Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7d2d761-05fb-329c-b378-b3309098efba.roa
File:                     d7d2d761-05fb-329c-b378-b3309098efba.roa (raw, json)
Hash identifier:          +5hApRsGEm+M9zivl7d+YYzryMOSRE/IjP58WgLmc/I=
Subject key identifier:   85:51:DF:78:BC:F6:1D:6F:05:D0:0C:2F:73:BF:01:CC:33:DD:53:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C08430AC8C1740DE1DD840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7d2d761-05fb-329c-b378-b3309098efba.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     36626
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:84:30:ac:8c:17:40:de:1d:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=3aaec844-0c63-4c60-a188-b73136a43c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e9:24:90:28:60:f5:99:29:41:bc:51:fa:69:
                    1a:0c:53:b5:22:f8:89:5a:c6:43:ac:e4:26:be:d1:
                    a8:d7:46:f5:bc:55:1c:81:0e:9a:e1:4a:b2:ed:e4:
                    b9:a5:d7:35:eb:95:bc:8a:8a:25:59:e3:44:b2:24:
                    f2:ff:50:c1:2c:f2:2b:3b:b0:ca:27:9e:ab:68:3d:
                    c8:f0:d6:13:42:0f:2f:f9:98:1c:89:15:04:73:0b:
                    48:d4:fc:29:ad:18:d8:4d:10:9a:5e:4b:e6:9e:22:
                    fe:db:0d:d1:da:7f:0d:62:02:3a:17:85:3f:78:9b:
                    8e:b7:30:b2:5f:14:aa:d8:a2:e7:b8:e0:c9:64:5a:
                    14:49:06:02:7e:f4:03:e9:e1:8f:60:d2:75:81:47:
                    6a:90:84:a1:4b:ed:af:0c:6c:d5:0d:70:97:51:c1:
                    70:f6:f4:9a:ba:be:59:d5:bb:5e:5f:96:8a:41:6e:
                    fa:e5:e3:13:52:9c:f0:54:2a:61:7c:a0:cd:c9:fe:
                    b7:22:dc:f0:6d:8c:ce:3f:8c:f3:23:ac:41:be:e2:
                    d7:44:17:c0:a9:7a:5a:e4:b8:ad:12:a8:d3:5d:ab:
                    48:f8:61:db:11:ed:5e:b1:04:f3:c1:66:94:88:c2:
                    87:9e:ec:24:08:24:9d:90:f0:2a:19:08:56:83:b9:
                    70:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:51:DF:78:BC:F6:1D:6F:05:D0:0C:2F:73:BF:01:CC:33:DD:53:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7d2d761-05fb-329c-b378-b3309098efba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a0:c9:7a:47:c1:97:d3:7c:cf:fa:2b:f8:fc:d5:19:c5:e9:
         59:31:11:0b:83:51:e6:8b:f1:ed:78:fe:93:30:92:7b:59:47:
         92:d6:69:d3:ba:68:e6:9b:6c:99:7e:bf:e3:c3:8c:bd:20:e3:
         e6:e0:d6:78:47:ae:df:2e:3c:b2:31:e1:38:cd:da:66:75:ca:
         19:f8:97:96:bc:a5:a2:bc:e6:43:76:84:a8:a7:8f:22:73:93:
         42:9c:4d:bc:71:b3:7c:35:7b:29:20:c2:05:27:c2:21:41:f4:
         34:45:92:48:a2:ab:f3:1a:ce:96:46:5c:25:7c:83:73:e4:65:
         ae:bd:b5:be:00:08:5d:ce:22:c8:c7:28:5c:f1:22:7b:1c:b6:
         19:90:98:22:f3:9d:11:f0:e6:99:46:34:1e:ab:29:bb:86:a5:
         53:23:e9:dd:ad:04:09:98:6e:32:73:83:19:78:5c:3b:a6:5d:
         e5:26:66:25:8e:5f:ca:d7:87:75:c6:37:4c:2c:92:08:c0:40:
         a3:5b:ff:f4:16:28:82:ba:f2:bb:cf:f9:ea:af:d1:6e:d5:c3:
         a1:56:6b:7b:64:87:cf:8d:c5:0d:f5:b0:76:d2:6e:a3:38:6f:
         4b:d6:7c:3c:61:21:6a:8d:d8:44:0e:0e:90:c8:22:fb:e8:5e:
         50:ec:78:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 10:54:14 2025 by rpki-client