Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/703f80b1-1819-3f71-a801-d2fd770196b2.roa
File:                     703f80b1-1819-3f71-a801-d2fd770196b2.roa (raw, json)
Hash identifier:          lIW+os0gqB79JldGEgkO1gmNTOhDsvp/RfRpQnixmMg=
Subject key identifier:   89:6C:C4:27:2C:DE:1C:6E:9D:2C:C8:9D:29:71:DA:D6:66:B3:15:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497DA197EEFAA89B6E0DA440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/703f80b1-1819-3f71-a801-d2fd770196b2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397195
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:a1:97:ee:fa:a8:9b:6e:0d:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=89b27f73-8fc1-4526-897f-2b72e4203927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:cf:63:cd:94:f3:be:a6:67:13:16:86:88:
                    72:51:a4:ad:36:d3:2b:a6:a8:da:a0:85:26:f2:bc:
                    67:32:36:cd:fd:9c:0a:ba:fc:ff:09:d5:6a:f2:e7:
                    a6:ad:a0:06:e7:77:25:ca:23:28:e6:8b:5e:08:35:
                    67:74:49:01:b6:8b:ae:c7:4a:7c:8c:b9:53:5f:bc:
                    4d:f0:8e:37:4d:d5:78:f5:e4:61:a6:44:6e:05:d5:
                    85:a9:37:38:ce:aa:30:92:78:00:9b:bb:6d:c3:7e:
                    b2:5e:c9:c7:85:92:6e:ea:3c:95:4c:27:59:0c:5b:
                    79:fd:b7:05:7f:90:24:a0:f9:0c:72:d2:4e:6d:3f:
                    ca:75:a8:5c:81:7d:81:df:4e:ed:d2:6f:21:c9:15:
                    10:02:c1:8b:06:c9:42:73:3e:99:16:a6:0c:57:48:
                    a0:7d:f6:6f:1a:f0:9f:0f:1f:95:ba:31:33:c9:7d:
                    6d:84:0a:cb:da:30:ea:2e:7b:5c:8a:54:7d:cd:f8:
                    a9:78:54:e5:f9:a2:1a:32:3b:cd:5c:7f:96:b8:9e:
                    2b:2f:0f:5e:f6:51:06:1c:7e:59:8b:c9:84:9a:27:
                    1f:ff:a4:5c:8f:07:b7:46:00:e5:02:22:c3:35:eb:
                    5f:ea:bd:64:bf:6d:6e:81:90:5e:b2:ad:92:be:75:
                    b2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6C:C4:27:2C:DE:1C:6E:9D:2C:C8:9D:29:71:DA:D6:66:B3:15:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/703f80b1-1819-3f71-a801-d2fd770196b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:05:4f:a0:07:bc:20:8f:8f:8a:9b:eb:ee:0e:36:22:07:e6:
         5d:af:53:76:af:23:c9:4c:b3:c4:17:d1:33:42:c2:b6:58:d6:
         33:d6:ba:23:8b:a0:cc:3d:a7:26:41:8f:c2:56:f1:b8:41:9f:
         90:fa:29:32:b4:83:c9:93:e6:c2:90:06:25:19:84:37:69:2d:
         71:51:ad:d3:af:25:03:ff:e2:a5:ff:4d:27:94:1b:00:0e:58:
         c6:1a:72:52:cf:1a:30:b1:34:4a:43:94:72:cd:46:08:51:d5:
         49:1b:5e:39:b1:7c:58:da:2a:5a:90:db:06:dc:f7:27:fe:9b:
         12:af:93:46:ab:9f:a8:15:66:b9:5a:69:3c:e9:ad:57:6b:97:
         d5:eb:00:31:b3:e6:0f:f2:91:b6:fd:3b:46:a9:c2:c4:3a:b3:
         84:93:b0:64:c6:4f:2a:4d:f4:b0:d2:8a:95:72:c1:5a:3e:f6:
         80:4c:5e:0e:f2:c6:3d:5e:86:08:66:be:cf:f0:b8:6b:1a:1d:
         c7:00:19:0c:53:06:64:0a:63:05:4b:3e:8d:65:c9:49:33:0b:
         b8:bc:43:86:ee:f0:15:2f:f9:98:bc:e1:d5:12:c5:20:87:1d:
         a2:7f:b0:c4:e1:25:5f:8c:0f:04:93:57:c8:b6:c0:38:5f:8c:
         b8:1a:f1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:45:35 2026 by rpki-client