Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1d0bd0a-bad8-3631-8b87-1e33560a66c0.roa
File:                     f1d0bd0a-bad8-3631-8b87-1e33560a66c0.roa (raw, json)
Hash identifier:          4qbdDwd6qNd+sub8Yp51ovbpZk+VA45wjhugVbDPYb8=
Subject key identifier:   46:FA:75:93:15:52:78:42:F7:32:56:D7:5F:F2:59:A7:92:76:30:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C07EBBB0D84B129EA60800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1d0bd0a-bad8-3631-8b87-1e33560a66c0.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396597
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:7e:bb:b0:d8:4b:12:9e:a6:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=fce524c3-7089-4494-a541-fb0cff3be27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:14:45:87:45:27:37:bd:e9:a9:22:e3:0b:
                    53:e6:f2:e9:a1:41:13:5e:73:66:87:87:b9:62:fe:
                    c3:cc:8c:7b:a5:db:ed:e6:56:36:59:03:81:a8:57:
                    c8:f1:c7:9e:5d:f4:13:4d:b1:74:82:72:b1:6f:4e:
                    00:86:bb:b7:02:4b:70:33:eb:9b:37:92:32:ef:cf:
                    97:56:50:fd:d5:c5:72:c3:f2:8d:02:95:8a:29:11:
                    60:d4:4b:a1:1f:b8:18:29:a8:43:c4:52:83:0f:e3:
                    6c:d3:b2:9f:da:83:74:62:d4:aa:b8:d4:f3:05:33:
                    5b:ee:ca:dd:1d:13:b1:67:2d:81:41:55:03:5b:39:
                    57:f8:e4:a5:97:ef:fc:24:f9:f6:4d:01:2d:50:cf:
                    26:67:2e:d2:fe:13:91:98:13:fc:a1:ef:c8:d0:02:
                    a3:46:de:01:c4:6c:d9:fa:f1:8e:6d:75:93:72:ed:
                    71:20:cf:14:53:19:b2:59:ca:6c:39:7c:f8:e2:dd:
                    9b:9b:91:b4:21:17:c6:e4:5a:f8:9a:2c:25:e5:7e:
                    26:6b:08:60:4f:1b:41:6d:24:38:62:04:b7:59:e0:
                    e3:98:c4:66:b9:5c:01:d3:5d:0e:e1:67:de:8e:67:
                    22:ca:51:f3:fa:04:e4:a8:be:27:1c:a3:24:d0:c9:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FA:75:93:15:52:78:42:F7:32:56:D7:5F:F2:59:A7:92:76:30:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1d0bd0a-bad8-3631-8b87-1e33560a66c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:14:67:c5:a0:7b:2c:0d:c0:88:44:7b:6a:9f:3f:4a:b3:64:
         49:43:16:15:0d:29:48:0c:6a:7f:a5:5b:2e:de:dd:4e:e4:25:
         f7:81:32:76:89:83:f5:21:04:f4:e8:51:8e:62:ae:ec:2c:28:
         4b:6c:ea:24:8b:5e:31:8d:be:b3:52:f3:c6:08:f1:c1:26:7b:
         85:ab:14:80:ee:45:77:a2:70:0a:6b:5b:f7:b1:0a:a4:f1:8a:
         df:cb:d1:c6:15:7f:fb:20:00:98:59:b7:e8:a0:88:8c:f7:a0:
         a2:eb:57:45:b7:2f:74:2d:45:5c:50:ff:82:d2:52:9c:dc:40:
         ca:96:79:4c:0e:76:56:cf:26:71:e9:e1:b9:6a:cb:b5:bd:70:
         a2:2f:3b:3e:90:d5:da:a4:75:66:a9:53:2b:9c:f2:e5:96:dd:
         8b:50:de:3c:3f:69:b8:09:a2:ae:81:55:45:1d:ed:27:72:35:
         c9:8f:f3:d2:b9:b8:d4:bd:34:c6:d5:e1:be:8e:37:16:87:88:
         78:f1:0a:a2:80:1b:0f:42:4f:13:cc:58:d1:cb:78:42:d9:25:
         1d:f7:a1:cb:3e:b9:ff:4c:d0:d2:53:c3:b2:29:64:35:0e:d1:
         48:9c:17:87:19:5c:8e:f4:ce:c5:71:79:12:e7:86:90:8a:2e:
         5e:ea:a6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:16:22 2025 by rpki-client