Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8f1f5c6-dec8-3abf-b66f-2847e56733d9.roa
File:                     c8f1f5c6-dec8-3abf-b66f-2847e56733d9.roa (raw, json)
Hash identifier:          gIN3j3WoF8lgVqNiHk5sfF52aPha/oJLPCeLrlRopT4=
Subject key identifier:   78:45:23:E4:F5:3B:46:BA:53:33:1D:50:5F:8E:E5:18:1F:AF:C9:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C08D58B5D5167BEFC870E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8f1f5c6-dec8-3abf-b66f-2847e56733d9.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     20172
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:8d:58:b5:d5:16:7b:ef:c8:70:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=759edbb5-9089-44b3-a564-28769d7fefad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:42:df:a4:bf:b1:1d:6e:7e:81:da:d2:55:52:
                    11:cb:e8:bd:ed:47:b7:da:15:d7:c9:20:0e:ed:3f:
                    57:b0:ee:6c:d5:17:8c:e9:5f:f5:99:80:c7:8d:19:
                    1d:69:f8:d3:f6:bb:72:f2:f5:7c:5d:c4:cf:82:ac:
                    67:82:94:59:a2:1a:86:90:b4:8e:42:6f:ec:96:d1:
                    b3:6e:51:ad:a4:84:35:e7:ec:fb:c4:2e:b0:1b:27:
                    69:02:65:f9:1c:37:dd:47:bd:83:68:4f:19:7a:8f:
                    56:5b:42:74:8d:52:4a:23:b4:08:26:f3:cd:e0:06:
                    3c:4d:79:81:19:de:8f:7e:39:0c:11:3a:33:02:f4:
                    02:2c:a8:de:2f:8f:e5:ce:f9:17:a1:e5:20:0f:39:
                    56:a7:39:af:16:e6:24:40:e3:ff:5e:10:74:05:91:
                    ca:d4:59:fa:87:9c:c4:96:85:9b:c5:d5:78:92:34:
                    91:f8:bd:40:64:9a:29:8a:ce:85:60:56:44:b9:4b:
                    80:18:a6:05:25:0d:bf:41:40:51:d6:94:88:ab:78:
                    5b:23:8a:f8:bc:db:fd:fb:36:1f:4e:fb:bc:14:ec:
                    b0:36:db:7b:9e:81:b7:e1:e3:92:0a:f1:7a:be:e8:
                    23:63:ad:e4:b1:6c:aa:c4:d7:2b:a3:cb:b7:87:50:
                    dc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:45:23:E4:F5:3B:46:BA:53:33:1D:50:5F:8E:E5:18:1F:AF:C9:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8f1f5c6-dec8-3abf-b66f-2847e56733d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e2:0e:b5:51:59:de:1b:a1:95:87:f2:49:9c:d9:f4:4b:60:
         44:61:ba:45:cf:1e:35:a5:f5:ff:8a:77:70:11:b9:26:60:da:
         2c:0f:70:8f:a4:ad:13:bd:f3:e4:33:ba:0c:41:81:a6:e5:92:
         11:2c:27:51:d5:01:cb:ef:e3:0e:a1:11:d3:eb:85:91:67:1b:
         a6:01:e7:eb:0d:b5:2b:e2:73:1f:9a:40:68:ff:e2:72:45:6f:
         97:2f:4c:92:8b:4a:73:92:f9:8c:e2:46:ad:58:b1:44:54:0b:
         20:09:ab:42:c4:0b:40:7f:b5:f4:d5:2d:3a:c0:64:d0:5b:89:
         25:b0:5c:99:f9:92:6a:e6:98:27:65:fb:17:cd:0a:ed:4b:c0:
         f3:aa:58:17:20:fe:c2:ed:92:7f:fa:a5:f6:1e:11:e7:6b:33:
         0d:81:f9:36:c6:c8:a5:6e:16:8e:bf:ce:b5:7a:16:94:35:98:
         1f:c4:d6:b1:e4:7a:5c:6a:24:e3:6b:a4:0b:28:79:ba:d3:42:
         d3:c0:3a:1a:71:d0:58:94:d4:c1:d2:f8:fe:73:52:05:a0:08:
         39:f7:b6:b9:fc:19:1c:d8:4e:7a:d7:8c:6f:5e:16:03:6f:71:
         74:6d:f0:fa:8c:bd:7f:ba:5f:f3:54:90:82:3d:0b:b5:0b:63:
         1d:60:5c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:11:54 2025 by rpki-client