Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06aa6bb5-623b-35b5-a73c-27b1793197c4.roa
File:                     06aa6bb5-623b-35b5-a73c-27b1793197c4.roa (raw, json)
Hash identifier:          GfDe6Qss6SIajKw95QifrVP2pBr8fDsLGw8hTxv8BKk=
Subject key identifier:   73:1C:8B:0F:69:CA:D8:D2:F4:41:86:D7:72:D1:D3:4E:A9:1E:4B:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C892B80DE63FE31025C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06aa6bb5-623b-35b5-a73c-27b1793197c4.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396585
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:89:2b:80:de:63:fe:31:02:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=fa49a192-a0b9-426a-af73-d0e203cae7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8f:68:bd:8c:ab:85:fa:c9:70:52:53:cc:4a:
                    77:15:11:8d:5c:93:60:fe:c4:7e:f1:f0:1e:c1:a8:
                    e9:d9:8b:4a:13:62:fd:05:69:f4:82:08:a0:d4:f6:
                    20:ac:4a:ea:68:f6:96:0f:2e:1f:64:dd:d3:8e:35:
                    70:b8:be:f3:54:7f:8e:53:a5:a1:1d:43:da:c4:59:
                    bb:a5:0a:8c:cf:8d:41:c3:1a:39:8b:45:0e:51:47:
                    f0:d0:68:f2:b7:a0:65:c0:a4:27:81:c8:0e:8c:d3:
                    fe:d5:53:f4:c4:bf:2a:04:e3:e9:f3:a5:55:72:73:
                    48:27:cd:4f:99:9a:bb:f3:2c:bc:dc:1d:5d:75:0e:
                    47:3f:cd:2c:b1:ee:4b:6f:88:63:8e:63:0a:a2:4a:
                    73:ce:ea:31:15:8e:46:12:6c:9b:dd:01:08:3a:d1:
                    cd:a7:8e:42:0a:e2:03:08:fb:46:69:35:4b:c0:2b:
                    67:03:05:10:8d:aa:b7:c7:f5:88:4f:37:fb:55:86:
                    a8:ed:18:8d:86:27:86:96:c4:e1:89:ba:22:d7:ce:
                    01:08:c8:14:ab:8d:20:0e:01:a3:38:9e:ea:a2:48:
                    5d:cc:f2:cd:7f:19:b1:dc:41:46:38:f7:7e:ae:37:
                    50:df:17:0e:2d:ea:99:f7:79:9f:e5:54:45:da:cf:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1C:8B:0F:69:CA:D8:D2:F4:41:86:D7:72:D1:D3:4E:A9:1E:4B:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06aa6bb5-623b-35b5-a73c-27b1793197c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ae:8d:9a:f8:48:cb:0c:b2:42:a3:f8:2e:f2:6a:16:51:64:
         b8:fd:44:27:c6:84:74:80:68:89:f7:15:3b:2c:f6:48:6f:b4:
         3f:c0:eb:12:70:42:9c:e2:a0:12:2c:be:77:cb:da:0b:a3:7a:
         dd:e0:ca:45:50:2c:8c:47:61:8a:67:a1:32:67:5a:42:a1:dc:
         8e:d8:e3:5c:7a:1d:92:a9:cc:94:a5:6c:f4:12:68:ef:91:b5:
         af:57:44:5c:57:de:25:3c:ea:45:f6:ae:5d:14:eb:45:9c:f3:
         f0:e0:ac:ac:30:29:ae:15:87:35:66:d9:e0:90:58:77:04:44:
         ae:a5:a2:86:6d:4a:79:3b:e4:c4:a0:c1:56:f6:38:32:58:27:
         3c:d5:a5:9d:3f:ae:72:46:0f:03:56:ea:bd:6e:db:b7:36:55:
         17:ce:ea:eb:ff:24:67:24:b6:48:fe:2c:b8:13:af:47:fa:8f:
         15:82:1d:40:7b:23:c2:3b:66:ab:b1:2e:e1:9a:e8:50:0a:42:
         37:8e:d4:47:03:fa:76:93:aa:67:a3:c6:e7:91:8a:95:1a:d0:
         a3:ae:43:f3:56:f3:9c:81:97:56:c6:54:cc:79:81:05:f9:69:
         76:20:f1:42:33:57:aa:b4:a5:3f:59:33:7d:70:75:cd:9c:cb:
         5d:1d:01:6a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIkrgN5j/jECXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZmE0OWExOTItYTBiOS00MjZhLWFmNzMtZDBlMjAzY2FlN2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI9ovYyrhfrJcFJTzEp3FRGNXJNg/sR+8fAe
wajp2YtKE2L9BWn0ggig1PYgrErqaPaWDy4fZN3TjjVwuL7zVH+OU6WhHUPaxFm7
pQqMz41Bwxo5i0UOUUfw0Gjyt6BlwKQngcgOjNP+1VP0xL8qBOPp86VVcnNIJ81P
mZq78yy83B1ddQ5HP80sse5Lb4hjjmMKokpzzuoxFY5GEmyb3QEIOtHNp45CCuID
CPtGaTVLwCtnAwUQjaq3x/WITzf7VYao7RiNhieGlsThiboi184BCMgUq40gDgGj
OJ7qokhdzPLNfxmx3EFGOPd+rjdQ3xcOLeqZ93mf5VRF2s+JNQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHMciw9pytjS9EGG13LR006pHkudMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDZhYTZiYjUtNjIzYi0z
NWI1LWE3M2MtMjdiMTc5MzE5N2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCFro2a+EjLDLJCo/gu8moWUWS4/UQnxoR0gGiJ9xU7LPZIb7Q/wOsS
cEKc4qASLL53y9oLo3rd4MpFUCyMR2GKZ6EyZ1pCodyO2ONceh2SqcyUpWz0Emjv
kbWvV0RcV94lPOpF9q5dFOtFnPPw4KysMCmuFYc1ZtngkFh3BESupaKGbUp5O+TE
oMFW9jgyWCc81aWdP65yRg8DVuq9btu3NlUXzurr/yRnJLZI/iy4E69H+o8Vgh1A
eyPCO2arsS7hmuhQCkI3jtRHA/p2k6pno8bnkYqVGtCjrkPzVvOcgZdWxlTMeYEF
+Wl2IPFCM1eqtKU/WTN9cHXNnMtdHQFq
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:44:30 2025 by rpki-client