Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5947ae3d-0cb8-3631-a5d1-98d51e9f7ecc.roa
File:                     5947ae3d-0cb8-3631-a5d1-98d51e9f7ecc.roa (raw, json)
Hash identifier:          iMvYw5nhdwFjV5I8waCqHRU7ywASqUA6tE6WkV4LqAI=
Subject key identifier:   72:85:9C:1C:DB:CC:27:6A:B0:91:3D:FE:1E:0C:7F:99:71:8B:FC:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C0825B34B787D213021540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5947ae3d-0cb8-3631-a5d1-98d51e9f7ecc.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     397211
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:82:5b:34:b7:87:d2:13:02:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=6bd27d44-8180-4c95-834e-c9f2fce33a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:29:8f:a6:b1:a8:9c:14:fe:be:ae:4f:ca:
                    36:a5:3d:7f:bc:28:83:f0:38:e2:4e:01:23:3c:08:
                    c5:57:99:a2:b2:ee:fc:df:0c:6f:ba:29:00:0f:d9:
                    23:8a:d4:0b:3d:8b:c6:71:57:84:95:29:fa:10:cc:
                    b2:30:a5:5d:20:33:8d:a9:82:a1:a2:d7:53:64:f9:
                    44:9e:71:fb:0f:02:89:eb:49:1b:61:8f:a3:1b:5e:
                    71:f7:94:bc:de:0a:a4:bc:a3:ee:51:38:06:ae:63:
                    ea:08:6e:da:81:ce:74:16:36:b3:21:da:ce:44:cb:
                    af:00:0b:fb:e6:12:9a:dd:c8:0c:a6:20:f0:d1:01:
                    95:f2:3c:ac:56:cc:98:5d:77:c9:73:b7:25:7d:31:
                    9e:46:02:ee:dd:bd:ce:87:f2:74:28:d5:7f:b4:f8:
                    9e:b4:09:51:27:70:ff:51:63:9d:5c:4d:ec:31:b8:
                    7c:8f:7f:48:34:a3:0e:f6:a6:44:8d:2d:df:a3:56:
                    72:26:9a:cc:30:fe:fc:51:a9:8c:58:f4:1e:36:e2:
                    99:b4:62:f4:b7:6e:98:90:52:18:35:f6:d7:f7:cc:
                    13:26:e6:f3:1a:57:35:85:7a:1f:fd:91:22:8f:c6:
                    bc:ee:f0:3d:aa:9e:d2:b0:c6:91:d9:09:2d:18:a4:
                    7b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:85:9C:1C:DB:CC:27:6A:B0:91:3D:FE:1E:0C:7F:99:71:8B:FC:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5947ae3d-0cb8-3631-a5d1-98d51e9f7ecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:64:99:04:1f:7a:ff:73:90:1f:45:d7:16:71:95:45:56:5b:
         ee:b8:05:cf:1a:da:a1:ac:74:a3:7f:d9:20:18:37:ef:05:1e:
         81:0a:cb:fd:d9:01:07:a1:84:06:98:9d:c2:c1:4c:f2:07:5c:
         23:ea:6d:86:32:51:d0:e8:9f:c5:ea:b7:a7:4a:63:6c:0d:93:
         76:fc:37:94:17:fd:52:3b:34:3a:cc:87:95:fd:7d:6b:0d:8b:
         ff:e2:a4:a8:11:62:6b:2d:d8:58:ac:fc:44:75:49:75:24:73:
         f2:37:11:00:08:11:7b:08:52:b9:a6:33:98:b4:17:9b:76:7c:
         c6:4f:69:70:2c:9a:43:d0:35:c7:c9:37:27:fb:77:c7:0e:f9:
         b5:3d:0b:29:e0:81:ac:07:b3:cd:57:e6:b8:f9:4c:76:d8:5f:
         26:fb:e2:e6:cd:5e:e2:85:0f:e2:88:55:68:bb:90:2e:11:0d:
         a3:d0:37:54:f1:14:8a:84:61:bb:cd:50:32:22:6c:de:aa:90:
         02:8b:2c:39:f8:23:99:1c:08:f2:58:e6:e5:95:93:25:b6:59:
         72:be:11:a2:a5:e6:56:49:d7:6f:90:37:54:4b:99:64:33:e4:
         28:d1:0a:f4:4f:3a:ee:20:68:82:f6:94:44:aa:91:29:07:3c:
         c5:3e:6e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:59:04 2025 by rpki-client