Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cdf171e-46bc-3d2c-8998-65eea4aafcac.roa
File:                     3cdf171e-46bc-3d2c-8998-65eea4aafcac.roa (raw, json)
Hash identifier:          g8UFBHkEDMciqRFtCdyCqr8PWx2B3uUdeOcs/5ukNgE=
Subject key identifier:   33:BA:43:4A:69:C0:EF:C3:B8:82:43:E5:15:22:1C:31:01:E8:D3:16
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8EAFAC188D05F6D8A880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cdf171e-46bc-3d2c-8998-65eea4aafcac.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396827
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8e:af:ac:18:8d:05:f6:d8:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=a51d29dc-f804-4d58-bdfc-fd6a7c1a0ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:9b:11:38:ed:7e:ce:8d:c8:d1:1e:e4:1e:
                    f0:dd:a6:f2:70:3f:98:ee:90:ee:87:12:f6:a5:f3:
                    68:0b:0c:d1:03:19:63:49:01:4b:4f:ba:73:8e:8f:
                    e2:86:08:df:9c:a2:4c:0c:b5:44:c6:6c:b0:7b:f3:
                    0d:11:19:cf:9d:0b:e0:44:d2:db:aa:f0:d0:45:92:
                    6c:a5:09:00:75:8e:be:33:e6:e8:d2:f1:87:fc:ff:
                    6f:43:49:ab:ec:91:c8:4f:3e:75:40:4d:45:e1:29:
                    00:80:ce:14:46:54:20:30:31:b9:43:eb:d4:90:f4:
                    10:9e:f8:a8:40:a6:f6:ec:dd:01:78:64:7e:59:1b:
                    c1:86:c4:db:7b:3d:51:26:be:3a:43:d2:27:86:d0:
                    99:f0:30:62:1b:7e:08:92:c6:0d:49:02:51:d6:dc:
                    8f:fa:2b:58:05:03:30:ee:7a:73:69:14:35:f9:7c:
                    56:70:bf:be:bf:3e:c4:89:91:78:8f:b8:6a:57:86:
                    8b:6b:9a:1d:ea:53:83:03:70:f6:c4:48:c9:80:c2:
                    75:dd:19:d7:c7:11:6a:5c:29:5f:b2:9d:a2:b3:bf:
                    34:12:9b:c7:5c:a2:44:04:06:61:67:35:c8:b7:af:
                    28:48:07:6a:12:6d:73:31:18:bd:1b:25:3a:66:96:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BA:43:4A:69:C0:EF:C3:B8:82:43:E5:15:22:1C:31:01:E8:D3:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cdf171e-46bc-3d2c-8998-65eea4aafcac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:90:a5:34:44:70:0f:a2:bd:0b:d2:e3:27:65:1c:6d:f9:
         f5:2c:ed:44:b1:43:8f:dc:c3:7f:77:74:64:fb:c8:03:e9:f8:
         05:9f:ef:1f:54:3e:47:e1:53:e6:6a:15:a2:3d:4a:27:0e:0b:
         9f:de:58:ef:6b:7a:47:97:84:0e:18:61:6b:4d:c6:54:4f:49:
         b2:2c:6b:87:08:92:e1:96:52:23:04:9b:72:7b:c3:68:7f:d5:
         df:36:ed:25:74:fc:70:75:37:e4:12:43:36:85:97:a8:d4:e9:
         b5:2d:82:dc:4d:e6:6c:89:6c:96:50:85:1b:99:30:c6:82:5c:
         da:ff:c3:29:71:91:0e:70:64:86:a3:7f:fa:00:d8:c4:cd:70:
         31:89:7d:fb:76:6e:1f:a1:75:0a:ba:2e:fa:f4:1b:2c:06:83:
         9b:86:46:10:a9:af:41:17:54:cf:24:c0:68:09:7f:c3:6a:19:
         2c:34:f0:40:d9:93:11:23:b0:71:09:0f:7d:10:80:d0:19:97:
         e2:27:1b:a7:3c:f3:29:57:60:55:d8:25:2a:a7:67:cf:8e:d3:
         df:af:ce:ab:a4:b0:ac:c4:e1:f5:04:43:01:9d:73:bf:56:27:
         0e:26:57:ce:77:7f:99:9e:b6:74:d5:4e:95:50:c6:1a:b0:c5:
         de:2e:41:c5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfI6vrBiNBfbYqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
YTUxZDI5ZGMtZjgwNC00ZDU4LWJkZmMtZmQ2YTdjMWEwZWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUqbETjtfs6NyNEe5B7w3abycD+Y7pDuhxL2
pfNoCwzRAxljSQFLT7pzjo/ihgjfnKJMDLVExmywe/MNERnPnQvgRNLbqvDQRZJs
pQkAdY6+M+bo0vGH/P9vQ0mr7JHITz51QE1F4SkAgM4URlQgMDG5Q+vUkPQQnvio
QKb27N0BeGR+WRvBhsTbez1RJr46Q9InhtCZ8DBiG34IksYNSQJR1tyP+itYBQMw
7npzaRQ1+XxWcL++vz7EiZF4j7hqV4aLa5od6lODA3D2xEjJgMJ13RnXxxFqXClf
sp2is780EpvHXKJEBAZhZzXIt68oSAdqEm1zMRi9GyU6ZpZkdQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDO6Q0ppwO/DuIJD5RUiHDEB6NMWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2NkZjE3MWUtNDZiYy0z
ZDJjLTg5OTgtNjVlZWE0YWFmY2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAUz5ClNERwD6K9C9LjJ2Ucbfn1LO1EsUOP3MN/d3Rk+8gD6fgFn+8f
VD5H4VPmahWiPUonDguf3ljva3pHl4QOGGFrTcZUT0myLGuHCJLhllIjBJtye8No
f9XfNu0ldPxwdTfkEkM2hZeo1Om1LYLcTeZsiWyWUIUbmTDGglza/8MpcZEOcGSG
o3/6ANjEzXAxiX37dm4foXUKui769BssBoObhkYQqa9BF1TPJMBoCX/DahksNPBA
2ZMRI7BxCQ99EIDQGZfiJxunPPMpV2BV2CUqp2fPjtPfr86rpLCsxOH1BEMBnXO/
VicOJlfOd3+ZnrZ01U6VUMYasMXeLkHF
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:05:59 2025 by rpki-client