Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3337df80-a721-3a71-a21b-9cd4c5ec1046.roa
File:                     3337df80-a721-3a71-a21b-9cd4c5ec1046.roa (raw, json)
Hash identifier:          jTbPVgozromcfno5enMgfRL935HUqcfBLyV/rAtNXkM=
Subject key identifier:   90:8E:8E:0A:73:7B:0F:61:61:A9:6D:35:57:14:DB:EF:9C:5E:06:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C07F02AFE129D38C642F60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3337df80-a721-3a71-a21b-9cd4c5ec1046.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396545
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:7f:02:af:e1:29:d3:8c:64:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=9e629f92-4f72-453a-836f-8d6de9d0d986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f6:d9:54:2a:a5:7a:a3:ba:4f:a3:a5:37:38:
                    4a:cf:05:a5:54:1e:7a:44:ae:2a:d0:22:a9:50:b8:
                    1f:d9:a2:6f:11:dd:5f:bb:52:a6:c3:11:28:f5:c7:
                    93:f1:9e:ea:bf:55:19:12:46:1b:e2:92:20:d7:0a:
                    49:ec:cf:1e:41:f0:3b:81:1c:12:c4:f1:d1:8f:9e:
                    e6:66:f9:5d:ca:a7:7d:1d:f3:05:ed:6f:d2:09:85:
                    3a:aa:07:0f:0b:65:5b:27:62:b6:ab:03:27:f3:02:
                    8d:e8:22:27:ab:f6:ed:cb:58:3c:20:09:d2:e2:e7:
                    ab:21:88:a6:fd:15:76:53:7f:bf:58:91:7e:47:82:
                    df:6c:fc:bf:d0:d4:c8:7b:a8:90:af:04:42:a9:2d:
                    66:74:54:a4:af:70:d2:6a:99:dd:ad:b6:85:c7:f9:
                    9c:74:13:b1:20:8c:73:25:a7:ff:49:37:18:69:71:
                    5d:38:0c:9c:15:b7:b2:f5:a5:93:14:da:06:ae:fa:
                    df:c0:10:4e:ce:39:4d:63:4d:d3:5a:ac:ae:8b:51:
                    30:12:5a:f9:b2:b3:44:18:f0:15:a9:bd:18:c9:19:
                    04:e4:83:f7:5d:15:db:56:d2:3b:e5:17:97:bf:c5:
                    05:56:6f:b0:51:8b:d3:a5:e5:32:08:f2:d0:de:71:
                    91:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8E:8E:0A:73:7B:0F:61:61:A9:6D:35:57:14:DB:EF:9C:5E:06:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3337df80-a721-3a71-a21b-9cd4c5ec1046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:64:08:c5:36:0a:28:4f:03:cc:5b:5b:44:6f:7d:e1:55:f7:
         ae:9c:0e:9a:3b:14:3f:17:21:d8:49:5d:76:14:76:18:c8:b6:
         a5:ad:ee:65:3b:90:88:d4:5b:84:19:69:88:6a:5b:26:c4:45:
         31:3c:45:17:de:03:17:17:bc:e4:94:c3:9d:10:f2:4d:f1:a7:
         ec:36:aa:b9:0e:2d:de:48:ca:e9:df:b5:f3:f2:4e:0f:f1:31:
         6c:73:f6:97:78:55:a7:e4:9a:e2:f1:ae:1d:ab:31:7d:e1:d8:
         bf:a6:8a:f9:b3:ff:b3:03:06:b0:6c:cc:52:76:80:18:92:eb:
         07:10:d6:9c:24:56:53:2f:d8:54:58:e4:8c:2f:68:53:f2:b2:
         45:9f:2e:9b:ad:56:bc:c5:20:71:e1:12:4d:62:cb:d8:d3:7a:
         43:df:96:7c:ed:24:21:2e:a3:53:7b:ff:95:1f:31:0a:0b:e1:
         1f:e2:cc:17:36:3a:b8:5d:b4:55:00:b4:a2:b7:87:2b:ca:98:
         d4:76:c3:3f:31:cd:25:62:0b:96:1a:35:f4:1f:61:7b:28:1a:
         9b:b2:0f:3e:bd:69:03:99:c9:1a:61:a3:fb:a8:65:e3:04:1a:
         94:ef:b9:c4:eb:44:2b:0a:e6:ed:29:1f:92:20:24:8f:74:b3:
         09:e7:f9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:54:38 2025 by rpki-client