Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a1ac6fa-d8a8-3424-ae61-d2b072ac057d.roa
File:                     0a1ac6fa-d8a8-3424-ae61-d2b072ac057d.roa (raw, json)
Hash identifier:          azGRT/pYWPJu4KGKWe47eGaZa4JNVoPQc0DB8Vr3iTw=
Subject key identifier:   89:01:6F:E7:EE:74:D5:61:04:91:91:B3:A1:37:CF:A0:DA:3F:F9:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA791DB1C3065A31ACF50B780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a1ac6fa-d8a8-3424-ae61-d2b072ac057d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396540
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:db:1c:30:65:a3:1a:cf:50:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c944a7d0-84fb-47e6-8bb8-490ff612a8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:c8:01:d5:eb:44:1a:83:b7:e7:df:eb:69:
                    78:b4:13:60:94:16:b0:62:7c:c9:9a:49:5a:47:69:
                    93:23:d0:28:42:27:c9:a3:29:b4:9e:c6:83:d5:d8:
                    72:b2:53:f4:d2:00:0d:02:83:27:b8:69:82:66:44:
                    38:28:de:2c:0a:5f:af:c7:8c:21:72:d3:9d:66:b0:
                    f2:fe:22:33:4a:95:bc:ae:4d:ed:2d:63:b3:99:66:
                    bf:9b:4f:0f:d3:3b:6e:cd:99:c8:10:2a:86:b6:4c:
                    b6:a2:51:59:e0:85:b4:0f:5f:75:83:32:c2:67:ca:
                    e1:01:68:3c:1c:8b:42:64:2a:86:d7:bd:4d:89:a3:
                    d7:31:ea:bf:49:07:5c:9b:e0:ed:df:26:39:a5:0d:
                    8f:7e:94:87:ea:d8:cc:e8:40:99:38:f6:68:f2:f2:
                    2d:1e:8a:7c:36:ef:c1:6f:f2:c4:14:ec:6b:30:dc:
                    1c:3e:55:4c:f6:91:bc:3b:80:d0:c3:cf:61:53:dc:
                    2f:71:f9:ab:9b:75:7f:aa:71:12:9b:99:0d:37:10:
                    5f:40:a5:33:a4:3b:0c:ce:1c:53:88:7d:f3:fb:5e:
                    f6:5e:8e:4a:16:f2:c2:e9:0d:1c:f5:a4:11:c5:30:
                    65:da:91:74:1a:51:d4:ee:c5:c7:c9:d2:a3:24:5c:
                    b3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:01:6F:E7:EE:74:D5:61:04:91:91:B3:A1:37:CF:A0:DA:3F:F9:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a1ac6fa-d8a8-3424-ae61-d2b072ac057d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:53:7c:b5:d2:b9:cf:32:3b:f6:82:cc:9b:e8:c4:a2:a8:3a:
         14:c0:83:78:45:f7:46:7a:2d:35:70:a8:8e:6d:a6:94:79:10:
         fe:b6:76:4e:93:8c:89:02:8a:bc:b9:6e:fd:63:3b:c6:f2:4f:
         64:aa:73:fe:a9:8a:ab:4b:53:54:f4:9f:52:d7:ae:ab:27:5e:
         05:ef:12:3d:18:ea:8e:f1:9e:19:87:17:d2:0d:29:6a:78:cd:
         ad:e9:b3:cc:18:83:08:d7:ef:a0:23:a0:21:37:28:30:64:11:
         3d:85:43:01:a7:52:95:09:a6:1c:87:06:8c:70:57:9a:a5:0d:
         27:cb:b8:8c:4a:f1:c4:1c:ef:b1:28:d6:0d:a9:10:f7:d1:76:
         06:56:01:a8:39:1f:17:cb:f6:e7:49:4c:73:a5:fe:5c:fd:b7:
         d8:64:08:aa:64:60:d9:be:7e:6f:b2:13:30:9a:99:b7:81:11:
         39:37:0d:4f:83:bb:0a:ce:ad:7a:2e:c2:ff:94:06:64:c7:1c:
         0a:7e:bd:0c:b7:b5:a8:98:94:b6:a0:74:2d:5a:2f:64:c0:04:
         71:c3:b4:32:ca:f8:67:71:e0:a4:03:68:f6:70:7a:07:31:4c:
         d9:e5:14:00:6c:7c:07:d7:33:8f:82:0a:00:96:27:fd:cb:fe:
         25:9e:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:44:03 2026 by rpki-client