Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0dc6683-9d59-3255-8e6e-dbfe5c88d834.roa
File:                     b0dc6683-9d59-3255-8e6e-dbfe5c88d834.roa (raw, json)
Hash identifier:          oX8Qi0pw1YstdRcVw7ba8sY9pmO4M19Ixigp8NtgDSA=
Subject key identifier:   9F:2F:6C:F7:E5:35:3C:4B:86:25:BB:DD:88:37:2D:70:AC:F2:FA:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C07F3F645F5CDB66BFB200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0dc6683-9d59-3255-8e6e-dbfe5c88d834.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396546
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:7f:3f:64:5f:5c:db:66:bf:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=e983f330-bd30-4ff0-952d-a88566d401c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:84:a8:9a:4f:6a:d7:a1:6a:37:9d:67:da:
                    7a:12:5f:c6:77:48:c1:fc:92:a9:3d:b3:63:8e:72:
                    39:ce:0a:f8:b1:39:20:a8:83:cb:dd:6f:de:01:14:
                    d4:16:69:33:81:da:dc:3f:e9:13:af:76:97:61:cc:
                    e5:af:2f:b3:8c:87:45:9e:c7:e3:6b:87:3f:92:45:
                    cf:99:74:dd:4d:ad:ba:e3:31:99:06:9b:a7:7c:a9:
                    c1:b4:f6:fc:73:a4:91:dc:eb:4c:2b:10:d2:f1:66:
                    5c:6c:81:cc:5c:94:3c:2a:6a:cc:10:56:80:dc:e4:
                    d8:a8:66:0f:40:01:ce:12:8c:f4:de:d4:17:ab:31:
                    9f:83:e1:ca:34:8d:b2:3a:85:8e:55:35:b5:39:97:
                    ea:ef:75:d4:1b:93:a6:fb:75:45:94:ab:b8:69:16:
                    c2:c5:14:b1:f5:38:6e:4c:ac:db:62:cc:37:76:31:
                    fb:2d:4a:de:7b:e2:0d:a1:76:d3:68:26:14:e1:2f:
                    04:bd:2a:73:78:ff:2f:3a:d2:21:61:27:80:f0:57:
                    3a:99:8b:c9:53:1e:26:20:ae:79:95:48:c4:67:23:
                    82:ef:e8:fd:ae:f8:44:8b:84:79:02:e3:b5:b7:04:
                    e7:8d:63:b2:9c:ae:26:b4:0f:d2:67:9d:99:8e:63:
                    95:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2F:6C:F7:E5:35:3C:4B:86:25:BB:DD:88:37:2D:70:AC:F2:FA:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0dc6683-9d59-3255-8e6e-dbfe5c88d834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:0b:ca:29:78:fb:0f:46:7b:2d:bb:94:9f:95:7c:ba:b5:11:
         b3:32:4a:80:cc:67:7f:55:33:c8:65:54:61:54:3d:86:97:1c:
         af:d8:2f:fa:81:d6:95:22:a5:68:d0:d3:2f:70:e4:6a:80:a4:
         fb:4e:5d:84:67:de:dc:bc:5c:b1:f9:21:85:1a:a5:f3:a9:a4:
         ae:57:2c:2f:c6:92:6f:8b:e3:e4:4f:a9:db:21:bb:2f:9e:4f:
         c4:9b:df:35:b5:c6:5a:eb:6b:cf:f0:36:0b:a2:99:d6:b8:9f:
         dc:db:88:ac:4f:af:0c:2a:b9:72:fa:da:4a:3a:6f:de:3d:ab:
         81:37:5e:5d:cf:47:84:9c:19:a7:26:ad:26:e5:63:e6:e3:81:
         59:58:49:0c:8a:c2:d3:6d:be:30:3d:93:26:2f:ce:f1:d7:17:
         72:dd:03:58:1d:dc:3f:da:9c:14:87:5f:96:38:3a:92:33:29:
         24:98:1f:80:a0:b7:88:60:52:af:13:cb:52:91:c5:aa:a6:2a:
         5b:33:24:fc:f1:1d:89:16:e6:31:35:b2:64:5b:e9:83:74:5f:
         52:37:9e:dc:26:36:e3:97:eb:55:58:48:12:81:98:4d:36:7e:
         b1:9d:65:07:13:a1:2f:85:42:0d:63:f0:ab:6f:4f:db:17:78:
         af:68:cc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:11:41 2025 by rpki-client