Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/969ab94c-bddb-3235-9711-5eeb606e73fb.roa
File:                     969ab94c-bddb-3235-9711-5eeb606e73fb.roa (raw, json)
Hash identifier:          37eqL70TCCuTV4PVKfXcr6dzegjX1ZTpDfOEG33215s=
Subject key identifier:   46:40:1D:C6:83:CE:D2:0D:2B:0B:88:2E:7D:C1:DD:59:AA:1A:EC:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B7F5269E938917EBE4F867FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/969ab94c-bddb-3235-9711-5eeb606e73fb.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     396600
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:69:e9:38:91:7e:be:4f:86:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=69e968d7-ed0a-4a42-a760-930f62417807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ce:1a:fc:23:27:aa:fb:72:ee:6d:56:a1:88:
                    1c:79:50:4f:1f:c4:e4:39:4f:91:da:53:aa:a8:7e:
                    6f:86:5e:72:ca:64:9c:f6:27:dc:79:8d:28:3e:08:
                    96:d6:74:d9:d2:30:77:34:03:80:3b:13:e6:0b:c9:
                    60:bb:13:c9:15:b2:cb:88:34:e9:e4:4e:b2:84:bc:
                    f2:8a:85:bf:ae:04:0e:5d:ed:ff:c5:4c:26:0d:fc:
                    65:f1:6d:5a:e7:dc:d4:9d:77:e4:f9:68:9d:c8:9a:
                    ce:0c:ed:cc:b6:db:fb:f6:62:f0:c2:ef:67:b8:9c:
                    74:79:bf:20:96:e6:74:c4:17:b6:2e:b1:5a:27:1f:
                    61:b2:cd:77:6a:69:e7:1d:22:05:cf:7e:c3:21:11:
                    aa:b9:58:84:61:cb:92:a5:4c:50:b2:63:cd:03:69:
                    c1:2d:9d:13:b8:05:d8:d8:e4:f8:23:7c:f5:af:c7:
                    d0:3e:82:d7:50:28:84:de:3f:6d:64:b8:89:ac:c3:
                    7a:52:18:8c:63:1b:d2:3e:78:72:c0:8d:18:f4:23:
                    c6:00:e7:4f:a4:41:67:2d:f3:f7:8f:95:9c:b6:1a:
                    05:bf:fa:09:55:ff:28:dc:02:bb:2b:b1:e1:6c:bb:
                    b9:6e:86:1c:d2:70:97:8e:4e:3f:6c:3d:d2:da:a3:
                    ae:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:40:1D:C6:83:CE:D2:0D:2B:0B:88:2E:7D:C1:DD:59:AA:1A:EC:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/969ab94c-bddb-3235-9711-5eeb606e73fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d0:22:71:9f:75:de:e4:d9:ce:06:46:ab:2d:a6:32:8a:bc:
         52:2c:a1:1c:55:8b:60:d2:8b:06:62:ae:ac:aa:62:e7:9b:4a:
         cc:50:75:bc:94:be:47:9f:5e:66:5f:ca:26:c9:5d:b8:38:b5:
         bf:08:9c:98:9d:47:5c:83:cf:34:2b:cd:b1:63:19:b4:e7:d2:
         37:58:00:c1:f3:ac:f9:14:52:cb:0d:db:89:58:f7:0e:6e:de:
         1d:a0:8a:ce:13:79:6d:8e:07:35:cb:f5:48:4c:01:4b:5a:a7:
         c4:7d:f8:10:8d:e6:0b:93:83:4a:e9:a8:da:e0:72:a5:b6:44:
         28:fd:02:73:bd:66:c0:04:79:7a:8a:b6:1a:4e:05:59:e3:bd:
         da:3f:50:6d:e1:a6:a8:2c:76:fb:9e:a5:73:e1:c6:a4:f2:36:
         87:62:a7:f6:18:b4:5c:e3:13:9a:37:3c:0f:dc:c0:9c:ad:ce:
         98:bf:cb:13:8c:a7:d3:d7:73:c0:be:1c:ed:d8:6d:c9:b8:da:
         41:39:06:f4:72:d6:36:d2:2a:b1:80:9e:d3:37:9f:fd:42:22:
         97:58:ec:3e:d1:41:94:4b:bb:ca:b9:c7:a0:72:01:7b:bf:e3:
         20:bb:26:a2:84:b8:89:8b:3f:8d:02:7a:cd:98:61:46:06:39:
         b0:d9:17:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:35:35 2025 by rpki-client