Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31b86d97-8dee-3fd4-8e67-5babf87f0018.roa
File:                     31b86d97-8dee-3fd4-8e67-5babf87f0018.roa (raw, json)
Hash identifier:          vxzAbpyhgOntZtHeZqQeYKxl7zx1ONwdcuEpajmWiUs=
Subject key identifier:   D7:8A:CB:19:0F:79:A4:6B:A3:C2:28:26:E5:24:32:F9:A2:42:06:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C081E0B1088AF03F34BCA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31b86d97-8dee-3fd4-8e67-5babf87f0018.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396826
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:81:e0:b1:08:8a:f0:3f:34:bc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=c27b741d-9fae-413a-a09e-81355ae61596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:40:3e:99:03:80:cf:ba:71:a5:f9:f4:43:50:
                    95:3d:6f:2a:1c:49:f5:9f:54:fb:fb:0a:85:ab:65:
                    00:f6:ac:7c:dc:aa:80:57:2e:83:28:a5:7f:0f:70:
                    af:f4:a1:6f:55:79:1e:43:21:c1:e0:69:3a:5f:aa:
                    8b:9d:f2:d4:6f:ed:5a:7a:80:88:a0:bd:86:86:6f:
                    20:eb:70:4d:04:b0:10:97:78:a3:43:a4:d2:54:99:
                    5c:03:36:c3:7b:e6:42:50:6c:cb:f3:06:2e:14:b2:
                    41:3d:cf:cc:3d:fc:a3:72:db:9b:ec:74:56:61:a0:
                    6d:30:18:b7:8d:7d:3c:d8:3c:da:a2:de:70:a8:af:
                    ae:70:13:8c:75:e6:1a:c6:92:78:ef:9e:a5:47:0e:
                    92:fc:11:ea:31:fe:02:5f:53:80:03:8d:ba:56:7b:
                    97:ec:f3:98:e4:9e:1d:e0:76:95:1a:5b:16:b2:4e:
                    4f:32:fa:a7:6b:3a:a8:dd:91:0e:9e:b9:4f:6e:79:
                    0b:49:0c:2b:94:38:a8:72:e2:fd:5a:64:ae:e9:22:
                    79:91:8e:65:10:41:b5:be:91:2f:24:d8:4c:53:1e:
                    d4:cd:14:99:ab:85:9b:d8:fd:70:be:b2:73:83:1e:
                    b3:fa:92:43:de:af:63:5c:91:23:6f:05:8b:99:b3:
                    ed:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8A:CB:19:0F:79:A4:6B:A3:C2:28:26:E5:24:32:F9:A2:42:06:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31b86d97-8dee-3fd4-8e67-5babf87f0018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:5a:a6:fb:e1:d6:38:62:7e:41:bc:a7:94:1d:e6:5b:4e:98:
         80:f5:dc:72:a8:87:bc:19:5f:7f:47:b9:74:92:2c:49:2d:00:
         4d:1c:15:ad:71:59:e8:70:74:c2:f6:80:e7:f0:e4:34:64:18:
         36:09:df:44:d8:3d:22:b4:49:c9:ca:11:9c:b5:8a:30:44:c9:
         8b:f0:66:99:88:b8:b6:f3:2c:29:3f:c8:b5:65:c4:5f:1f:2e:
         0a:e4:8f:62:d4:3e:d2:0a:af:98:9c:4d:92:5b:44:40:43:56:
         9f:9a:26:bc:be:d4:f4:50:9d:bd:cf:94:ed:a4:57:7d:82:51:
         e4:75:2f:ce:09:cd:53:cc:cd:c6:7c:4f:1d:d8:d8:be:dc:7d:
         4c:37:3c:5c:bf:9b:99:b1:c4:bd:e8:50:f2:f0:c5:fd:cf:ca:
         0a:6b:4a:30:e8:75:c6:36:44:f6:33:14:e4:ec:f2:aa:b1:69:
         6c:66:82:66:40:7e:06:5e:0e:be:13:5e:f9:ab:4b:1c:aa:3a:
         14:85:64:fd:e7:36:5d:04:cd:69:29:b8:b1:cc:c5:b6:0f:8d:
         14:95:f2:1b:fb:60:e0:f2:7d:d2:de:9f:8d:08:6d:21:4d:ce:
         99:32:72:48:40:57:2d:83:74:24:73:f4:1b:89:4b:62:55:11:
         72:fa:6c:ed
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwIHgsQiK8D80vKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk
YzI3Yjc0MWQtOWZhZS00MTNhLWEwOWUtODEzNTVhZTYxNTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0A+mQOAz7pxpfn0Q1CVPW8qHEn1n1T7+wqF
q2UA9qx83KqAVy6DKKV/D3Cv9KFvVXkeQyHB4Gk6X6qLnfLUb+1aeoCIoL2Ghm8g
63BNBLAQl3ijQ6TSVJlcAzbDe+ZCUGzL8wYuFLJBPc/MPfyjctub7HRWYaBtMBi3
jX082Dzaot5wqK+ucBOMdeYaxpJ4756lRw6S/BHqMf4CX1OAA426VnuX7POY5J4d
4HaVGlsWsk5PMvqnazqo3ZEOnrlPbnkLSQwrlDiocuL9WmSu6SJ5kY5lEEG1vpEv
JNhMUx7UzRSZq4Wb2P1wvrJzgx6z+pJD3q9jXJEjbwWLmbPt2wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNeKyxkPeaRro8IoJuUkMvmiQgZxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzFiODZkOTctOGRlZS0z
ZmQ0LThlNjctNWJhYmY4N2YwMDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAfWqb74dY4Yn5BvKeUHeZbTpiA9dxyqIe8GV9/R7l0kixJLQBNHBWt
cVnocHTC9oDn8OQ0ZBg2Cd9E2D0itEnJyhGctYowRMmL8GaZiLi28ywpP8i1ZcRf
Hy4K5I9i1D7SCq+YnE2SW0RAQ1afmia8vtT0UJ29z5TtpFd9glHkdS/OCc1TzM3G
fE8d2Ni+3H1MNzxcv5uZscS96FDy8MX9z8oKa0ow6HXGNkT2MxTk7PKqsWlsZoJm
QH4GXg6+E175q0scqjoUhWT95zZdBM1pKbixzMW2D40UlfIb+2Dg8n3S3p+NCG0h
Tc6ZMnJIQFctg3Qkc/QbiUtiVRFy+mzt
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:46 2025 by rpki-client