Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d81bf7c-bb89-36d2-9779-43e94b7a4c3f.roa
File:                     9d81bf7c-bb89-36d2-9779-43e94b7a4c3f.roa (raw, json)
Hash identifier:          rPPFWYdrBDEIGM0BanM86dekzl+IYT1Pqo1h7t3uyJo=
Subject key identifier:   9B:74:7F:57:7C:C0:5C:51:6E:8C:CE:59:24:CD:82:01:E5:F5:A9:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C084E7EBA123488C851A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d81bf7c-bb89-36d2-9779-43e94b7a4c3f.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396569
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:84:e7:eb:a1:23:48:8c:85:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=df0e27e5-07dd-452f-893e-ff0316b96fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:6e:09:e5:47:e8:2d:88:65:58:08:d5:e8:
                    bf:71:c0:c7:da:64:5c:e0:a1:13:56:71:3a:4d:ee:
                    d1:4b:92:8d:9e:43:a4:ea:3e:85:5a:14:31:b2:b5:
                    41:72:82:70:b3:46:2d:e0:74:9f:dd:66:a5:98:ab:
                    74:72:99:f3:10:01:68:bb:1f:5d:f5:94:f7:a5:05:
                    1a:9f:14:97:c4:2b:14:f5:06:01:eb:31:c8:fd:d5:
                    8b:91:71:39:1d:7a:9b:de:c4:2d:44:86:2f:00:fb:
                    12:3f:7c:a1:3d:50:da:86:8e:b8:8b:95:93:d9:23:
                    16:42:2e:0c:58:14:72:e6:31:f5:9f:96:1d:9c:d3:
                    ec:3c:40:a4:f5:fd:79:77:54:d8:96:c9:1b:2e:29:
                    ee:0c:68:6d:66:5c:03:b9:ed:3a:cb:63:a0:b5:b7:
                    9b:34:88:69:3f:8a:33:f7:21:b5:44:ab:58:3a:af:
                    77:a8:5e:da:58:b5:18:23:77:68:76:cf:cd:03:bf:
                    76:d7:88:e7:55:3e:e4:60:97:4b:e7:5c:6c:a5:4e:
                    7a:a9:ba:71:3b:d2:e6:ab:9b:1f:53:74:0d:69:99:
                    39:18:a0:d7:3c:b0:ee:84:ca:eb:0b:75:10:85:11:
                    52:67:33:14:47:f3:1c:36:f5:7f:75:9f:44:57:49:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:74:7F:57:7C:C0:5C:51:6E:8C:CE:59:24:CD:82:01:E5:F5:A9:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d81bf7c-bb89-36d2-9779-43e94b7a4c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1c:aa:bd:16:7e:43:bd:de:b7:74:e3:e2:8b:c0:96:fd:48:
         37:a4:41:94:14:41:28:4b:fc:d9:bf:4f:2d:5d:d8:e4:26:34:
         38:9b:15:e9:29:a4:d6:f0:91:fa:a5:76:83:22:09:41:a7:3d:
         23:79:1d:fe:5e:44:6e:5e:16:2f:3a:34:23:69:a2:e0:6e:75:
         14:03:d0:2a:00:ba:95:54:79:f0:5f:e5:c0:5d:f1:c0:9d:a9:
         de:04:68:7f:0e:e6:81:6e:f4:60:4f:c8:9a:7d:92:71:d2:e2:
         39:d3:c2:bd:13:70:2e:4c:59:aa:5e:bc:89:4a:0b:7c:f1:0f:
         17:2c:d3:58:dd:30:88:86:84:90:b2:fd:8f:42:d2:ad:2d:ed:
         a4:64:1b:a6:d7:8c:a5:28:37:52:1e:4a:28:e7:6e:c0:10:30:
         b4:ce:cf:45:28:30:42:8e:5b:cf:77:1a:21:9a:d8:0a:85:c0:
         a7:2b:38:65:6a:cf:0a:c5:6e:1b:6b:bb:6f:48:5d:34:14:b9:
         49:2c:43:8a:9b:66:8e:33:b8:86:6b:af:e6:39:a6:b4:e8:51:
         cb:5b:c3:0b:fc:25:59:25:37:31:9d:08:b9:2a:e0:fb:19:18:
         03:1a:ab:a8:06:2a:5f:78:c0:7d:99:a2:cb:e4:62:4e:14:ff:
         1b:e7:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:17:30 2025 by rpki-client