Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d90d8459-f00a-3211-9475-3e24174c28fa.roa
File:                     d90d8459-f00a-3211-9475-3e24174c28fa.roa (raw, json)
Hash identifier:          QKK1oTjLJCxYZJS4DODcXupD7/7xru6CTAFODvqL9iY=
Subject key identifier:   24:AF:4B:60:90:0E:74:44:1B:9C:A6:75:F4:08:DC:51:A5:7F:A1:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C08B23DB3CEFA8573E1000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d90d8459-f00a-3211-9475-3e24174c28fa.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396565
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:8b:23:db:3c:ef:a8:57:3e:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=6d710bbb-47a4-4c0f-9800-8a34e38ebbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:89:de:c7:c2:54:7c:db:80:1e:98:d9:56:
                    b6:47:b2:35:b0:14:ef:5c:43:d9:7b:d6:8f:20:e4:
                    8d:35:0e:b2:26:5b:93:9c:bd:91:56:e7:f2:78:4a:
                    c0:04:e8:88:ab:ab:6a:b0:e7:28:18:c6:d0:1f:dc:
                    7c:dc:da:c5:df:2c:27:a0:d5:95:fe:6f:19:6f:41:
                    cc:ff:d6:58:a1:86:70:73:5f:dc:be:07:5f:db:cd:
                    b1:30:50:fa:a2:f6:55:82:55:cf:23:cd:a3:01:ed:
                    77:e7:b7:f3:79:7d:44:16:d9:30:05:13:62:ba:4a:
                    49:c6:97:d3:26:a5:55:0f:cc:f2:ab:8d:4b:1e:62:
                    ab:fc:91:6d:d5:46:8f:1f:ca:64:0d:7b:86:26:5d:
                    89:a3:a8:70:f1:d4:7e:cf:e0:a4:f7:cc:4c:75:c3:
                    a8:fe:6f:aa:d0:90:c9:ff:de:be:47:cf:9b:03:ca:
                    b8:5f:65:f4:f6:a5:e1:c2:34:e9:38:83:f8:25:67:
                    d8:32:9a:4a:47:2b:7d:54:c4:e2:c5:e3:54:8d:e4:
                    a6:1e:8b:17:66:6c:34:65:47:9d:48:db:82:80:c1:
                    74:ff:06:87:d4:fd:1f:9f:d1:77:35:43:9c:b0:39:
                    88:74:f4:82:91:4b:f7:d0:a5:34:bc:0d:5d:39:ba:
                    46:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AF:4B:60:90:0E:74:44:1B:9C:A6:75:F4:08:DC:51:A5:7F:A1:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d90d8459-f00a-3211-9475-3e24174c28fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:60:e5:70:a1:42:a7:7c:1b:a2:df:42:c8:74:9d:af:7f:ba:
         e6:36:9d:60:0d:61:bf:36:57:f1:44:c7:49:f3:06:d3:0b:0e:
         fa:8e:05:03:28:be:b3:57:da:40:54:6d:c9:f4:ec:e5:63:ac:
         47:52:16:fa:c1:ab:33:2d:b4:76:97:86:ba:53:5a:b9:b4:d1:
         33:fd:d7:a6:2d:10:40:69:cd:f6:5e:23:21:0c:52:06:33:ec:
         12:5a:2d:cf:f9:b6:9c:f5:68:eb:a2:e9:54:fd:5e:16:3d:bf:
         2f:56:0d:a7:e2:4e:ac:08:bd:36:cc:27:96:ae:30:3f:8f:bb:
         91:f1:04:1c:c7:2d:cf:27:36:bd:81:82:bc:4b:ab:34:30:cf:
         1e:c2:69:62:08:5a:93:12:8c:1c:fc:ac:f0:71:9f:57:ee:fb:
         dc:a4:6c:13:a0:59:b9:27:6f:31:62:da:9b:b7:18:f2:f7:35:
         f4:38:f9:ad:fd:d2:01:7d:97:78:f4:03:1b:35:a9:13:a2:c9:
         5f:29:e2:c8:c6:84:48:d8:f1:6b:bc:ca:f4:d8:07:27:0a:85:
         af:38:02:f8:c0:c5:56:e9:d9:c1:05:70:ec:4d:74:e2:fd:88:
         96:e2:0f:17:66:69:24:f0:70:85:d6:f4:93:99:43:e2:f3:5d:
         d1:18:1a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:22:28 2025 by rpki-client