8a:98:b2:5a:8c:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A2:C7:FF:56:64:F9:53:AD:CE:4B:94:E6:9A:05:99:A2:35:6A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cc36797-bbea-3417-b137-bb83bc3b7064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:7f:22:05:0a:c6:01:a5:d2:74:06:58:a2:16:61:e8:02:b7:
         ee:22:4f:a6:5c:80:d2:59:65:68:d8:b6:65:eb:fb:b3:2d:13:
         d9:80:bc:ed:20:df:6b:cd:75:63:95:ea:b7:df:17:de:87:f5:
         42:59:8c:8b:74:d3:1e:cf:77:10:93:1b:74:15:d0:e4:6e:3d:
         cf:0f:33:9a:2e:14:5a:35:a2:9d:4b:d7:2f:67:d7:2c:a5:06:
         fb:9d:1d:b5:d7:14:b6:8b:4e:22:4c:a2:3b:c5:70:b6:07:60:
         64:3c:77:6e:39:fa:5a:b4:1f:d8:04:c0:44:78:fc:02:60:73:
         7a:05:25:d5:f2:2d:fb:c5:42:c5:e7:08:ae:2c:a6:61:3f:72:
         e7:81:07:9a:08:82:5f:b0:23:3b:44:8d:da:46:77:dd:ad:14:
         13:75:5e:30:aa:cd:f3:ab:67:46:c5:24:cb:fc:63:66:ef:e0:
         c4:0b:24:20:d5:54:8c:0b:d4:89:5b:c1:fe:4a:5e:99:a7:ba:
         7f:43:69:ce:41:72:ae:88:03:f5:4c:e4:1f:91:d5:83:3b:be:
         9c:52:ff:c9:97:b9:2b:e9:c4:d7:f2:51:ed:ff:9d:b2:dc:70:
         c8:88:21:09:c7:01:7d:27:70:30:24:03:53:83:27:50:93:7f:
         e7:19:f4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:53:01 2026 by rpki-client