Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c72c18fa-2d16-3b1b-9ca1-8811c411d150.roa
File:                     c72c18fa-2d16-3b1b-9ca1-8811c411d150.roa (raw, json)
Hash identifier:          dYDMUNzop84H1mlU9XZNe96+D5xXfOuGOHu4xh6RE2U=
Subject key identifier:   3B:E4:D2:ED:0A:0E:BA:40:E5:99:47:EB:93:8D:1D:A4:7B:EE:52:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C0812E5B62D0B73DFFA880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c72c18fa-2d16-3b1b-9ca1-8811c411d150.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     27544
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:81:2e:5b:62:d0:b7:3d:ff:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=465f15e2-ad4e-4412-bbfd-af43f322dd10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e4:48:26:8c:e0:1e:3d:03:e2:d4:a8:88:9d:
                    26:64:d6:fd:41:15:f9:2e:2d:21:82:cd:7e:e2:36:
                    70:2a:c1:c8:89:93:53:dc:a2:0b:b6:d1:27:c2:f1:
                    47:3d:6b:0f:6b:7c:c8:3a:d0:2c:74:2c:27:37:4a:
                    b4:82:25:ff:e7:ac:b9:da:82:b5:8f:d6:94:7a:c7:
                    4c:f0:ca:da:95:fc:77:56:a4:78:43:81:54:34:b5:
                    c4:85:17:42:e9:35:27:29:11:74:eb:27:57:77:15:
                    7d:63:4e:69:96:a8:ca:53:a5:f8:f6:a5:b5:1a:b1:
                    da:33:c4:1f:d2:01:4e:57:b8:75:c4:4d:49:1e:e6:
                    4b:2b:06:af:15:26:b1:55:a7:79:bb:12:a4:63:b3:
                    b1:69:10:cf:35:cc:d4:5d:1d:c4:34:7f:c4:a8:27:
                    f4:41:99:22:c7:7b:be:7d:93:41:a4:31:29:ba:0d:
                    68:8a:75:35:e9:c1:6a:47:6c:a6:31:db:4d:f4:4b:
                    e6:bd:81:a2:d9:24:c4:b8:a2:8a:15:1a:da:2c:7d:
                    9f:d1:a9:a3:c5:c4:63:5f:a3:d2:07:61:1f:65:b4:
                    c8:44:df:08:75:4f:f1:2c:dd:1b:9c:ce:25:15:0b:
                    02:83:71:13:e0:0d:be:32:9d:e4:b8:84:64:6e:fa:
                    e1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E4:D2:ED:0A:0E:BA:40:E5:99:47:EB:93:8D:1D:A4:7B:EE:52:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c72c18fa-2d16-3b1b-9ca1-8811c411d150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:89:57:46:f3:7b:bc:50:89:10:47:0b:4f:03:d7:96:8d:4e:
         48:c2:36:2d:26:fa:ee:72:a1:1e:95:ac:53:fd:6c:1e:45:cc:
         3b:16:82:d9:02:d9:e6:07:08:2a:b1:bc:91:61:e4:7c:d9:85:
         fd:c6:87:02:73:e5:45:9e:a2:46:23:01:79:01:32:89:70:9a:
         2a:91:1f:a0:7c:f4:84:7e:89:bd:da:f3:9c:49:f4:88:7a:a5:
         57:9d:02:f3:8b:60:62:a9:26:45:15:2b:80:e8:2d:78:6f:ad:
         c7:2f:5b:40:1c:33:0f:05:de:58:c3:7f:46:04:c3:6a:ac:27:
         cc:6b:42:eb:05:ce:d0:11:13:61:ee:de:19:dc:23:14:c1:f1:
         8b:77:d7:64:d2:2c:5e:a3:03:1f:7b:76:6f:73:41:2c:98:26:
         88:fb:d2:40:d4:70:36:29:97:95:04:2a:ad:ae:bf:f8:4f:73:
         96:9c:a2:50:44:b6:9d:12:88:b5:62:b1:bb:10:81:18:d3:9f:
         93:83:37:91:77:09:c8:88:ec:7d:43:66:6e:2b:b4:81:5c:63:
         36:3b:f2:00:8b:d3:02:a0:72:cb:74:66:ba:6c:67:36:a4:3a:
         40:3a:77:d5:a7:f1:ec:97:b8:32:ef:bc:43:74:20:72:c6:0e:
         e5:c6:55:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:14:05 2025 by rpki-client