Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa
File:                     9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa (raw, json)
Hash identifier:          8+5AJ+5LXlKDlOy5eCIt0cb/h1mBBthOxw5LxXDvLYY=
Subject key identifier:   3E:AA:8B:01:34:1F:89:33:94:5C:1F:7F:54:D1:B3:9F:FB:78:F0:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C931DBCE916E134848300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396551
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:93:1d:bc:e9:16:e1:34:84:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=57722da3-3ef0-4125-ab0a-8420fe6ec318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:ad:90:88:0a:aa:14:bb:51:70:96:08:4d:
                    5e:ee:cf:94:a1:1a:51:f9:85:9e:8e:a0:e0:96:3c:
                    67:ff:ca:d6:06:0f:9e:78:d9:07:a3:06:54:df:29:
                    5c:1d:31:78:79:9d:bc:e4:d2:fd:5f:59:60:cf:41:
                    44:b6:f1:21:38:7d:bd:ec:b4:a4:18:28:65:90:9d:
                    b7:6e:2e:b0:c0:b1:45:7b:bf:b6:0a:ae:74:ea:3d:
                    09:cb:51:4f:f6:8f:7a:50:ec:57:48:d5:1c:60:03:
                    0d:41:16:29:43:62:c6:e2:64:9f:7b:1f:ba:3d:0f:
                    71:cb:ae:7d:b4:43:1f:e5:5f:35:3a:d5:e2:fe:dd:
                    80:a1:a4:10:45:27:61:cd:0c:6c:31:3b:18:42:d2:
                    5e:22:bb:1c:c6:28:01:ca:37:36:ca:49:13:bd:9d:
                    6f:54:3a:f0:2c:57:85:4c:f0:d2:f0:69:48:2a:0f:
                    c1:5f:9d:fe:d9:38:ff:5b:19:a2:5b:ca:6c:45:ff:
                    ba:a4:5f:7e:18:57:e9:85:27:79:b9:d3:89:f7:a9:
                    26:18:87:97:23:53:9a:06:cf:0d:96:bf:81:4f:d1:
                    29:c2:d1:fe:c9:cf:ec:af:56:55:c9:6a:cd:b8:1f:
                    c3:57:64:05:97:a9:8a:7b:a5:b6:9a:5e:9f:c3:0a:
                    16:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AA:8B:01:34:1F:89:33:94:5C:1F:7F:54:D1:B3:9F:FB:78:F0:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b4:c1:b1:0e:c2:c6:a1:4b:75:3b:bc:52:fd:4b:08:de:3d:
         47:6d:c6:cb:c5:f4:15:ae:27:f2:af:c7:ef:88:bd:40:51:e7:
         61:6f:80:74:2c:8c:93:ed:2c:d8:9c:48:ad:23:aa:35:b7:8e:
         b0:c2:42:19:50:46:e6:0f:72:25:c3:bb:b9:b1:34:df:c5:09:
         0d:67:36:62:75:b6:2f:f1:46:60:bf:1a:af:9f:d5:e0:dd:14:
         af:73:63:92:70:c3:d7:55:89:d8:3b:52:2b:5d:ca:f8:d9:71:
         a2:11:00:e7:46:ad:50:4f:00:37:28:a6:9d:fa:03:e9:ea:15:
         f0:d3:64:1e:8f:20:6e:1e:ac:28:58:fb:95:99:9f:99:65:f9:
         98:41:58:94:12:99:25:1a:bf:24:98:36:00:1e:82:08:39:af:
         5f:d1:4d:7d:48:fa:4e:92:ee:a8:82:70:b4:93:49:7e:84:41:
         85:4a:73:b1:b0:c4:7f:a6:8e:f2:b6:ad:64:d1:5a:7f:41:73:
         3e:59:63:4c:22:48:c9:0a:5c:3d:22:c1:31:b1:87:14:ab:1d:
         8d:a1:7e:a1:54:55:00:56:f2:e0:13:69:98:66:5e:df:58:d2:
         d5:bf:df:7a:fc:ee:c8:1c:c8:42:8f:5f:6c:30:33:c7:f5:a5:
         a5:09:2f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:44:42 2025 by rpki-client