Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a19a2d5a-0914-3ffa-a654-3d003ece5327.roa
File:                     a19a2d5a-0914-3ffa-a654-3d003ece5327.roa (raw, json)
Hash identifier:          4QRCKDMjvUUaswAoyrVGJ5oCBYoeDzhs7dQJUkzKJLk=
Subject key identifier:   A5:60:55:E9:EA:50:1D:34:27:A6:2D:6A:44:52:CA:B4:5F:7B:FC:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C0836796EF3C69B9AB1D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a19a2d5a-0914-3ffa-a654-3d003ece5327.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396570
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:83:67:96:ef:3c:69:b9:ab:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=2c66057c-16a7-4034-8fdb-8d8e084734d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:74:20:b4:87:a9:1e:00:81:4f:e7:69:78:fa:
                    27:a5:bf:65:7a:c8:85:45:59:bd:a9:3a:b7:44:63:
                    db:1a:f0:bd:d4:24:9a:13:44:d3:64:46:a6:0f:b8:
                    ce:1e:10:4b:5e:26:2c:ba:dd:c4:e0:f5:9d:53:2b:
                    72:c1:54:41:41:87:21:2e:a2:7e:41:7e:82:2d:cf:
                    62:31:78:41:fe:34:6e:8e:d1:e8:4c:6d:6e:2c:b4:
                    ec:78:57:22:d1:ae:fb:fe:cb:e1:37:a6:e3:8c:32:
                    9a:7d:e8:af:f4:ac:1f:6c:b7:d1:47:d4:05:9d:2c:
                    e2:66:97:70:d1:19:97:ac:ef:cc:18:da:a5:32:3b:
                    b1:b6:da:b1:67:0c:a2:28:a0:4e:ae:be:75:68:44:
                    1d:3f:fd:db:d1:ed:b4:70:4e:b9:0d:51:a3:e6:ad:
                    ec:cb:ea:fc:53:1f:b2:7d:de:e2:a7:ec:ab:47:5c:
                    b0:7a:66:55:7d:0b:b1:e7:78:ac:79:a1:21:95:cf:
                    aa:46:92:66:ea:ff:31:8a:50:fa:df:69:59:4b:31:
                    59:a4:c2:ef:f0:a2:da:e5:8e:e3:30:f2:26:60:2d:
                    23:47:26:9b:30:41:8f:e3:e9:dd:e9:b3:3a:ab:7e:
                    66:23:82:f8:0a:37:e9:d0:94:85:29:b1:f0:0d:0c:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:60:55:E9:EA:50:1D:34:27:A6:2D:6A:44:52:CA:B4:5F:7B:FC:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a19a2d5a-0914-3ffa-a654-3d003ece5327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ca:df:4e:af:d2:1b:8e:f9:e9:2a:d6:d3:9f:87:61:50:0f:
         be:db:e8:31:60:3a:23:19:74:8d:97:4a:36:d4:66:90:75:92:
         80:90:cb:21:e5:0d:17:5f:85:ac:d8:ef:03:58:8e:bf:a7:f2:
         84:23:75:cb:e1:4b:af:fd:7b:61:e5:6b:9d:e5:69:98:5d:c9:
         27:d5:e7:e4:c6:24:03:50:8b:60:3b:89:21:2a:c4:30:0b:ac:
         a4:b6:46:33:4c:1b:8a:cd:b2:e6:be:fd:b5:87:8d:d1:d9:c2:
         b0:ca:52:1f:bd:8b:78:5a:3b:0b:93:38:82:85:a1:93:67:8f:
         fa:a3:bf:0c:19:88:47:4c:d9:d1:14:9d:8b:22:6f:56:c1:58:
         13:6d:0d:06:cd:9a:20:1f:31:10:ce:b5:21:a9:7a:c4:e9:eb:
         3c:28:4f:2c:2b:3d:02:f2:c9:d6:51:3b:42:c4:0b:87:4f:ea:
         b6:d0:4f:62:75:ee:85:22:cb:90:57:35:ab:1a:67:fa:64:03:
         1d:d7:b4:60:7a:0d:fb:e9:a6:69:e4:7c:cd:82:dd:7f:6f:5c:
         8e:3d:28:df:ed:fe:db:15:f7:97:4a:b1:b0:9a:b1:01:1e:f4:
         0f:bc:c7:d2:9e:15:49:32:e4:d0:ec:40:63:24:ab:91:57:77:
         f8:89:9c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:08 2025 by rpki-client