Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dca9daa-dbf2-3a49-83c8-b872fd324fdc.roa
File:                     6dca9daa-dbf2-3a49-83c8-b872fd324fdc.roa (raw, json)
Hash identifier:          eNNWgbXtOw7WVJ9dPVzMTEzyWDnYsiNdmTfXvy01mFU=
Subject key identifier:   F5:06:14:60:1A:93:D4:6A:5D:3F:3B:55:A3:F7:BA:5A:13:E4:F8:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497D9176370184729BFE3640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dca9daa-dbf2-3a49-83c8-b872fd324fdc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396597
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:91:76:37:01:84:72:9b:fe:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bdb5977a-9e76-4cd7-ac08-e21531f04381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:17:58:e9:0b:52:08:7c:9f:2d:f5:5a:f9:
                    62:be:c9:85:10:3f:a3:0d:b0:8f:40:e1:39:d1:1b:
                    ab:4c:fd:c6:22:9e:a9:9f:61:6b:36:83:1f:da:c1:
                    b7:04:9f:4e:e4:f8:0f:a0:29:de:f7:b6:39:bc:73:
                    64:3f:33:a6:e2:f3:b9:c1:d1:bd:0a:c0:3e:e6:9a:
                    a1:cd:86:14:53:40:7b:3e:ae:f2:1f:09:5f:d0:85:
                    77:b7:01:51:77:cc:ed:bc:79:bd:10:96:e4:cf:60:
                    72:35:2a:ff:9a:66:19:09:e3:ab:f1:b5:30:59:5a:
                    64:ee:e7:eb:73:a2:9f:53:2f:cc:05:74:02:ec:21:
                    9f:04:02:d4:c5:f9:08:43:45:c0:54:4b:19:2b:99:
                    14:39:99:5a:e7:59:04:9c:be:14:ba:74:71:f9:83:
                    ac:07:52:37:7f:b5:da:77:68:67:64:9d:c7:cb:0d:
                    20:b3:48:9d:24:39:10:46:4b:f6:16:0b:39:87:a3:
                    58:50:fb:5b:33:1a:5b:a6:1b:b2:8c:4a:d6:21:24:
                    10:43:a6:67:c1:28:c9:7a:61:15:82:20:51:05:b0:
                    61:54:c4:ee:d9:0b:d4:be:90:0a:e9:35:0b:73:b5:
                    28:6a:c6:42:92:12:3a:d6:0b:17:41:21:80:34:d1:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:06:14:60:1A:93:D4:6A:5D:3F:3B:55:A3:F7:BA:5A:13:E4:F8:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dca9daa-dbf2-3a49-83c8-b872fd324fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:89:1d:c7:49:48:55:d7:a6:dc:73:51:43:62:48:ac:b5:06:
         68:19:58:2b:2e:a7:9c:d8:3c:bd:2d:7a:e1:a7:95:01:2d:76:
         e1:1c:17:4d:37:be:a2:b4:60:a3:1c:b5:75:43:6f:5b:20:19:
         bd:19:58:be:0a:fc:98:cc:f4:02:63:ad:38:4b:3b:07:ab:02:
         42:6e:4e:4b:09:90:2b:cd:73:01:de:cd:7f:e7:99:a8:a5:6e:
         04:af:e3:ed:15:89:b2:5d:3f:1b:52:32:b6:6d:39:10:6b:eb:
         cf:b1:a0:72:b6:43:3b:7e:0f:c7:08:e4:f7:1a:f5:11:48:2f:
         72:95:4e:f4:0b:ab:31:9a:78:95:12:e1:93:95:35:b5:28:08:
         f4:3e:b0:84:4a:2c:2c:a7:21:b5:42:82:84:f9:28:da:3c:81:
         02:6a:b7:20:d2:a8:83:59:41:7f:53:78:7d:3d:3a:4c:6e:ae:
         00:60:01:34:48:43:5e:d1:82:fb:0d:46:1f:45:29:e4:4c:7f:
         f4:39:1e:a5:79:bd:f2:52:51:4f:e4:a2:d8:da:79:f3:da:f5:
         cc:bc:15:16:11:d7:f5:4c:82:86:3b:cc:91:0c:31:88:f7:c7:
         97:47:9d:62:36:65:c3:3f:fe:cc:e9:93:70:49:26:5d:44:de:
         8c:7f:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:27:01 2026 by rpki-client