Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab2068ba-0208-3a28-a273-05b4af1c5ebc.roa
File:                     ab2068ba-0208-3a28-a273-05b4af1c5ebc.roa (raw, json)
Hash identifier:          345dz2v0VAP5uAPuZnQsot5n5egk0mNt//2DWLDb14o=
Subject key identifier:   2B:34:4D:EF:B3:4F:5C:28:C7:AD:07:86:E6:F2:25:32:66:26:11:1D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C9223CCC098109DE8C8E8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab2068ba-0208-3a28-a273-05b4af1c5ebc.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396567
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:92:23:cc:c0:98:10:9d:e8:c8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=b30dcdb1-f7ad-4020-b94b-3ad5dffb4a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:d4:61:11:ba:c7:6d:09:83:e6:02:32:70:
                    71:68:28:f0:4f:c9:06:ec:f9:73:14:28:16:b7:b1:
                    bb:a0:d7:84:24:07:ad:5e:3b:c4:b9:4e:10:6d:b1:
                    1f:8c:01:de:b0:7d:7d:aa:23:f9:4b:f7:9b:76:91:
                    5b:d5:3c:4b:55:ac:e7:0a:ff:7c:47:e8:80:4e:e0:
                    21:30:32:7b:3b:9b:94:65:1c:33:d5:cf:6c:20:53:
                    1d:a9:0e:52:a5:09:c5:ec:a6:a2:a2:a1:6f:0c:7e:
                    c5:7b:8c:87:b8:2e:0c:a9:d4:f3:29:2f:7d:38:08:
                    b7:b5:86:3b:8b:74:a0:bd:2c:49:11:26:4b:5e:3d:
                    44:7b:3c:02:02:d3:69:3c:dd:0d:00:37:1f:0a:1e:
                    78:a3:8a:fd:8a:83:26:4e:ca:da:cd:d3:aa:18:86:
                    c2:05:3a:6a:1a:47:d6:98:57:a1:0e:be:1f:b6:c2:
                    a3:b7:83:dc:f4:69:00:89:c2:cd:e7:7f:f6:b2:c0:
                    b7:e7:3b:b6:84:42:f3:e5:41:36:be:32:c1:3c:d0:
                    b1:45:87:d7:f0:9a:83:f6:b4:49:cf:50:09:01:79:
                    90:49:4a:0e:79:69:8e:bb:96:d4:7b:52:3c:71:a7:
                    82:62:8b:33:8d:cc:c4:aa:03:d4:dd:ed:5b:4c:66:
                    4e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:34:4D:EF:B3:4F:5C:28:C7:AD:07:86:E6:F2:25:32:66:26:11:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab2068ba-0208-3a28-a273-05b4af1c5ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a3:81:a3:3b:27:a8:15:76:1a:f4:e3:04:a7:30:41:52:65:
         40:f3:92:a1:f3:81:f4:33:cb:ac:67:6a:47:0e:bd:32:d4:d1:
         76:2c:30:d1:d3:ea:64:4b:8a:f1:3d:ef:4d:77:ab:fd:29:25:
         48:73:2f:ac:d0:9b:ad:97:9e:bc:e4:48:64:23:3d:5a:0a:ed:
         01:3e:8b:7d:c3:ae:9d:05:4b:10:13:c3:72:a2:a7:77:1c:4e:
         7f:ec:63:b7:00:73:72:8a:b5:44:fd:d0:27:b1:95:0c:c7:f2:
         f3:d6:53:9f:91:11:f2:e0:7f:bb:eb:c9:c4:98:e4:7e:c2:4c:
         18:92:22:bd:94:be:ae:56:b7:72:10:b4:1e:dc:73:48:9c:2e:
         de:4c:90:e8:87:5a:2e:1b:8d:64:28:12:08:95:21:9c:b2:00:
         f3:5b:24:02:8b:68:0b:57:58:8a:8d:4d:33:45:51:8a:16:3c:
         da:e0:b0:d3:f4:9e:ea:b6:21:72:45:53:3f:0b:b7:af:21:0d:
         06:37:dc:f7:05:60:63:9a:fd:10:cd:6b:4c:f8:23:46:b3:57:
         28:46:af:6c:b1:99:ab:76:37:95:3b:60:8d:aa:6f:f5:48:71:
         d0:4c:70:25:88:14:e4:0b:70:fc:1a:3c:18:92:aa:99:05:07:
         4f:3e:5d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:27:26 2025 by rpki-client