Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29c20774-0704-3daa-967f-59cba395221f.roa
File:                     29c20774-0704-3daa-967f-59cba395221f.roa (raw, json)
Hash identifier:          3oCL2sIFO7h5erqRzF6iyb0uC+rEwwgOmHLqOXQ8j+U=
Subject key identifier:   13:1D:39:DF:AC:64:C9:F9:A5:2F:8B:9C:7D:0E:7B:5B:F0:04:46:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C081CB90296F6CA622A400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29c20774-0704-3daa-967f-59cba395221f.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     36618
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:81:cb:90:29:6f:6c:a6:22:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=2d7a45f4-2f61-46a6-b611-690a710ef851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ea:77:e7:4c:e2:f0:32:75:b2:e4:01:0b:2b:
                    39:01:18:4a:3a:ee:ee:86:b3:35:0b:4b:5f:51:ee:
                    83:1a:8d:25:33:64:f3:2b:5c:25:51:aa:62:be:d3:
                    c7:97:b2:63:5f:1a:38:85:28:de:21:6d:b4:c9:3c:
                    f8:c3:84:60:63:44:c6:6c:71:fc:3a:9e:5a:d4:97:
                    3a:fc:40:72:f0:44:20:8c:d0:06:f5:fb:6c:1b:a3:
                    f7:29:3d:b9:2e:61:e5:54:aa:90:05:ca:ef:fe:61:
                    ed:e8:e5:4d:c1:da:3e:35:f4:42:0b:e5:79:64:ab:
                    57:2d:e7:02:d0:b1:3f:c9:10:df:b2:8a:ae:3e:43:
                    7e:fe:70:d2:89:55:93:32:21:05:74:54:ce:75:2b:
                    74:64:7e:c3:dc:65:f4:da:44:a8:65:e4:84:85:56:
                    de:7f:34:96:fa:8e:e7:68:0d:34:6c:e0:24:5e:23:
                    15:e0:8b:d0:9a:28:6a:70:f6:8f:49:2b:0f:01:cd:
                    d9:88:d4:a7:ec:b8:68:84:6a:3b:cc:37:66:7c:b7:
                    30:44:a1:19:8a:bd:10:aa:11:ed:f1:03:15:b2:17:
                    56:fb:db:b3:11:9b:a8:08:4f:cb:64:90:c3:81:c8:
                    fc:5f:5e:1d:e4:46:9a:07:37:b2:fe:25:ce:42:a0:
                    bf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1D:39:DF:AC:64:C9:F9:A5:2F:8B:9C:7D:0E:7B:5B:F0:04:46:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29c20774-0704-3daa-967f-59cba395221f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:29:73:87:c6:83:f7:9f:0c:5e:ea:77:5c:85:4f:e9:d3:ee:
         30:74:51:3a:53:8e:80:3c:ea:8c:18:b5:85:f9:d6:9c:4a:5c:
         71:a7:96:b1:e4:ef:fc:2e:f9:b7:5a:e7:01:85:1e:88:04:0b:
         5a:f0:0d:f4:3b:53:7f:f2:aa:7c:1a:f3:fb:3a:3b:c6:92:b5:
         70:de:df:d9:5c:71:d1:12:92:03:98:9a:ae:b2:18:bb:ce:6d:
         c2:61:fd:6d:d2:5d:df:95:59:ea:60:3f:65:14:87:5c:31:98:
         73:67:61:f2:03:42:35:41:2b:f2:f7:d9:07:7c:71:95:14:08:
         59:fe:e2:9a:6b:a5:5b:50:06:0f:f0:52:0d:e9:e0:7a:c5:19:
         2b:d4:d6:86:8d:19:43:51:bc:c1:1c:f1:33:dd:5c:5a:fe:01:
         f5:15:ea:ba:b1:98:a5:f4:47:21:b5:83:53:21:c3:e9:a3:5e:
         20:3a:73:04:ff:b6:d8:3f:ae:22:d7:97:3e:71:ae:ab:39:e2:
         e7:af:b3:b2:72:74:8a:38:48:8f:e9:cf:48:bb:d5:4c:d4:84:
         99:f5:8f:4b:50:87:40:5b:67:19:f7:11:45:41:eb:1f:df:c4:
         a0:eb:63:75:71:f7:7d:a6:4d:5d:db:8b:e6:0d:92:d4:14:a4:
         c5:15:68:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:57:04 2025 by rpki-client