Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846d9d63-c16f-3993-ad57-8c6d02359236.roa
File:                     846d9d63-c16f-3993-ad57-8c6d02359236.roa (raw, json)
Hash identifier:          u6CpQ40S7/so/Yy4yeuFr2Xo4m2sR2fuRq2tAOpF9ZQ=
Subject key identifier:   E8:A0:17:0B:54:22:DB:F8:06:EF:F8:9D:11:CD:D0:F4:2B:5E:7E:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F549D51D234D7C40E98BE60C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846d9d63-c16f-3993-ad57-8c6d02359236.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     396561
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:51:d2:34:d7:c4:0e:98:be:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=10fdad1b-d49a-4845-beed-7d955b501963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:5e:c7:71:76:dc:2f:c5:2b:5f:f7:48:80:
                    a0:45:80:54:20:04:82:37:3a:da:e4:ad:89:7b:b4:
                    5c:32:ee:96:01:29:e3:08:30:45:89:e6:06:d2:3d:
                    53:34:09:e5:51:7c:41:14:aa:bd:6b:61:9d:a8:55:
                    97:a4:ec:c6:dc:1a:c6:39:06:09:42:4a:ed:95:4b:
                    3c:cf:d4:71:95:ed:03:fd:7a:b1:c2:81:c0:53:42:
                    02:36:86:25:97:a5:06:7b:8d:83:43:b2:b9:fc:bd:
                    fb:4a:1b:96:2d:5e:64:9b:f0:cd:56:41:1c:48:e5:
                    20:dd:89:c3:cc:c5:35:7d:22:23:8a:aa:fe:41:17:
                    e9:a4:d7:b5:1b:2e:12:0e:cd:d6:dc:67:13:b9:9e:
                    48:ce:49:35:28:7d:90:46:35:aa:82:9f:88:c4:81:
                    b7:8d:f2:fa:a3:11:23:17:03:41:a0:2f:a4:8b:d2:
                    83:31:cf:06:fa:df:dd:06:9c:c1:4d:fb:7d:3f:30:
                    4f:57:1a:2c:98:cb:b8:70:c1:00:f1:87:df:0e:91:
                    fa:1b:de:1c:39:c1:7b:bf:23:90:06:0d:aa:56:b9:
                    60:d3:60:e0:2b:84:31:81:de:7e:8c:63:67:48:2b:
                    b8:df:bb:1c:b8:ab:89:e3:d3:cc:58:89:b7:71:75:
                    13:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A0:17:0B:54:22:DB:F8:06:EF:F8:9D:11:CD:D0:F4:2B:5E:7E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846d9d63-c16f-3993-ad57-8c6d02359236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:5e:11:4f:9a:d0:c8:62:0e:7c:9e:66:b3:26:ba:1c:59:f1:
         22:eb:09:12:6f:67:1d:a0:f6:f8:f6:1f:85:af:a6:3d:8b:06:
         6a:2f:a4:b3:af:bc:dd:c6:cc:66:49:3a:cd:70:37:5a:a3:06:
         7f:bc:04:e5:6d:0c:d6:98:14:df:7d:60:ad:f7:54:dd:36:c3:
         a2:ce:a7:9b:f6:06:af:34:3c:8a:d8:d7:c3:11:fb:92:2e:bc:
         de:62:fc:8b:df:51:73:8f:bd:9b:90:1a:57:82:48:3d:6b:b9:
         7c:e9:6d:d0:03:c2:c8:e1:2d:5c:0d:51:1a:98:f6:75:bf:80:
         fd:e6:6e:cb:66:fc:e6:d1:0e:96:64:dd:b9:55:c2:90:5b:5b:
         9f:f4:51:7c:70:69:79:1d:0e:90:a9:6e:ea:3d:79:3a:0f:c0:
         61:7f:3f:3b:88:44:1a:7d:9a:e9:20:7c:8f:fb:99:31:b7:07:
         fb:83:42:62:8b:dc:ff:15:61:46:6b:f2:74:9a:5c:0b:67:14:
         64:51:5d:d0:56:34:c3:4a:3d:2c:58:ba:32:ca:d6:30:e1:c5:
         2f:00:a8:c5:3f:78:b6:61:9b:2e:bb:0c:47:d3:ae:83:cb:22:
         46:97:f6:10:84:b6:01:42:a8:ac:19:db:26:c8:c9:5e:2e:72:
         4a:80:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:51:14 2026 by rpki-client