Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631c15a4-6688-31a7-bd2f-c9287494a540.roa
File:                     631c15a4-6688-31a7-bd2f-c9287494a540.roa (raw, json)
Hash identifier:          ghp2L+cKqpfICeKDYTN7xYDIFumQgC7AecI6CVb/ReA=
Subject key identifier:   3C:5C:EB:88:56:1F:DB:E3:B3:E2:9C:6D:9A:23:21:03:F1:B1:3F:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C906DC7C361590D7FAC54
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631c15a4-6688-31a7-bd2f-c9287494a540.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396605
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:90:6d:c7:c3:61:59:0d:7f:ac:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=b24b6fe3-bf29-4a1d-9a00-f16b39c9d2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:26:7e:21:1a:99:8d:33:98:ea:4b:51:ea:
                    f5:9c:05:c6:e4:77:b3:ee:7b:1e:89:19:40:a2:a6:
                    5b:0b:17:35:62:05:9c:7c:e6:8b:76:a9:e4:39:1e:
                    df:8f:c7:71:e4:e2:e5:84:f1:c1:de:30:7d:26:40:
                    e1:d7:da:ad:e0:d1:5e:fd:a7:92:5e:30:2d:ee:9b:
                    92:4a:f4:d0:ad:fe:c3:19:7e:cf:92:cc:67:58:36:
                    f4:0a:c9:dc:50:92:9d:d0:f2:de:92:cb:a1:ea:49:
                    7a:63:3d:92:d7:36:70:ba:f5:56:af:0c:1d:13:50:
                    b5:27:15:63:0c:2d:27:3a:72:8c:86:64:67:ba:e2:
                    e9:73:0f:3e:2b:34:9f:8b:5d:dc:59:e9:35:5e:44:
                    c4:48:14:45:42:7f:f3:8d:7c:1c:22:6f:12:f3:86:
                    3b:cd:d2:48:64:26:b9:d2:5b:d0:ec:19:b3:ad:3c:
                    13:08:d9:9d:a9:97:38:17:09:75:72:9b:c6:fd:fa:
                    b4:d3:a1:2f:b8:97:8f:ab:bf:11:47:7e:4b:91:4e:
                    b5:e5:fb:9d:89:ac:ef:c4:f8:1c:fa:84:c2:ed:d8:
                    6e:37:75:75:c2:84:4b:f2:3c:97:21:d7:36:7b:a0:
                    e8:a4:03:41:70:3b:50:7b:f9:89:52:78:ec:d9:90:
                    dc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5C:EB:88:56:1F:DB:E3:B3:E2:9C:6D:9A:23:21:03:F1:B1:3F:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631c15a4-6688-31a7-bd2f-c9287494a540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:89:04:4f:ea:7c:2b:1b:17:95:1a:6a:36:6e:5c:bf:9f:ac:
         af:6e:a2:23:4c:5b:cb:c2:c3:b0:38:2c:cd:33:bf:58:22:66:
         83:a6:48:ca:e4:74:d3:3c:49:aa:7d:02:4a:1c:10:24:c6:a1:
         6a:97:3d:02:9a:b3:4a:80:da:dc:3b:62:bd:99:a0:76:dc:37:
         64:ba:3e:01:ee:f0:8c:5f:f5:36:15:05:5d:03:38:0e:fa:b8:
         d1:4c:16:75:37:cb:78:f8:64:4d:13:74:69:20:81:86:f7:a7:
         94:54:f7:e5:55:47:81:ca:f8:ac:59:da:0e:12:f4:d9:9c:3c:
         a7:54:6c:e0:8a:6b:4f:7c:c4:02:f9:cc:de:d3:d1:71:d8:18:
         e2:d9:b7:38:af:b7:25:1f:23:03:db:91:e8:66:c7:5b:c5:a2:
         b1:fd:73:ae:6a:6d:4f:4f:6c:c2:d5:d4:9c:13:65:dd:61:a9:
         c8:97:36:b3:f1:fe:4f:6a:e7:ee:f9:b5:7f:14:f0:ef:fe:7a:
         e3:bd:1c:eb:a1:41:37:99:1d:72:fd:c7:ff:c5:27:e1:b1:7d:
         bb:5c:2f:86:f5:97:ea:52:fe:e4:91:5b:9a:e4:7b:0f:80:cf:
         ab:28:6b:4c:df:bd:45:b2:5c:d0:88:c4:89:9b:7d:0d:7d:57:
         bb:9f:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:56:57 2025 by rpki-client