Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3fdf93-1654-3dfd-8430-5af94202f4f5.roa
File:                     7f3fdf93-1654-3dfd-8430-5af94202f4f5.roa (raw, json)
Hash identifier:          0NVc1keWOAMrV/L0rByZqiuqDkO8hLMFaoKfVVl6w14=
Subject key identifier:   95:45:AA:2D:64:CF:E8:DA:E0:38:8E:A1:F6:A8:C9:D6:E7:8F:C8:34
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C08013F2B43244010A2500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3fdf93-1654-3dfd-8430-5af94202f4f5.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     397199
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:80:13:f2:b4:32:44:01:0a:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=11431036-4ae9-4420-b6ed-5a2986b42742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e7:a8:ef:41:dd:35:6d:4d:e3:d8:a5:2e:d9:
                    c1:4d:ab:72:93:b3:bc:47:d1:5f:58:ae:63:a3:97:
                    2b:54:70:cb:29:d4:a3:c6:ef:5b:03:9c:c8:97:78:
                    cc:5a:f1:13:78:07:58:c9:31:1c:f4:86:c3:2b:14:
                    df:33:a0:2f:ce:8b:0e:24:8a:81:d5:cc:9b:92:6f:
                    66:a6:50:78:6a:a5:e2:25:ed:95:c4:1c:a6:fd:6d:
                    0d:72:87:55:94:1b:9b:04:13:9d:4e:34:3d:26:29:
                    73:d8:be:4a:e0:db:16:ad:6e:05:f8:27:3f:65:2a:
                    69:32:fb:16:70:fe:35:f5:79:5a:5a:3b:f3:be:4e:
                    4d:43:a7:32:74:1c:66:a3:f0:78:19:12:c6:fd:1b:
                    c0:d5:d2:92:38:53:9a:9d:79:d6:ba:97:06:ae:12:
                    63:1f:45:56:94:70:b7:73:16:e0:6a:1b:02:b3:60:
                    a9:52:a8:fd:e4:3e:5c:8e:90:31:05:df:28:2f:83:
                    54:f4:c5:bd:67:41:00:6d:47:1b:26:3b:65:9b:81:
                    ca:cf:0d:9e:a6:0d:2e:da:a6:b8:d6:3b:87:e1:9d:
                    f5:bd:43:8a:7d:c7:a1:86:2a:2a:db:31:98:e1:a6:
                    2a:c7:0c:d0:af:63:14:92:8e:41:ea:5a:98:78:ea:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:45:AA:2D:64:CF:E8:DA:E0:38:8E:A1:F6:A8:C9:D6:E7:8F:C8:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3fdf93-1654-3dfd-8430-5af94202f4f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b9:cf:51:f5:37:73:6c:a6:44:4f:fb:b0:4b:e7:2d:1f:65:
         f3:42:36:44:e1:68:f3:b5:1c:a5:4b:59:f7:28:0f:fe:e9:d0:
         20:d6:47:b4:de:21:63:b6:4e:61:b4:47:34:cc:90:09:4f:da:
         86:fb:e4:8c:5e:01:00:a4:76:ea:b1:36:7a:4d:33:8d:ac:10:
         40:be:fa:f6:f6:a5:3f:af:f5:0f:38:77:93:ab:22:a1:5c:18:
         28:2d:e8:05:7f:51:78:10:44:1c:2f:42:73:be:95:ba:09:5e:
         95:7b:e6:82:e6:8e:89:07:7a:c6:ca:17:a1:c5:1f:1b:f8:d6:
         06:a9:2b:a9:42:51:d5:c9:fb:50:0e:c3:7a:ec:67:bc:87:b0:
         ac:2b:d9:65:0c:4d:67:8c:b8:44:de:eb:b3:5c:b3:f1:1b:3a:
         a1:f4:57:b4:84:e1:08:29:a5:53:f1:cc:aa:08:72:70:81:87:
         d1:d2:c1:03:02:85:32:4d:08:c4:fc:0e:80:b8:51:e2:b5:2f:
         cb:dd:52:0c:8a:74:78:9c:fe:34:d5:49:e0:53:ea:25:1b:8a:
         0e:a3:1d:be:cd:61:d9:35:8b:30:0e:2d:15:67:12:7f:65:6b:
         22:21:e5:30:09:e4:32:6b:c8:31:73:25:a5:d0:7e:cf:8d:7b:
         0c:29:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:21:36 2025 by rpki-client