Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5266dd01-b014-37ec-a81b-88d83d8166da.roa
File:                     5266dd01-b014-37ec-a81b-88d83d8166da.roa (raw, json)
Hash identifier:          PoAeDCqjFIEMV1HGbVuVphYuwAgVUj+C2yIOKLVuKkA=
Subject key identifier:   CD:F8:6D:5A:3C:39:FF:A4:B8:7E:08:01:E9:57:68:DE:C0:BC:C7:49
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C08677F61A796405156180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5266dd01-b014-37ec-a81b-88d83d8166da.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     397206
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:86:77:f6:1a:79:64:05:15:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=9bd3176a-5c72-4fed-8960-1ead9e869cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:39:a2:07:ca:32:ae:f6:ac:57:02:b7:bf:a9:
                    0c:df:ae:b2:8f:90:0e:eb:ed:a1:20:9d:a1:7b:a3:
                    b9:98:a5:8d:60:11:3a:28:44:7e:27:71:36:16:6f:
                    ce:0b:c7:39:88:e9:c5:95:96:c0:b8:69:a5:e4:74:
                    d6:59:ad:06:ef:f8:6f:f1:d8:99:3d:45:2a:2f:cf:
                    80:34:78:29:94:24:04:65:f8:cb:b6:8d:f7:aa:34:
                    fd:9c:36:c2:10:cd:48:5b:3a:6a:8f:cd:8a:d1:c0:
                    6b:3d:3c:8b:af:af:82:33:2e:c4:d4:dd:e4:ba:0d:
                    a2:06:5c:8b:34:61:11:8e:88:be:7b:ff:d6:49:1c:
                    25:7c:00:d5:8f:36:79:16:4c:54:f8:a6:05:65:64:
                    e9:44:a7:cb:23:97:f0:4f:1c:85:85:38:ba:e5:fd:
                    33:a0:30:35:bb:07:43:b7:b2:6b:82:de:f7:5b:eb:
                    06:be:78:8c:1e:87:dd:8e:40:04:f4:71:0b:72:8a:
                    e4:62:b2:8b:56:81:7b:0f:d4:56:5d:bd:a3:9b:33:
                    dd:50:fa:0f:fb:38:e0:05:87:58:60:43:ef:8a:e9:
                    c4:bc:5e:bc:cb:78:04:6d:5b:9e:7b:7e:6b:f6:05:
                    a2:18:fb:02:14:79:fd:29:e9:3e:c1:46:7e:cd:ea:
                    d2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F8:6D:5A:3C:39:FF:A4:B8:7E:08:01:E9:57:68:DE:C0:BC:C7:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5266dd01-b014-37ec-a81b-88d83d8166da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:70:d9:66:06:1f:0e:3e:74:4f:6d:0d:d5:89:21:04:f7:f8:
         f6:7f:6c:bd:ff:94:75:d0:ca:9b:6d:46:8b:b9:9f:03:bb:3b:
         d0:06:c4:d4:25:47:50:1d:13:6e:5b:f4:e8:95:1c:85:29:43:
         12:64:c3:ad:65:a8:98:d4:ce:29:b7:99:9a:5f:2c:c0:2f:fe:
         20:33:09:0d:d8:8c:a0:95:bd:7c:bd:92:b8:e4:99:0b:63:13:
         d1:34:30:ae:12:2f:b5:31:bf:64:d6:64:7d:e8:91:48:53:06:
         0b:90:2a:27:d5:d9:e7:ac:8d:4e:32:5c:7d:f9:8a:94:82:77:
         ab:08:30:31:91:ec:64:9e:6b:fa:31:45:8c:b5:ae:be:20:54:
         41:04:7e:4e:79:a0:96:33:2a:a8:12:cc:ec:79:80:56:0b:9a:
         0b:69:34:79:00:57:7c:bc:76:b1:f7:b3:c2:01:16:c2:07:f6:
         8c:de:17:09:60:3e:25:24:fa:95:45:f1:ad:9d:ea:fb:9b:90:
         24:1c:47:8a:68:6e:4f:12:a0:79:25:e5:54:aa:37:81:f9:b2:
         61:c6:81:b2:3c:dd:1e:9b:51:87:23:eb:e3:f0:d9:63:d5:d1:
         a7:c0:d0:b7:a3:72:e6:c3:9d:cf:0f:1b:31:d3:91:56:e3:8f:
         1b:2d:b2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:20:24 2025 by rpki-client