Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63e5ea18-3e6d-38b5-85ad-d53892d54f73.roa
File:                     63e5ea18-3e6d-38b5-85ad-d53892d54f73.roa (raw, json)
Hash identifier:          vdba7D4QLxJ1xV3Wi9E6RIKRiglp6aVOuqfHdevYGY4=
Subject key identifier:   4D:40:F6:D2:FD:64:2C:5C:FF:D6:28:8A:E9:8A:84:9F:60:8B:36:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C08A0A8874D7B455B76B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63e5ea18-3e6d-38b5-85ad-d53892d54f73.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     397203
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:8a:0a:88:74:d7:b4:55:b7:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=91fd0bff-2e58-40c6-b889-fd45808c5d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:19:45:88:5b:e9:08:0b:a8:ed:dd:0f:ce:ce:
                    4d:a2:40:c3:6a:03:ea:c6:25:6b:c9:fd:96:fc:6b:
                    ae:bf:49:9e:cc:76:bd:f8:45:91:ab:5f:8e:9e:85:
                    83:d6:48:0a:2f:b8:20:94:0c:26:44:a5:5e:46:39:
                    d7:c5:51:bb:68:72:aa:32:be:16:d6:55:7f:50:be:
                    37:11:e1:ed:08:32:af:fd:c0:65:ed:40:8f:d7:93:
                    11:14:2f:01:06:7e:85:f7:31:2a:e9:8f:27:81:49:
                    b8:1e:14:11:b3:03:ef:c1:e2:01:9a:11:b6:25:8a:
                    2c:5f:b8:34:eb:5f:78:26:16:0b:e8:28:ea:0d:f2:
                    e7:af:99:68:6c:9d:ff:87:69:d1:77:e5:bf:19:91:
                    4b:39:bc:e5:4c:98:31:02:72:46:73:3b:57:32:90:
                    ae:96:42:50:50:b4:9a:86:5a:5b:cc:31:45:7e:85:
                    d7:87:00:0e:09:fe:95:29:ef:d1:2e:11:50:f4:1b:
                    09:f7:0c:26:22:2a:bd:84:6f:9c:39:26:4c:37:87:
                    4f:2c:a1:46:0d:35:b3:e5:6c:41:b6:61:20:e6:e5:
                    5c:d3:07:0f:0b:98:e7:4f:03:46:4b:c9:54:1d:6f:
                    ea:b8:a3:fd:db:f8:24:d7:a8:1c:ec:46:59:bc:72:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:40:F6:D2:FD:64:2C:5C:FF:D6:28:8A:E9:8A:84:9F:60:8B:36:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63e5ea18-3e6d-38b5-85ad-d53892d54f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:0b:0a:c2:b1:73:b3:cf:e8:34:f1:b3:8f:26:48:cb:ed:8c:
         0c:7d:48:04:1b:9c:c0:14:83:56:08:cc:e1:cc:6c:51:73:f0:
         a9:38:09:99:54:42:34:4c:35:55:d1:6f:fb:bd:a7:ef:9a:3a:
         58:5b:0d:19:cb:31:00:9d:e4:6e:b5:10:d4:63:a4:5b:73:42:
         7a:3d:2c:0e:6a:f2:71:74:02:54:d6:a5:b9:15:1e:eb:35:35:
         4b:f2:0e:09:aa:24:b3:58:0e:61:4c:77:6a:3c:c0:82:b4:67:
         f5:00:dc:dc:33:cb:ce:eb:a2:b1:ca:ce:ab:ac:b9:8a:a5:40:
         a1:11:8b:a2:c4:35:77:d3:6e:ae:81:a3:bc:f9:20:ec:eb:d8:
         d4:24:00:18:79:d8:db:dd:4c:17:ac:38:0a:e0:25:e5:4c:a8:
         22:8a:2c:d7:05:c4:0c:7a:55:ed:72:ea:c9:d1:b4:8a:cf:f4:
         cb:83:e2:96:4f:72:24:49:4d:68:8a:60:08:9d:09:44:7d:92:
         49:25:5f:6a:01:cf:cd:9d:b5:8f:4b:10:0b:3e:5d:98:e4:f4:
         f3:fb:a5:37:70:61:77:df:05:1f:aa:01:22:17:40:04:8f:5a:
         75:85:f4:ca:21:8f:88:51:7d:6d:3b:fe:d4:40:95:91:35:c9:
         3b:0b:0f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:24:39 2025 by rpki-client