Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/079ee32d-ddc3-3713-9616-c25a3fa8b4e1.roa
File:                     079ee32d-ddc3-3713-9616-c25a3fa8b4e1.roa (raw, json)
Hash identifier:          PDGhzASi9uEZ0+Uu7kNl0H6/q4hQqpncOJAMGerBMuI=
Subject key identifier:   02:EE:F4:26:07:58:21:81:29:13:81:38:41:26:27:0C:02:5E:6E:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C90DC5FFDD5667C5A8A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/079ee32d-ddc3-3713-9616-c25a3fa8b4e1.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396613
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:90:dc:5f:fd:d5:66:7c:5a:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=86cb4cdd-23ad-4ff9-8ada-bb96ccbf46eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:69:02:ee:af:9b:57:3d:93:37:e4:d2:d8:d2:
                    af:44:e1:19:09:17:30:d2:9d:6d:4d:9d:44:42:67:
                    db:05:55:a6:98:6e:da:1f:81:14:75:32:a0:5e:1c:
                    48:6e:d6:23:77:c2:a2:38:13:4f:35:97:4d:05:8f:
                    f5:ea:56:cb:e0:4f:40:81:76:58:f5:f9:d7:29:7c:
                    e6:fb:7a:8f:08:d2:a3:b6:13:2a:3f:e1:b6:59:8b:
                    a7:4e:78:7e:01:52:85:29:dc:c2:a9:85:96:7d:c3:
                    68:47:dc:96:e6:3e:b2:66:7c:20:d0:af:ab:0d:13:
                    cd:9a:54:98:b8:a6:70:85:dc:50:6d:c1:a7:e6:2d:
                    08:69:fc:36:61:0b:ef:a1:b5:89:ce:76:51:1c:52:
                    d3:40:39:ba:95:f0:0c:2b:50:d0:13:bb:ab:4c:f0:
                    fa:9a:16:ba:aa:27:89:fc:b6:68:af:17:e2:9b:cb:
                    a9:82:4b:f9:c1:87:ca:4a:42:44:20:4e:c9:36:cf:
                    7d:f0:b1:73:e2:f0:87:9a:81:57:b7:3b:be:67:88:
                    c4:0a:11:73:51:33:3d:72:49:18:5e:47:fb:6e:7e:
                    5b:9a:e8:0a:0b:4c:1f:88:c8:05:36:ff:7d:45:d6:
                    99:94:e8:f1:1b:fe:58:23:bc:3c:a2:d8:5c:2f:9b:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EE:F4:26:07:58:21:81:29:13:81:38:41:26:27:0C:02:5E:6E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/079ee32d-ddc3-3713-9616-c25a3fa8b4e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d4:bc:de:43:e6:41:fd:0c:f3:76:49:e2:63:c8:46:54:33:
         a1:93:9a:6b:b9:39:0a:fa:45:c7:63:43:b6:d4:53:1c:12:36:
         6c:f8:f3:de:f0:f4:81:4e:71:ef:73:49:f0:4d:ba:f1:a5:77:
         2c:67:62:0e:be:9a:89:9d:c6:f0:cb:5b:39:d4:1b:c0:3c:f2:
         13:1a:fb:3f:25:75:e6:f0:8a:e5:87:bb:a5:44:23:0d:b8:4d:
         18:3d:f9:75:53:20:f7:61:e1:14:86:f0:1b:35:cd:d0:14:4a:
         f1:63:af:e7:4a:f0:07:92:ea:dc:bd:e8:89:97:67:88:cf:2a:
         31:d6:6a:89:88:16:6e:28:5c:bf:8e:c9:92:69:6c:30:ff:5d:
         16:ec:0a:d2:e4:e5:a2:2d:d2:5a:fe:59:dc:ca:3d:0b:03:13:
         05:ec:03:5e:3e:86:11:77:dc:d9:d1:8c:9c:42:7a:14:4c:1b:
         1d:38:8d:46:a7:d8:71:49:d7:b6:57:15:11:43:8c:64:29:18:
         c1:0a:68:7d:74:5f:de:04:92:00:c7:32:85:26:76:18:8f:81:
         75:be:be:27:53:16:a1:a0:9f:27:2b:5c:58:3c:73:89:5b:da:
         71:4c:7e:89:04:6c:48:1c:ba:aa:e5:da:8a:f0:55:1f:b3:26:
         34:a4:48:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:54:27 2025 by rpki-client