Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e782c8d-891e-3a05-a768-01697267a8ef.roa
File:                     3e782c8d-891e-3a05-a768-01697267a8ef.roa (raw, json)
Hash identifier:          l4tvAxM7TUAPYt54eTUZqQQoFns0VkziIEE8EULS7AI=
Subject key identifier:   E7:B1:36:A5:0F:54:A9:B2:DF:15:B6:41:5F:56:2A:71:3E:51:57:34
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C85D8621E8EFFB9F34040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e782c8d-891e-3a05-a768-01697267a8ef.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396583
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:85:d8:62:1e:8e:ff:b9:f3:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=619dfed2-2bd0-4eb7-8e3f-992088d1dd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:46:c1:b3:a5:06:46:79:0a:b4:51:ed:66:74:
                    8b:03:ba:7f:1f:f8:2a:91:6d:29:29:fd:f7:a2:3d:
                    a1:4b:30:71:ee:3f:55:c6:b3:a6:82:1d:d2:47:bd:
                    09:fc:e8:2d:a3:28:03:59:e6:22:57:c6:88:45:d9:
                    12:7e:25:35:ab:c2:86:1d:54:bf:88:ca:41:67:22:
                    6e:9d:9b:11:4c:5f:bb:4e:1e:c6:45:c0:be:8d:67:
                    31:56:e6:42:e7:84:48:2b:43:52:91:08:bb:18:ed:
                    98:5e:8b:05:17:29:d2:35:1a:d1:17:bb:a5:42:55:
                    62:d6:fb:5b:33:4b:dc:9f:02:ea:0a:24:2d:30:f0:
                    ab:59:36:2b:6c:bd:5e:6b:96:b9:39:2a:3a:8d:af:
                    8b:b4:a2:4a:2c:a8:4e:b3:89:25:de:d1:16:be:33:
                    f1:bf:0f:f7:9d:29:c1:54:28:c0:56:94:4d:ad:3a:
                    44:09:08:9f:6b:84:f2:ce:dd:43:d6:26:57:8f:21:
                    f4:1a:0e:95:a4:31:62:e5:b2:06:d0:3d:5f:72:c2:
                    9b:3b:6b:6d:be:2b:52:e6:04:db:92:9a:53:84:31:
                    97:fa:6e:d4:33:74:ea:b1:20:f5:f1:d1:f0:b7:78:
                    ca:c0:47:4f:d0:09:4e:5d:60:e5:8d:f6:f4:9e:e6:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B1:36:A5:0F:54:A9:B2:DF:15:B6:41:5F:56:2A:71:3E:51:57:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e782c8d-891e-3a05-a768-01697267a8ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:5a:a0:95:4b:d9:13:f5:d3:7b:16:dc:5a:d9:da:dc:ed:3a:
         5f:08:b5:4a:ab:6e:ec:3c:64:14:9e:e0:74:9e:5a:ea:0e:d8:
         1c:70:b9:b1:6a:cb:46:c4:09:b1:72:9b:ee:59:0a:dd:d6:8d:
         5b:bd:0e:b4:04:2a:89:e3:23:2d:94:96:c2:0d:a6:59:41:33:
         7f:e6:1a:a9:3b:1e:23:1f:43:2e:50:15:95:08:1e:08:e7:57:
         61:4c:6f:b6:f5:ea:68:75:ba:1d:74:ce:93:30:aa:9c:5d:0a:
         e9:59:f9:e9:a5:6f:1b:1c:fc:91:47:d4:3a:31:63:48:f8:45:
         89:da:0d:02:5d:c5:75:49:f8:86:93:e8:cc:5b:38:85:3c:19:
         5b:09:5e:78:a4:d0:9f:1d:d7:5a:c9:cd:5c:a9:73:0c:f5:0e:
         a2:0b:59:e5:22:79:ea:71:7e:1d:83:13:5f:b2:a1:97:a6:c1:
         a5:0b:c6:d9:c0:52:b2:1a:1f:24:e0:14:46:2b:05:97:a5:99:
         4f:71:8a:7e:6e:fb:f8:8d:5b:44:c7:a7:1c:0d:ae:fc:28:4d:
         3a:11:1b:96:be:1f:38:d0:9a:ee:31:92:7c:4d:51:97:aa:94:
         a4:9c:01:6a:49:7c:63:0c:67:95:e6:12:f7:1f:df:67:ad:f4:
         22:c4:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:14:13 2025 by rpki-client