Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/734dc754-5c0a-3db9-b394-16061a58a528.roa
File:                     734dc754-5c0a-3db9-b394-16061a58a528.roa (raw, json)
Hash identifier:          FnDGbXq35nsk2Zdb4b7Ff9tIPre33F+v7iVbFQr7kwE=
Subject key identifier:   0F:10:2B:00:F5:24:B3:79:FD:59:86:BE:47:5C:4E:D1:EE:D7:FD:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C08900DB7063347478B5E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/734dc754-5c0a-3db9-b394-16061a58a528.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396573
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:89:00:db:70:63:34:74:78:b5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=9c224c56-95b9-4f0f-b27c-10acb633b5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:02:c8:22:4c:62:7e:47:c1:b7:95:f3:d1:
                    3f:f8:a2:0c:dc:6b:5c:0d:72:c5:d1:33:ad:30:eb:
                    29:8a:db:84:67:f1:13:d4:a4:75:af:df:81:6d:0a:
                    24:fc:02:b4:35:bc:6e:34:6a:49:c7:ed:d1:89:70:
                    cc:8b:fc:53:20:bb:e0:a9:26:2a:e2:e0:8d:45:41:
                    89:55:49:22:ac:9c:a2:14:6a:9b:fd:53:86:c9:a6:
                    ed:0d:bd:63:73:c9:92:d2:98:61:4f:85:fa:95:79:
                    83:f8:18:23:7e:ab:47:a3:67:7b:00:72:e2:b4:d4:
                    99:29:91:fb:ff:16:9e:6e:1e:73:25:f0:d2:9f:62:
                    21:59:cc:21:63:0d:4c:4a:77:2d:4c:f5:7d:d5:27:
                    b5:ee:98:e5:7b:85:32:40:4c:2e:0a:0c:e7:16:b8:
                    1f:08:ea:37:33:f7:e8:c4:f6:4b:1e:60:47:ec:75:
                    a2:79:65:7d:f9:54:23:60:d2:d8:06:2a:90:1e:6b:
                    5e:9e:29:f7:cd:91:82:33:0f:1c:84:37:32:a1:6d:
                    38:24:70:f9:7b:6f:a9:32:3d:3d:cf:70:e4:6a:56:
                    f4:65:ce:ee:ad:36:f8:df:2a:4e:24:68:3c:0b:46:
                    41:80:b7:6b:7a:f4:f8:58:8c:ae:bd:84:6a:20:ae:
                    2f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:10:2B:00:F5:24:B3:79:FD:59:86:BE:47:5C:4E:D1:EE:D7:FD:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/734dc754-5c0a-3db9-b394-16061a58a528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:b2:d7:22:9f:66:14:46:79:59:60:16:9b:c0:ea:86:4f:98:
         c6:a2:c0:79:d8:8e:5a:e3:e6:e9:d6:c9:65:59:7f:a7:73:35:
         43:6e:7c:93:2e:ad:73:c9:20:43:d4:03:45:c1:d7:62:16:0f:
         af:f5:f1:76:09:08:3e:87:f9:d4:05:9d:8d:62:f9:88:0b:3a:
         c7:fa:40:0c:b4:f4:e5:5c:18:64:78:99:42:54:13:29:ca:2c:
         7a:67:42:80:ce:31:c3:41:8f:b6:d2:f0:5e:d7:10:1d:cd:c1:
         be:96:27:af:11:2a:82:a8:55:a2:60:ea:bc:51:be:2c:32:e8:
         dc:35:b8:d1:c8:2c:f0:5c:46:a5:d0:0d:fd:f3:a1:c6:e6:a2:
         3b:85:45:f9:47:2e:84:e8:66:e6:a4:41:0c:b4:eb:e5:08:78:
         8c:ff:d7:7f:6e:f4:38:fa:36:08:c9:c9:0b:91:53:a3:09:23:
         02:a3:3a:90:f5:72:57:d4:d5:d4:37:9b:bf:bb:7e:3d:74:85:
         07:6e:91:1b:e0:46:2e:ab:2e:d6:fb:8f:dc:5d:2f:e4:74:12:
         a0:c8:e0:a0:dc:e8:cf:2d:d1:2f:05:bf:53:7d:ac:93:c9:4b:
         8b:33:a6:5c:bb:f9:94:62:75:da:8e:1f:2e:60:d7:62:a3:4e:
         b4:66:12:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:22:17 2025 by rpki-client