Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/051f869c-fd00-3ea5-9919-bbeacd7e5f48.roa
File:                     051f869c-fd00-3ea5-9919-bbeacd7e5f48.roa (raw, json)
Hash identifier:          eznamru9OA8bCzeE5BQ2NHF10jcE8MiLBvIZyB0MEwE=
Subject key identifier:   4E:23:75:5E:DC:A3:35:A5:D7:EB:10:4C:C7:4C:C1:77:90:AE:63:56
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C92000C9C6C9255DFB280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/051f869c-fd00-3ea5-9919-bbeacd7e5f48.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     397212
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:92:00:0c:9c:6c:92:55:df:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=d8bba088-acd8-4140-9e83-5ce801f56ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:9d:6c:06:0d:75:21:c6:52:4d:a8:5a:c5:
                    99:2c:e5:d4:97:2d:05:7c:78:49:ef:39:08:9f:88:
                    26:bf:a0:1a:ea:3e:09:a4:50:41:87:98:f8:bd:83:
                    77:27:80:c0:60:b6:84:e2:63:3b:94:38:d2:f5:7e:
                    5b:eb:31:d1:8c:14:f6:6f:d5:4b:2c:18:10:03:7d:
                    35:75:b0:c2:b9:d8:4e:97:14:5b:e7:a5:40:ff:3b:
                    ea:2b:b5:9a:9c:49:0f:5c:45:c7:d8:82:af:98:2a:
                    d4:59:95:9e:b6:87:92:7b:86:bf:7b:1b:f0:9c:ea:
                    d0:47:1e:f3:d8:8c:02:fe:57:f8:e0:f3:be:6b:33:
                    3a:75:53:ff:57:5b:6b:d3:70:8b:5b:cb:68:e6:44:
                    47:64:e5:6c:2a:98:fd:6a:50:c1:41:2f:a9:c4:ac:
                    b7:47:f3:b5:aa:e0:bc:14:7a:a3:59:ba:1a:31:10:
                    5d:8c:1a:8a:37:e2:bc:d2:96:66:15:96:50:5a:86:
                    10:9d:33:a0:ed:59:ef:da:a1:25:17:65:a8:de:4e:
                    d9:50:4e:5d:a6:c7:a4:c5:57:dc:b0:89:d4:62:60:
                    e8:dd:1d:9f:a3:00:61:88:38:ad:b3:4b:f8:5b:40:
                    fc:06:9e:8e:b1:25:8f:40:a9:c2:8a:aa:da:38:2b:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:23:75:5E:DC:A3:35:A5:D7:EB:10:4C:C7:4C:C1:77:90:AE:63:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/051f869c-fd00-3ea5-9919-bbeacd7e5f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:16:d2:7a:25:15:e0:55:7f:9b:b3:e9:2e:00:68:0d:65:24:
         62:20:05:c9:32:08:58:b5:1a:af:7f:cc:f2:7a:32:b5:a7:15:
         cc:3c:9e:31:33:41:6f:8f:0b:4c:18:d0:24:70:0d:df:bb:66:
         3e:87:be:8b:d0:a3:2d:90:d9:73:63:fc:50:a6:55:29:fa:24:
         a0:8d:a0:37:82:77:f7:10:0a:39:eb:26:d4:44:d0:39:4d:1b:
         28:05:a1:24:0e:ea:22:96:05:91:55:2d:17:8c:cd:d6:9b:3a:
         bb:43:11:3a:d3:1e:8d:59:bd:57:bf:15:c2:9d:c1:5e:03:11:
         f2:a9:36:2e:ec:80:0c:ba:02:9c:c4:f0:75:07:3a:f9:d9:2d:
         29:be:6c:86:cf:7d:5b:bb:a7:e8:03:89:6d:35:d6:85:1b:d7:
         8f:bc:81:51:d5:f6:d8:5b:43:a8:3c:d2:ab:f7:93:94:31:8d:
         f5:4b:d1:34:95:62:da:2b:9c:3d:df:4d:ad:4f:d7:3f:8a:8f:
         20:0f:4a:9a:f5:71:57:22:76:fa:87:bf:a4:ce:08:33:20:86:
         2b:ba:34:21:d4:38:57:8a:1c:83:24:10:ed:d3:76:a3:a7:ae:
         ff:6d:01:b1:c7:e5:2c:b4:b0:16:55:c1:1e:a6:c8:ca:ed:93:
         c5:92:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:46:00 2025 by rpki-client