Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57dc8f4e-f25a-3dfc-94ab-4cf8d18e4cb9.roa
File:                     57dc8f4e-f25a-3dfc-94ab-4cf8d18e4cb9.roa (raw, json)
Hash identifier:          2o7bAObf/g/axIu/rkTa15PV62dG7uVeNGCx3NQ27Jg=
Subject key identifier:   DD:A4:16:6B:76:3C:A8:BF:6B:D2:7D:E2:ED:69:11:50:C9:3D:B8:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C0858DD14DB45A442A1C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57dc8f4e-f25a-3dfc-94ab-4cf8d18e4cb9.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396583
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:85:8d:d1:4d:b4:5a:44:2a:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=8036d41a-1ae6-4f90-bfe1-e07c9986f41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:66:ce:a6:88:50:ef:b9:db:41:3b:08:22:aa:
                    55:22:fe:35:c1:c0:a9:2c:a8:ca:d8:5b:63:45:82:
                    df:0f:9a:71:3f:b4:ba:1d:df:6d:1d:8b:85:d4:0d:
                    91:af:3c:aa:45:51:d8:68:01:b4:99:19:c2:4a:d0:
                    c2:de:09:a4:a6:10:c1:57:dc:32:0d:00:f0:19:36:
                    80:30:3c:be:05:51:e9:fa:c2:24:63:aa:a2:60:60:
                    d7:ab:29:cb:aa:1c:07:2f:bd:b3:f1:6c:8e:65:d9:
                    5f:a1:87:91:e6:4a:a9:64:ca:e5:cd:70:93:dc:23:
                    16:41:46:9b:a3:89:60:25:e0:f4:32:7b:c5:b4:6f:
                    13:d5:2b:b7:ba:3a:e7:89:31:43:e5:c8:b2:28:3b:
                    0d:8e:88:1f:5a:3c:14:7b:d7:4c:ff:aa:55:0c:45:
                    b3:ae:4d:41:5f:33:03:d4:e2:9b:da:59:4e:e2:7d:
                    2c:de:8a:92:49:e3:6c:d2:0c:a9:38:83:56:0e:fd:
                    77:74:2c:2f:d4:ad:75:a5:34:9f:dc:c3:66:84:a8:
                    3d:a3:3e:67:7a:7d:ef:c2:f2:d8:e5:88:f8:27:43:
                    b4:99:33:86:5b:27:27:34:97:ed:70:80:97:a6:c8:
                    c2:2e:4e:a4:99:d5:9c:49:5b:13:20:83:6c:66:83:
                    14:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A4:16:6B:76:3C:A8:BF:6B:D2:7D:E2:ED:69:11:50:C9:3D:B8:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57dc8f4e-f25a-3dfc-94ab-4cf8d18e4cb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:4a:ca:b3:7c:86:75:b9:e4:25:9c:5c:a3:41:7b:fe:da:6a:
         33:a6:95:65:01:ae:1c:da:e8:af:d2:1b:c3:f5:29:6a:3e:76:
         89:4e:b1:60:e8:65:c6:8c:eb:b5:5c:8e:c4:6c:3a:e1:1c:08:
         23:31:d8:53:26:c5:9c:04:d7:da:19:91:90:91:5a:12:0f:0f:
         57:1b:49:0d:d7:03:c2:75:75:4a:d0:fe:d9:5d:85:80:b4:ae:
         6b:7a:80:64:37:7f:39:66:22:96:21:c6:52:4f:2d:8e:e0:32:
         c6:07:34:38:e3:ec:53:fb:d0:13:4d:5e:04:77:98:d0:22:c0:
         7e:ed:89:c0:47:db:0f:52:63:ae:0f:85:92:d2:88:82:5e:97:
         65:7b:cb:b6:79:cc:71:ba:75:af:61:ba:02:46:48:9e:a3:4c:
         65:a8:5b:8a:af:dc:9c:38:e5:98:cb:83:ec:be:15:7f:a5:9e:
         39:cb:5c:13:9f:e1:08:3f:f1:ee:42:ab:0f:3b:d4:09:e6:dc:
         8c:3c:fc:10:2e:b9:f1:e1:2f:c7:65:25:c6:68:d1:65:8c:b9:
         d9:d6:4d:48:ab:07:39:20:4e:dc:34:a1:99:c6:c1:e3:e6:f5:
         44:22:e5:f8:05:ab:bd:5b:fd:a1:e7:0c:b6:28:f0:f6:35:ed:
         5b:da:09:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:13:54 2025 by rpki-client