Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2436780-2376-3fed-8932-e3e352a270a9.roa
File:                     f2436780-2376-3fed-8932-e3e352a270a9.roa (raw, json)
Hash identifier:          SnN1Uh3ymDTeR0ZwbxxxGVbrXoIPoyWPmyzPhTvnBPY=
Subject key identifier:   EE:C3:68:67:FE:B3:E1:C4:95:F3:54:44:06:96:13:13:4C:6A:63:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D300A3A8E9119AEFD24080440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2436780-2376-3fed-8932-e3e352a270a9.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     396551
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:3a:8e:91:19:ae:fd:24:08:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=99738c59-551e-4c2c-b9c1-dc7d5a766b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:41:e3:61:95:a3:9b:3d:f6:c2:77:48:8c:86:
                    65:c6:0b:78:c0:03:2c:00:d6:52:bd:92:bf:c7:5d:
                    ab:8c:43:95:f1:5b:04:0c:e4:42:41:26:11:e8:9f:
                    17:54:69:8f:80:c0:66:38:6c:ac:76:70:21:ef:c8:
                    ea:a8:0c:b2:d4:f4:45:1a:d8:bc:43:6c:09:33:6a:
                    e5:ad:57:fd:2d:26:c5:83:f5:4a:a5:4d:3d:5c:5b:
                    ba:47:ef:09:ce:b6:90:8d:47:f3:02:ab:85:57:9c:
                    b3:b8:6f:f9:66:46:7c:b5:77:8d:ed:b9:85:d0:d5:
                    02:64:96:f1:fa:d9:b0:b0:47:a1:45:f9:79:cb:5a:
                    40:df:84:df:ee:29:f4:14:cf:00:43:fe:37:a8:0b:
                    66:e4:fd:36:15:41:a6:fa:fe:61:30:f9:16:49:d1:
                    f2:e9:eb:a0:fa:5c:37:60:b1:ff:5d:d6:c7:69:8c:
                    cb:94:95:e4:ca:2a:55:c7:80:d8:3c:01:55:2c:09:
                    df:24:c6:13:bc:87:fc:f7:19:c4:c3:08:f4:5d:e4:
                    f7:37:75:29:7a:dc:97:8a:05:dc:0d:ea:7a:42:86:
                    47:fe:fd:d5:c3:47:21:d7:fd:1a:0a:b7:9c:67:e7:
                    1a:3c:7e:d4:0c:4f:78:34:69:1c:32:e4:0c:b0:71:
                    b6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C3:68:67:FE:B3:E1:C4:95:F3:54:44:06:96:13:13:4C:6A:63:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2436780-2376-3fed-8932-e3e352a270a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:cf:d3:c0:ad:3a:eb:9b:ad:7d:8c:fb:e4:b6:ff:08:b6:f8:
         32:ca:d6:2d:1d:50:eb:8c:21:07:a3:80:5e:9b:2d:24:f5:cb:
         14:24:15:ef:53:08:f6:ab:f1:02:94:11:63:09:2d:84:91:8a:
         7f:b1:cb:3d:b5:22:3d:1f:e7:6b:45:18:07:db:f5:dd:ae:cc:
         2c:fc:fb:aa:3f:47:06:6f:88:5a:fb:d5:d7:f8:70:4b:c0:b9:
         3b:db:82:da:85:56:93:be:0c:ee:52:1d:db:e8:a2:10:d5:ef:
         f0:98:94:d5:77:96:cf:60:7b:30:67:e6:ef:84:0c:2c:53:3c:
         bf:90:d2:78:fd:04:fe:7b:b9:8f:c1:ec:87:28:45:3a:59:71:
         1d:8d:6d:35:00:3b:92:68:22:33:5a:11:90:5a:08:bb:bb:97:
         a6:b7:bd:bd:b9:e2:50:e1:c0:b8:1f:6f:b3:b1:41:ea:a0:14:
         5b:63:7a:97:15:21:62:b6:f1:e3:6a:75:8e:10:40:9c:55:90:
         41:80:50:97:15:16:a2:16:45:ee:8e:c8:f2:50:9a:c8:ef:70:
         55:50:03:76:25:9e:6c:ac:be:9e:39:c7:37:59:34:df:6d:68:
         49:87:6c:7b:42:eb:45:de:cd:34:92:9c:a5:2f:0b:f9:e2:e4:
         5e:63:50:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:15 2026 by rpki-client