Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e5f3a1a-7f89-330f-a59e-e33126790bb2.roa
File:                     6e5f3a1a-7f89-330f-a59e-e33126790bb2.roa (raw, json)
Hash identifier:          ktWj+26qs/jZ14GAqpSOW/F0e808xYRkDd9S9mBToK8=
Subject key identifier:   64:AC:92:B4:DD:B1:A9:2F:41:9C:86:C3:7D:96:A9:97:42:2E:BE:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C084DB774DE99F7A3E9F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e5f3a1a-7f89-330f-a59e-e33126790bb2.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396572
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:84:db:77:4d:e9:9f:7a:3e:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=90dd8183-3d2c-4ead-b8c7-e995d1fa0356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:df:c3:d2:1a:66:52:cc:6d:af:59:4c:ab:b1:
                    22:62:04:7f:de:ed:6d:d8:8c:5e:e3:a8:b5:48:ba:
                    1b:92:71:16:c5:41:84:3b:fa:4c:61:ce:50:66:78:
                    cb:ed:72:70:a3:e5:32:13:79:f6:9e:6f:00:a6:55:
                    1d:11:e2:1a:e5:fa:ce:98:0e:91:c6:ee:e9:8f:bf:
                    b7:90:88:38:40:a9:0f:00:53:d3:7a:56:a3:39:13:
                    f6:39:df:69:af:29:73:58:3e:92:3e:bf:5d:1e:2c:
                    42:78:ed:c1:d6:9c:83:2c:af:df:8e:c1:74:37:8c:
                    e6:a2:da:f3:b5:30:02:4f:d5:59:55:33:db:2e:d3:
                    86:d2:65:ea:31:1f:12:e3:97:1f:92:de:21:a9:89:
                    c7:6b:99:ea:8d:90:99:8c:81:7f:96:f4:9e:1a:36:
                    30:7f:d4:5b:83:a7:48:a5:48:a0:a5:44:10:d8:c5:
                    f2:ff:a4:e4:06:14:f3:07:a8:31:db:98:62:05:43:
                    de:7d:f7:f0:10:49:8a:4c:77:fa:4e:d6:c8:a6:49:
                    22:f0:b9:09:16:62:92:1e:de:53:1b:3c:f9:91:fa:
                    3d:fd:fb:e1:1e:77:01:91:8d:53:d4:98:87:9e:c6:
                    d2:8e:c4:04:81:0c:5a:be:2e:12:76:7b:6b:3f:84:
                    80:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AC:92:B4:DD:B1:A9:2F:41:9C:86:C3:7D:96:A9:97:42:2E:BE:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e5f3a1a-7f89-330f-a59e-e33126790bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:39:e4:b3:90:ce:0f:18:f9:68:37:17:36:ad:9c:99:39:8e:
         15:90:24:86:b7:9a:81:f0:f4:55:1b:cb:25:e1:05:78:eb:37:
         23:97:2d:f6:35:c2:48:7b:e4:2c:42:5d:66:aa:8d:15:2f:d3:
         d8:85:4a:47:05:33:ea:26:55:28:5e:5b:0e:d0:5b:06:d9:1e:
         85:36:40:39:6f:b4:1e:cd:47:16:3b:6f:9f:56:d7:bd:b0:82:
         6f:d6:c4:1d:81:5c:85:ee:57:58:52:ac:0c:1d:6b:32:f1:65:
         a6:73:5c:c7:39:9f:2c:6e:c0:33:a6:06:fe:f7:09:be:75:7a:
         e0:07:20:f2:ca:4b:55:95:f4:64:70:4c:ec:be:0c:89:7d:2d:
         4b:ed:1b:91:44:7e:20:ea:cd:9b:76:fe:74:65:fc:0e:ef:8b:
         97:d7:f8:92:b5:c9:10:c5:86:b7:ed:70:a2:09:0c:2a:8f:1a:
         00:50:8f:c6:8c:6a:9f:8f:30:fb:31:d4:00:49:59:47:15:b5:
         5d:a5:71:61:23:df:19:f2:50:74:94:10:73:4e:3d:4f:e9:ae:
         11:26:68:90:4e:88:74:ce:a1:75:50:de:79:5b:70:70:31:d8:
         6c:18:bd:fa:8c:48:f4:bd:97:18:3a:2d:45:6a:ac:03:d0:4c:
         13:44:2c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:18:41 2025 by rpki-client