Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf2ea11-4acc-3241-9293-e3e075c3dc18.roa
File:                     1cf2ea11-4acc-3241-9293-e3e075c3dc18.roa (raw, json)
Hash identifier:          yBifotnmnNE3yOJvCEglzNeyuhDL7ogXlyqxrvicgM4=
Subject key identifier:   62:30:EC:DD:D0:2C:C6:A3:4E:BC:F2:9D:67:FA:F7:81:45:67:70:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA791DA76D7B5D51696A90F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf2ea11-4acc-3241-9293-e3e075c3dc18.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397196
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:da:76:d7:b5:d5:16:96:a9:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=61e3849b-1c2f-4c90-9f92-800ae4315f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:85:ac:f7:81:a3:7e:9f:e9:1a:27:e2:9b:2b:
                    17:e4:9e:7d:72:54:52:08:12:85:ad:c0:84:4b:86:
                    13:93:33:93:79:bf:23:bb:ce:0a:bb:da:9f:40:c1:
                    26:87:3d:6a:49:29:31:1d:05:6b:83:fa:08:a3:69:
                    9a:58:9e:18:71:03:8e:c3:85:05:c3:89:2d:4f:97:
                    4c:e1:24:c8:cf:8b:8e:2e:45:98:d7:56:cf:1c:47:
                    b9:16:ad:29:2d:19:c4:3d:d9:ea:fe:a2:be:13:2e:
                    f8:9f:3a:93:d7:e7:5f:c6:cc:a6:cc:93:61:fe:8c:
                    90:19:32:e9:0c:81:1f:27:c5:30:8e:71:0f:91:7f:
                    42:0c:1d:79:2b:c3:9e:5e:94:56:eb:47:3a:44:de:
                    07:1f:59:4d:39:7d:44:74:29:be:34:60:3c:61:aa:
                    ce:f6:48:f1:3b:ec:20:f5:88:a1:5a:f3:94:23:b7:
                    c7:e0:ea:11:f7:ad:bd:22:fd:0e:d7:2a:f6:94:1d:
                    c5:54:5f:67:e9:be:a5:ba:8a:43:90:ed:1f:72:db:
                    33:61:47:70:b0:96:ec:f2:a4:54:fe:c5:33:81:25:
                    91:7d:71:e4:d9:5b:e4:b0:a3:62:16:ae:09:68:09:
                    71:00:f4:cd:36:3d:eb:19:a3:d0:94:a5:37:99:75:
                    7b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:30:EC:DD:D0:2C:C6:A3:4E:BC:F2:9D:67:FA:F7:81:45:67:70:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf2ea11-4acc-3241-9293-e3e075c3dc18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:71:ec:2b:0c:c6:7f:d4:6a:f1:c3:e2:9e:ad:81:7b:c9:0b:
         50:d5:0b:df:b0:c0:17:77:30:8f:8a:c9:61:93:d3:ca:47:9d:
         81:e4:8b:49:a7:93:dc:f3:a4:f0:6c:38:66:2f:53:2c:ec:de:
         65:65:ae:e9:0f:f5:6b:7f:5f:26:dc:a4:e3:d5:82:23:62:b3:
         5c:f8:12:4e:b3:05:b5:74:ac:ed:af:7d:36:08:59:44:e8:b7:
         dc:94:be:6e:4a:36:dd:24:1f:18:ca:7c:66:ab:78:ed:c6:ab:
         64:79:d9:e3:56:00:31:ba:1a:15:8a:bd:49:80:0e:6e:15:10:
         46:36:16:74:dd:f9:0e:d4:0c:97:5e:f5:df:29:75:60:bc:9e:
         53:01:84:70:6a:3c:ba:65:74:d0:9e:dd:0a:fd:8f:88:a0:9d:
         d9:74:76:b7:a2:e3:c4:d9:7c:d1:89:8b:8c:67:d0:2f:bf:f5:
         42:37:c9:e4:85:5f:0c:e1:01:d1:df:e4:7f:63:41:09:43:8d:
         51:0b:63:d3:d9:1b:4c:24:5c:77:2c:01:e2:35:b5:a1:34:52:
         1b:1e:ba:93:3e:e6:87:17:79:7c:26:fc:09:66:ae:24:56:1f:
         c4:5a:7d:c7:47:79:05:64:46:96:f6:80:aa:42:2c:fd:ac:75:
         df:9a:ba:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:05:03 2026 by rpki-client