Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa
File:                     c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa (raw, json)
Hash identifier:          w6cVw+6zKFzEpLjVEUomrKR/DMQcl1OF4YkfYFasyk0=
Subject key identifier:   BB:6D:55:20:ED:57:06:D2:2F:40:41:7E:DA:BB:42:68:9E:CF:99:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C88FE79F295370D5ED400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     36618
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:88:fe:79:f2:95:37:0d:5e:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=d52ae142-9802-48be-b814-a3bad871b1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:09:3d:70:8c:ab:d9:41:7a:1f:5a:28:30:
                    13:c0:0e:65:17:93:54:51:bb:fd:d8:d3:4c:ea:eb:
                    12:f4:ef:c4:c9:05:c0:8e:aa:b9:84:07:dc:90:a7:
                    26:a4:58:fb:6f:35:9b:ed:3c:6c:e1:71:1f:84:81:
                    68:31:b5:38:16:41:2b:e7:5f:0e:1d:37:0b:92:1a:
                    27:d4:6d:2a:4c:9e:4f:e5:a0:48:b3:9d:84:d3:df:
                    bf:e4:d7:fd:2f:6c:f3:47:a9:8a:8c:1f:cd:f1:10:
                    28:f4:4a:ca:71:d2:e2:f3:d2:a7:5a:1d:fa:91:97:
                    af:ee:57:75:2b:18:22:0a:f7:48:5e:98:33:67:6a:
                    cf:b0:7a:3a:44:45:10:a5:e0:e2:4b:65:10:c0:4e:
                    85:01:00:2e:17:5b:f2:68:99:0d:3f:3b:42:0f:4a:
                    ec:0d:10:fc:13:ed:7a:42:a9:1e:53:bb:f0:9f:85:
                    21:59:f8:32:14:a1:21:0b:1d:a3:35:88:ab:0d:2b:
                    2b:27:e0:3f:4c:dd:e7:08:15:e2:c5:fb:a1:7e:a0:
                    63:74:88:7b:35:29:5f:bb:0f:93:a0:ef:a7:bb:60:
                    24:0d:45:5f:d2:bc:86:1d:2b:14:77:c7:4b:04:62:
                    fb:2d:6e:3e:16:f8:cd:e1:d1:da:fd:f2:5f:ed:cc:
                    c3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6D:55:20:ED:57:06:D2:2F:40:41:7E:DA:BB:42:68:9E:CF:99:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1c:a2:8f:0c:38:cf:c3:57:bc:f4:d9:24:f1:ff:13:16:01:
         d7:8c:cf:bf:c6:01:c8:51:55:be:9a:a6:26:46:64:61:90:55:
         c6:3c:91:7d:77:be:e3:6f:56:53:6a:5a:d4:0e:ab:74:50:de:
         38:e7:7e:3d:5e:25:b8:a2:0d:0f:df:ad:ea:fb:ef:ce:a6:0c:
         9b:2d:53:34:97:e2:35:42:6a:28:10:0d:c7:69:ea:11:ed:fe:
         90:07:19:13:44:f9:80:d0:c1:32:ee:4c:32:70:c0:30:27:da:
         06:a0:66:cb:c7:1e:c4:00:03:81:6d:9f:40:4b:1e:7d:61:44:
         bb:a6:52:74:05:2b:87:da:41:ee:6f:c3:e7:88:fa:7e:34:e7:
         9f:b7:1c:00:ce:4e:40:7c:58:b4:10:8d:a6:96:dd:24:a9:3c:
         a0:7a:45:91:07:00:61:3b:8c:8b:6b:2f:28:ac:12:bb:65:3a:
         d4:3a:e4:dd:73:c3:f8:92:56:43:37:97:6c:f5:9b:d0:93:94:
         fb:a6:ee:c7:fc:17:7f:99:95:6a:54:33:51:32:dd:bd:d7:d9:
         ef:91:9c:18:2e:6a:b7:30:59:b5:27:64:4e:e4:9e:2e:31:ce:
         3d:35:1e:b7:7a:29:e6:96:ee:ee:68:bb:3a:9f:27:a0:e2:25:
         b7:10:ba:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:07:10 2025 by rpki-client