Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/191c032f-8421-3aa0-8ceb-b112ce74c82e.roa
File:                     191c032f-8421-3aa0-8ceb-b112ce74c82e.roa (raw, json)
Hash identifier:          4ZVSMdcuxb2GHZPa1hyUvHChOj1W9wGzGleqIDiBTNc=
Subject key identifier:   02:E9:C8:5D:43:60:18:F6:5A:0C:95:8B:5E:71:4C:3B:4B:6A:D5:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8A35231B58FAA81DAF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/191c032f-8421-3aa0-8ceb-b112ce74c82e.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396827
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8a:35:23:1b:58:fa:a8:1d:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=82afe3b6-7143-44b2-b31a-34fec24cdc9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:e3:2f:7f:70:b6:bc:e5:20:36:a5:50:23:
                    92:2a:26:6c:3a:83:99:51:05:0a:a5:b8:ca:3b:eb:
                    0f:5e:dd:0f:aa:bf:b3:63:80:55:cd:66:c5:e4:9a:
                    2f:ca:fe:13:7f:db:82:aa:be:9b:bc:4d:58:f4:b1:
                    bb:e0:c4:f8:3d:d2:c2:56:a3:e3:c6:d8:ec:86:bf:
                    a8:f7:92:37:99:49:56:15:55:bd:cc:51:c0:e3:8d:
                    be:dc:56:81:b6:bb:56:0f:b7:04:b4:87:62:91:fa:
                    17:3e:76:ac:b8:71:73:80:9e:8a:cc:ef:b4:f8:d3:
                    9d:a8:3d:80:99:8f:9e:5f:9f:28:1d:58:ec:a2:6e:
                    28:e2:f1:cc:13:24:7f:b5:b9:9d:23:ca:56:c9:8c:
                    b3:30:2b:d9:99:39:8c:86:bb:c2:46:c8:18:1d:90:
                    10:6b:46:ce:e2:aa:4f:57:9f:64:ae:95:af:b7:8c:
                    c2:89:13:0a:4c:69:76:2d:9a:d5:ba:e9:71:48:de:
                    55:2e:51:6a:90:74:fc:f8:38:d7:13:88:30:6f:13:
                    67:03:40:02:94:b1:a8:e8:5e:2d:bb:ef:64:1d:0e:
                    98:b6:64:08:73:a7:f9:58:c6:31:55:c3:0b:c1:e6:
                    e8:1e:34:9f:6b:60:d9:4c:50:86:d4:7f:42:9c:be:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E9:C8:5D:43:60:18:F6:5A:0C:95:8B:5E:71:4C:3B:4B:6A:D5:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/191c032f-8421-3aa0-8ceb-b112ce74c82e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:1c:12:41:de:59:ee:43:c7:5c:a9:43:95:cb:89:16:34:93:
         d0:4f:f4:5d:e5:ca:bb:9a:fc:20:56:3f:80:78:66:6d:10:54:
         38:12:e5:4e:1f:54:76:85:46:18:87:5e:a8:67:fe:7f:cc:e2:
         8d:88:2b:84:c8:42:06:4c:7c:27:93:85:e1:8f:81:09:c6:27:
         59:9f:59:38:5e:f4:61:96:95:2c:98:51:4d:84:06:a5:bf:ee:
         02:96:65:fb:b5:2c:f1:2c:a5:5a:9a:ea:16:13:8d:df:04:40:
         c9:05:68:bd:f5:5e:8c:61:ab:79:7d:cb:9d:c2:2f:a6:73:14:
         cf:b4:9d:2c:ba:31:58:88:15:d9:ad:64:d0:0b:bd:a8:59:76:
         de:6b:cd:1a:1a:db:d0:53:57:ce:9d:ea:21:b1:26:ab:29:d9:
         28:d6:f2:95:9d:41:30:ef:16:23:f4:7c:2c:01:cc:fb:d1:7e:
         50:74:a9:20:f6:36:2b:4d:17:9c:89:f3:39:57:4f:75:cc:53:
         08:83:e5:3c:bb:d9:fa:b0:ff:80:73:b4:5a:60:ef:28:28:db:
         47:26:0d:a5:21:89:ba:f7:8a:ca:4c:80:42:bf:98:7e:04:98:
         5f:66:4a:02:b4:43:d9:c2:b7:73:b4:d5:31:a1:77:cb:4f:98:
         49:a7:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:27 2025 by rpki-client