Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0f587cf-bef2-332d-ac1c-bbc4974d89f2.roa
File:                     c0f587cf-bef2-332d-ac1c-bbc4974d89f2.roa (raw, json)
Hash identifier:          VrbsI0viB/jhOxO2s7EouUX7OyeFvAj7W/FabWxBESE=
Subject key identifier:   D9:F5:25:CA:A4:6C:42:6C:5F:56:FC:29:B7:74:8B:DB:34:9B:9C:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C85EC780094E3EDF5EA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0f587cf-bef2-332d-ac1c-bbc4974d89f2.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396826
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:85:ec:78:00:94:e3:ed:f5:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=cc4cd888-63a6-4d62-860e-333342ec8bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:f3:e2:6d:a9:87:3e:a7:c1:78:7f:8a:bd:
                    be:7f:3d:3a:ec:ef:b8:78:47:5f:bc:b1:1b:c1:d7:
                    0c:17:6b:c7:3d:10:10:2a:b9:7a:cf:b3:b3:70:51:
                    b7:b8:c4:70:0a:3a:8b:fa:08:a5:5f:8b:b0:53:65:
                    23:1a:e7:1b:d4:97:09:c2:b2:0f:ae:9b:83:0e:fe:
                    5e:90:b2:67:aa:dc:33:12:88:55:a9:64:58:52:d9:
                    83:3c:46:75:ff:64:33:0c:4d:7a:4b:b9:5b:f8:13:
                    fe:87:9b:88:1c:a0:20:79:f1:0d:ef:63:67:2d:48:
                    ca:48:29:cc:28:3b:f4:b6:9a:7c:46:58:35:c4:f1:
                    e9:c0:f3:54:d3:fb:81:82:1d:ac:79:34:da:70:f1:
                    83:be:4c:15:b0:0e:e3:68:66:63:83:1b:63:e1:55:
                    a7:3d:79:d7:3a:21:2b:24:6f:6b:62:48:3a:fd:d8:
                    34:4f:43:17:20:fe:e5:71:dc:91:45:94:5e:d3:b5:
                    cc:21:86:0b:95:23:f4:b5:4f:fd:a0:18:20:db:8a:
                    b3:12:ec:19:fd:d8:5d:60:8f:a3:b0:1b:1f:65:17:
                    65:48:5d:da:20:58:55:af:1b:a6:d4:54:40:b6:b0:
                    3e:dc:af:0e:39:b8:e8:12:4b:72:e6:f2:21:6d:f6:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F5:25:CA:A4:6C:42:6C:5F:56:FC:29:B7:74:8B:DB:34:9B:9C:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0f587cf-bef2-332d-ac1c-bbc4974d89f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:73:ff:b6:c7:b9:32:2e:5b:29:9c:b8:60:b8:1d:02:83:7c:
         b6:4f:cb:6c:92:8c:b7:44:ca:b1:8f:4f:c3:38:33:23:82:35:
         b2:05:64:58:78:e2:1c:7c:91:d0:3c:d6:c9:67:bb:5e:2c:f4:
         b9:e7:7a:ad:d2:8a:21:e0:f5:8b:c5:5f:9b:8d:88:78:95:aa:
         5a:34:09:d5:f8:b8:80:40:d2:19:46:45:9d:d6:34:be:da:12:
         90:72:86:94:80:f8:97:52:dc:9c:48:1d:61:29:3d:45:22:f5:
         36:97:c7:2d:e2:ec:78:e3:ea:9a:d1:ce:11:df:4a:3f:e9:f1:
         cd:f4:19:28:4c:51:25:be:7e:25:17:e9:54:2b:9c:16:d6:5b:
         3b:f8:5e:53:78:ef:10:bd:2b:7d:ef:d8:28:f7:74:97:cb:36:
         13:72:23:94:00:13:78:03:91:ec:87:98:0b:54:47:54:a3:ef:
         be:f8:40:32:6d:a7:6b:f6:cb:2d:53:a2:ad:5d:f4:56:5d:3b:
         d9:b5:a1:ac:8c:16:93:de:1e:40:dd:a3:79:c0:85:63:84:c1:
         a7:10:97:90:5a:0a:9a:47:f9:52:83:16:fb:09:d7:38:67:32:
         2d:d7:7d:98:56:6c:76:08:46:f6:e8:d4:5a:81:e0:05:5f:35:
         03:d1:e6:19
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIXseACU4+316oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
Y2M0Y2Q4ODgtNjNhNi00ZDYyLTg2MGUtMzMzMzQyZWM4YmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Xz4m2phz6nwXh/ir2+fz067O+4eEdfvLEb
wdcMF2vHPRAQKrl6z7OzcFG3uMRwCjqL+gilX4uwU2UjGucb1JcJwrIPrpuDDv5e
kLJnqtwzEohVqWRYUtmDPEZ1/2QzDE16S7lb+BP+h5uIHKAgefEN72NnLUjKSCnM
KDv0tpp8Rlg1xPHpwPNU0/uBgh2seTTacPGDvkwVsA7jaGZjgxtj4VWnPXnXOiEr
JG9rYkg6/dg0T0MXIP7lcdyRRZRe07XMIYYLlSP0tU/9oBgg24qzEuwZ/dhdYI+j
sBsfZRdlSF3aIFhVrxum1FRAtrA+3K8OObjoEkty5vIhbfY8SwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNn1JcqkbEJsX1b8Kbd0i9s0m5xcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzBmNTg3Y2YtYmVmMi0z
MzJkLWFjMWMtYmJjNDk3NGQ4OWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAyc/+2x7kyLlspnLhguB0Cg3y2T8tskoy3RMqxj0/DODMjgjWyBWRY
eOIcfJHQPNbJZ7teLPS553qt0ooh4PWLxV+bjYh4lapaNAnV+LiAQNIZRkWd1jS+
2hKQcoaUgPiXUtycSB1hKT1FIvU2l8ct4ux44+qa0c4R30o/6fHN9BkoTFElvn4l
F+lUK5wW1ls7+F5TeO8QvSt979go93SXyzYTciOUABN4A5Hsh5gLVEdUo++++EAy
badr9sstU6KtXfRWXTvZtaGsjBaT3h5A3aN5wIVjhMGnEJeQWgqaR/lSgxb7Cdc4
ZzIt132YVmx2CEb26NRageAFXzUD0eYZ
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:34:36 2025 by rpki-client