Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a90c49ed-f616-3e16-bce6-d9ba784f3bf9.roa
File:                     a90c49ed-f616-3e16-bce6-d9ba784f3bf9.roa (raw, json)
Hash identifier:          ZATtWLDd1Ai7aAYkCYLE80a46Ydx6C9ecASJzjRYY+Q=
Subject key identifier:   B3:E0:5D:1A:99:D2:CA:A6:66:07:A2:11:B9:85:BB:F7:35:8B:2E:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C08541E9C9FBA5859AA380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a90c49ed-f616-3e16-bce6-d9ba784f3bf9.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396580
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:85:41:e9:c9:fb:a5:85:9a:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=4292a8cd-b18e-4993-a97b-d03459c10f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1d:48:ac:38:60:67:e9:68:80:36:62:8b:39:
                    86:12:38:f1:c0:2f:33:d6:eb:e5:47:35:09:4f:7f:
                    2b:93:6c:94:fe:df:f0:b8:80:4d:e1:34:d9:5b:58:
                    8c:0e:c1:03:b1:01:43:f1:c9:8a:e5:05:df:39:71:
                    9b:da:1d:2f:2f:e0:94:36:c6:7e:4d:3b:1f:e2:22:
                    61:6e:a9:ac:08:ab:48:6b:4e:b8:41:2d:6f:88:dd:
                    f6:14:a3:31:b3:cd:03:31:a8:a1:b0:73:9b:16:67:
                    35:cc:10:15:9e:f5:42:4a:59:5e:78:54:64:ea:42:
                    1f:a7:23:86:cb:45:61:28:0d:b5:be:55:ed:3b:df:
                    24:31:65:ba:7a:03:72:db:db:fd:19:fd:f7:9c:cc:
                    05:d4:68:1f:29:b7:dc:57:23:24:75:49:9f:47:b0:
                    e2:27:66:2a:35:72:c3:24:a6:ff:18:34:30:a4:b2:
                    68:96:a1:b1:3a:fd:bc:8e:37:90:ed:e5:d1:70:20:
                    fc:5a:44:b3:11:3c:56:91:e7:d8:68:1e:ef:49:9e:
                    bf:e8:f9:44:1d:12:c3:34:31:33:5f:c9:d3:f7:e3:
                    9a:e9:db:ea:87:b8:e3:75:95:62:98:ef:9e:6e:8e:
                    c3:86:b4:5c:42:f1:5a:7f:9c:b5:4f:1f:fb:d5:bc:
                    90:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E0:5D:1A:99:D2:CA:A6:66:07:A2:11:B9:85:BB:F7:35:8B:2E:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a90c49ed-f616-3e16-bce6-d9ba784f3bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:82:17:76:d0:66:ed:02:bb:3f:f0:ca:b3:f8:8f:f5:93:e6:
         25:5e:45:92:39:92:c9:12:fc:88:3e:80:7b:ce:5b:92:4f:1d:
         1e:24:e8:f4:bb:74:70:36:e3:ea:72:61:ab:79:37:78:5e:32:
         68:95:9a:49:82:af:0f:57:3e:84:e4:a0:6d:2e:64:22:1e:a5:
         ba:d7:6f:c0:e9:15:a4:17:15:d4:bd:eb:c3:87:b4:7f:bd:b6:
         10:fb:71:55:d1:7a:0f:13:9d:b3:80:e8:d3:57:3f:79:3f:4b:
         88:4c:e0:33:89:06:03:64:e0:cf:3c:cb:06:c2:fa:d8:44:17:
         6f:3d:7b:ee:a9:6b:54:01:97:95:8c:38:79:d2:de:49:18:47:
         7c:0c:9a:c1:c5:6a:c0:e6:da:2a:73:42:5e:fb:9e:77:d2:f4:
         1d:b6:9a:e1:60:00:45:98:96:75:8f:6c:63:7a:6d:c6:02:79:
         ec:d4:c4:3e:96:59:e3:fb:cd:2a:b0:d9:d2:13:b9:4c:89:8f:
         de:8f:01:ca:c3:0d:58:d8:f8:88:c2:cd:7f:a5:69:fa:b0:7a:
         60:3a:d8:4f:9b:54:27:63:e8:fb:52:2e:c3:3a:ba:e3:ad:49:
         81:2e:70:b2:c3:d3:e8:6d:d7:27:dd:f6:95:bd:15:56:86:42:
         e4:74:8b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:12:24 2025 by rpki-client