Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ac1eab-aada-3c7b-8c30-8277736fd330.roa
File:                     b0ac1eab-aada-3c7b-8c30-8277736fd330.roa (raw, json)
Hash identifier:          y1oFXTkqiWbAl45iWbQpeyDC1tHX+b6YJ0oXmOVK5jg=
Subject key identifier:   62:C9:09:F9:17:E2:D9:58:B6:E4:5F:10:32:9F:26:33:9F:DD:41:39
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D300A23AF520C3ED861E29F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ac1eab-aada-3c7b-8c30-8277736fd330.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     36625
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:23:af:52:0c:3e:d8:61:e2:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=f8f69b6c-fc2f-4e43-8c47-310a4c322af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:9d:90:fe:8c:b7:3e:c4:6c:42:21:27:64:
                    7d:d8:b1:e5:0d:45:7f:9f:be:fb:90:f4:99:ea:f0:
                    89:11:c3:4d:9a:55:00:a2:80:15:56:a3:56:2f:3f:
                    5e:a7:5d:ac:f0:1c:54:65:b3:fe:04:db:ed:a4:75:
                    86:87:45:d9:4c:08:7e:b2:7a:b9:25:92:5a:39:f1:
                    5d:9d:1d:a9:7c:5e:84:fe:27:f0:97:b1:52:12:aa:
                    c9:0d:f1:9f:f6:84:82:e1:a3:eb:96:c4:17:2b:9a:
                    09:55:11:86:e3:cf:0c:3b:12:e5:96:5a:d6:82:ca:
                    b9:92:71:26:e2:76:59:30:53:b3:7f:03:bc:1c:b2:
                    b2:ac:61:e7:45:21:bc:d9:bb:c4:23:81:e6:7c:01:
                    ef:80:ed:f5:47:d4:77:6b:13:c3:78:01:88:63:8b:
                    33:e9:3f:09:a8:1c:d4:fd:a2:52:54:1c:84:44:12:
                    f7:18:55:2b:53:eb:32:e9:e9:cf:20:0d:20:3c:85:
                    52:e9:94:60:91:ac:10:6c:fa:97:c3:65:dc:b7:e9:
                    a9:39:e3:fb:6c:f2:59:a6:80:29:41:33:44:26:2e:
                    fc:fb:3a:6e:78:7f:1e:54:40:a5:8c:a7:c4:67:67:
                    a5:59:96:6e:17:e1:d9:78:a1:b2:b9:b8:b6:95:4c:
                    11:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C9:09:F9:17:E2:D9:58:B6:E4:5F:10:32:9F:26:33:9F:DD:41:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ac1eab-aada-3c7b-8c30-8277736fd330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:f3:29:ac:e0:7b:3b:ad:17:ce:3b:18:72:93:20:e6:11:7f:
         85:ac:35:74:c3:9b:23:27:67:21:00:23:01:bf:6b:3a:f3:b4:
         c1:e4:fc:73:5d:24:b2:64:1a:8e:d9:46:71:b1:95:99:f3:95:
         55:47:b5:44:7e:0c:46:5b:5d:df:4c:8b:5e:ad:55:59:88:c9:
         50:6d:d2:7e:9b:2b:3c:60:67:7b:18:e7:04:91:86:69:73:53:
         6f:7d:0e:ae:d7:e9:94:5f:aa:67:2c:d9:37:48:50:b0:55:55:
         d4:5b:1e:a4:ec:12:1b:ff:0a:7f:f9:30:08:f4:66:4b:b2:bf:
         3a:3f:1b:08:06:fe:df:1a:91:27:57:b8:e7:fa:99:73:1c:cf:
         c7:ec:99:ce:60:0a:2f:27:32:99:6f:40:3b:30:5b:3e:83:27:
         c7:7b:22:e9:cd:04:8d:46:28:b8:b9:8d:0d:39:2b:7d:ee:1e:
         ce:56:26:c0:ec:c5:78:be:1a:94:47:55:3c:ae:ec:14:32:bb:
         71:22:f7:44:0e:6b:e7:fd:9b:77:e5:96:c5:10:d0:e1:42:df:
         e5:f5:7f:12:42:83:59:75:d4:bd:19:68:6e:69:a3:5c:2f:74:
         a9:95:50:2b:ff:76:6c:f0:4e:cf:64:82:31:59:e5:13:4d:33:
         88:8a:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:46:52 2026 by rpki-client