Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff535bf3-ea55-34a7-a7dc-ca859d1c65ef.roa
File:                     ff535bf3-ea55-34a7-a7dc-ca859d1c65ef.roa (raw, json)
Hash identifier:          hxmf/DDdr+BaDLlOvv7bl1/ZPnMxdLDK/ie6Lj3Bwbk=
Subject key identifier:   24:94:1F:E4:DD:48:98:AD:70:A1:93:43:67:13:2F:B2:B7:7F:6F:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C08D183A402B6510D91800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff535bf3-ea55-34a7-a7dc-ca859d1c65ef.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396587
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:8d:18:3a:40:2b:65:10:d9:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=7ddf030f-7be4-40d0-92f1-47e26e0403e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:49:03:2f:dd:df:0d:4a:f6:77:75:86:08:
                    98:95:d7:ea:c0:64:48:36:fe:5c:63:dd:39:b3:eb:
                    15:33:fe:2c:b3:bc:90:e9:33:d2:72:92:c4:3b:6d:
                    f3:43:45:dc:35:5a:56:0b:59:74:84:6f:6b:e9:a4:
                    83:f9:76:a9:d1:d4:0f:8b:60:28:50:d4:49:65:c5:
                    8d:7e:f8:63:72:e9:76:2f:5c:26:ea:6c:b0:31:83:
                    af:fe:2c:2f:75:0f:37:48:e0:54:4d:f2:17:aa:c6:
                    14:c2:51:d9:cb:d5:99:d2:a7:77:6d:5f:8f:63:cc:
                    34:d6:99:23:f7:f6:2f:62:21:8a:ed:a3:d5:77:20:
                    18:df:f8:a2:24:6c:17:9b:5e:dc:6c:cf:0a:0e:9f:
                    81:ea:4e:5c:dd:bf:de:fe:f4:de:a3:4a:2d:67:f9:
                    d6:06:e1:37:d1:85:9d:a9:70:91:87:a3:ed:c5:c5:
                    35:c1:61:fa:07:ea:38:d9:dd:42:45:c9:7c:bf:61:
                    32:85:21:83:1e:31:8c:0f:d0:a6:27:b1:ba:1e:62:
                    41:c9:f9:5b:6d:e4:42:08:c8:2f:63:4b:bb:37:f1:
                    45:d9:1d:56:c1:2e:b6:a8:5c:54:bf:63:c5:5b:9e:
                    46:a7:a1:e3:dc:df:40:6c:85:39:c3:a6:6d:9f:98:
                    7c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:94:1F:E4:DD:48:98:AD:70:A1:93:43:67:13:2F:B2:B7:7F:6F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff535bf3-ea55-34a7-a7dc-ca859d1c65ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a7:c1:91:d3:2a:81:37:c6:29:63:2e:60:50:ce:30:58:ef:
         b1:7e:5e:7c:89:e8:53:b5:39:19:02:45:b9:3e:2e:28:24:55:
         11:dc:83:c2:3c:53:de:e8:c8:16:3e:06:0b:07:32:51:1e:b5:
         40:74:e4:46:2a:6b:ec:fb:49:05:cb:fb:3d:8a:1b:d2:7b:c7:
         b2:d3:b5:6d:72:58:ac:f5:15:64:da:05:66:bb:00:12:5f:79:
         0f:fd:72:52:43:fe:36:e7:02:e8:3e:91:c9:28:d5:a8:3d:b9:
         1e:e7:07:1f:c4:0e:3b:dc:f2:37:2b:91:f3:b0:3a:1c:15:8b:
         11:e1:8c:71:09:5f:dc:3d:7e:e1:1c:f1:84:9a:6e:d8:c3:47:
         d5:c7:d0:0e:84:e1:74:2e:53:81:1d:de:02:7f:db:ea:23:3a:
         c8:40:cd:03:c4:e1:56:20:24:a4:69:f1:d0:b8:7b:97:98:49:
         58:7b:af:70:94:94:62:07:40:35:dc:8c:c2:0e:6b:1b:d5:6b:
         14:d6:bc:94:ee:81:e3:ab:d2:ad:f8:3e:ba:07:96:2a:2f:4b:
         e5:73:dc:1e:27:47:25:58:0a:c3:c7:c1:db:50:55:78:08:c3:
         4f:93:b0:35:4e:24:92:ff:cf:f8:52:88:42:a8:5f:4f:e2:ac:
         71:74:5a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:13:50 2025 by rpki-client