Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/476ccef9-db67-314e-982a-f04e9cdec3b1.roa
File:                     476ccef9-db67-314e-982a-f04e9cdec3b1.roa (raw, json)
Hash identifier:          Z/Aea35yPFlhxuxnlEN33t7TJaPQkDsV8les1v8WsD0=
Subject key identifier:   36:F1:27:5A:6A:D5:B5:4D:F8:92:34:7D:7F:A8:A0:B0:04:12:06:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C07E94A4C8C65D33971320
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/476ccef9-db67-314e-982a-f04e9cdec3b1.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     397194
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:7e:94:a4:c8:c6:5d:33:97:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=8c4f8a42-dc95-4024-9fe2-82cf8a05329c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:87:ad:d3:1e:4a:36:03:8c:31:a7:20:d6:0e:
                    97:9c:f0:94:a7:89:31:8e:f9:43:80:5c:76:2b:b5:
                    49:b7:62:bf:c0:7b:cb:28:2c:df:b1:f8:76:11:6b:
                    b3:d5:70:e6:8c:e8:61:ee:ff:44:dc:14:6a:51:a3:
                    4d:fa:9f:f7:a7:0a:de:7a:08:4c:14:a5:cc:b7:53:
                    d7:9e:6b:db:87:70:1c:d7:fe:34:7d:9b:86:62:82:
                    45:21:84:fb:4a:8d:0a:8d:3a:76:1a:83:a3:de:ca:
                    93:5f:b8:45:ab:fc:55:d0:ca:af:72:e6:b3:0f:ee:
                    03:66:8e:cb:14:49:ec:e1:0e:b4:ce:3c:1e:50:24:
                    3b:cc:bd:b9:55:2c:44:15:23:99:fd:5a:27:a6:02:
                    45:a0:b0:b9:3d:d2:f5:85:b3:31:6c:fe:53:85:40:
                    c7:ea:22:07:00:49:d8:95:6a:63:34:78:7a:c7:00:
                    f0:ef:c3:ca:3f:a1:54:66:93:f8:93:6f:18:e9:4d:
                    d6:2d:78:14:18:5d:8d:ab:2d:90:fa:c8:5f:43:b2:
                    21:f9:e6:d5:92:7f:9c:dd:ca:2c:f9:20:7b:33:41:
                    5e:4f:e1:a3:4e:56:d5:bf:60:cc:83:4b:3c:42:a1:
                    8a:25:dc:fd:34:94:fc:7c:ad:e7:cf:9f:82:3d:0a:
                    ee:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F1:27:5A:6A:D5:B5:4D:F8:92:34:7D:7F:A8:A0:B0:04:12:06:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/476ccef9-db67-314e-982a-f04e9cdec3b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:07:e3:b2:4a:28:15:6b:45:44:aa:cb:cd:d0:71:37:7e:b5:
         4c:09:ef:e9:77:41:8a:b5:86:b7:04:3e:84:45:4a:cd:3e:05:
         e4:d3:7c:90:a9:16:bd:f4:a2:cf:2e:0c:62:18:8e:89:7f:e0:
         70:76:cc:63:48:b5:18:82:4c:5f:9f:9f:78:9e:e2:e9:cb:08:
         85:b1:ba:65:63:60:dc:df:bf:5f:3b:47:0c:3d:a2:af:1a:fe:
         1d:16:da:63:7a:90:59:64:e3:da:81:cf:b2:83:70:24:49:da:
         bb:71:bc:ff:86:4d:1c:01:09:f7:83:ed:28:c3:8e:de:08:39:
         4a:b7:67:71:cb:c9:0f:82:e5:82:e4:3c:e5:44:54:2d:0f:1b:
         18:d6:b5:2b:eb:30:52:27:b3:40:af:5b:96:ea:9a:04:1f:3c:
         92:81:ab:f9:f4:42:0d:1b:ff:ed:7a:d3:ce:f9:ee:2b:54:14:
         1c:4d:1c:87:53:5e:78:99:b2:4c:5c:0b:dd:61:80:bf:26:4c:
         44:b6:42:1d:8b:4a:03:3e:49:a7:db:6a:e9:13:3f:37:13:fe:
         35:0a:b1:1d:52:b8:0a:b2:04:d7:f5:5c:99:0c:ed:84:16:45:
         23:2b:1e:da:1d:23:ee:57:37:4a:1d:e0:70:f4:a4:f8:1b:46:
         05:00:e6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:25 2025 by rpki-client