Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b76dd78c-694b-317c-8d7e-69e4429fa1eb.roa
File:                     b76dd78c-694b-317c-8d7e-69e4429fa1eb.roa (raw, json)
Hash identifier:          mFzXq0ZT5fI4qpBzSxX8YgObj0V6hK2issL6f5WGaF0=
Subject key identifier:   16:FC:77:92:EE:B5:9A:55:00:F7:0C:D4:16:96:04:2B:D6:56:FD:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C08B90414BBA233B746430
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b76dd78c-694b-317c-8d7e-69e4429fa1eb.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396546
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:8b:90:41:4b:ba:23:3b:74:64:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=10e7eec1-726e-4e9b-badd-5fd9a2f287bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:4f:ed:f0:b0:63:71:b2:79:25:0b:2b:74:
                    6e:5e:43:49:43:14:5b:ee:3a:d0:6c:d1:7c:82:3e:
                    88:06:ed:01:36:91:b7:76:a6:cf:89:46:3c:bb:9b:
                    5e:05:a2:69:e0:54:f2:d0:ce:c6:c7:71:7d:81:71:
                    f9:6f:b0:79:91:ad:cd:ea:27:03:39:2d:63:f3:89:
                    19:4e:3d:46:e6:05:c0:cd:02:a3:73:fb:32:d0:a1:
                    9b:ba:05:69:0d:9b:90:66:f6:eb:7f:29:21:22:2c:
                    0e:ec:ce:69:5b:1f:b6:e7:d0:e0:5b:2a:63:f5:ec:
                    56:fd:27:88:e0:59:7d:8a:41:ef:ec:1e:c6:4f:0d:
                    e5:e7:c1:0e:35:96:4a:eb:0d:ac:43:d2:4c:6c:70:
                    4f:a7:79:3f:d8:dc:5c:16:74:b3:06:38:4b:e0:40:
                    38:cc:89:69:a5:9a:45:c9:6a:35:4b:2c:67:18:57:
                    f1:7f:b8:77:59:56:bb:96:19:74:58:94:09:81:a4:
                    92:03:31:35:b9:a5:f7:c7:ae:53:81:a6:62:fb:17:
                    94:05:05:53:0a:13:77:5b:f2:65:ed:0d:68:04:4c:
                    69:ca:17:57:56:7c:54:27:9e:51:bc:0e:34:3a:ca:
                    99:05:c6:e2:04:f2:16:c3:5b:7f:ac:e2:45:69:a6:
                    74:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FC:77:92:EE:B5:9A:55:00:F7:0C:D4:16:96:04:2B:D6:56:FD:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b76dd78c-694b-317c-8d7e-69e4429fa1eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:31:5b:2e:95:62:46:07:ab:18:3d:ce:dd:fe:fa:62:6c:4c:
         3e:21:ba:97:2f:89:32:aa:b5:39:9c:d0:86:ec:a8:1c:eb:4b:
         b1:54:bc:7a:73:66:4c:db:32:17:75:40:9f:2e:d6:bd:ed:40:
         bc:1e:34:1d:25:0e:93:5f:be:ac:3b:21:e4:d6:77:fa:68:69:
         e2:b0:e4:76:7d:23:2d:0a:20:b6:17:84:13:56:75:e6:7e:cd:
         b2:af:c4:e6:39:32:36:d6:53:f7:24:fe:f6:fa:44:a0:c5:a3:
         0d:77:35:33:41:ed:74:15:08:d8:93:0f:56:a4:fd:70:ae:bb:
         a1:3f:12:e5:e1:c6:ca:ba:84:e2:c6:b4:65:25:7a:42:44:fd:
         7a:9a:5d:f7:3b:3b:26:31:49:5e:2a:76:5c:40:58:73:19:d9:
         0b:c1:95:f3:4c:27:4f:df:87:50:4f:ef:d5:81:b6:01:cf:b0:
         ed:6b:aa:7b:3a:3c:99:61:db:34:c0:0b:1f:9c:99:b5:c4:cc:
         d0:35:fd:48:54:dd:64:2b:08:9b:71:6d:78:dc:14:5e:f0:f3:
         89:89:ba:57:85:58:2d:94:86:14:9f:4c:20:c9:3a:95:d6:8a:
         08:20:95:f4:0d:5e:f9:ad:5f:e5:4d:44:e7:98:81:73:d4:64:
         f7:a8:45:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:44 2025 by rpki-client