Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf012d4-7697-30ff-8006-4fd63859eee3.roa
File:                     1cf012d4-7697-30ff-8006-4fd63859eee3.roa (raw, json)
Hash identifier:          CEBQ/q8ZhEA18n0Ti3RhMBN87MkAfbm1f0BRUc0n9U8=
Subject key identifier:   A8:A7:B9:42:B3:1A:10:D4:9E:2F:95:A3:53:73:14:0B:B6:2F:FE:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C86FD1C6C67EC03772CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf012d4-7697-30ff-8006-4fd63859eee3.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     397200
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:86:fd:1c:6c:67:ec:03:77:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=79bba3d5-42ba-4b6c-a930-6dd36c009807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:97:c9:98:db:e1:9b:17:b0:e0:1e:5c:2e:
                    25:e4:82:01:67:91:27:c1:fc:56:be:f8:85:75:2d:
                    bb:cd:9e:66:1d:f8:5b:cb:bc:6d:6a:a2:ac:d2:93:
                    d8:e3:1f:61:79:0b:61:a8:96:77:97:32:a3:c0:16:
                    28:10:bf:c7:65:be:19:c8:b4:8a:f6:5e:99:d9:27:
                    3d:02:cd:d2:fe:8e:54:3d:16:c5:2e:0a:52:1c:9a:
                    59:95:22:54:2e:91:6c:6e:91:19:7c:92:b2:d0:59:
                    53:d9:df:26:db:a7:a8:06:04:ea:d4:a8:a8:6e:9d:
                    15:04:2e:3e:df:06:e2:b5:91:e9:24:b7:db:fb:45:
                    4c:bf:cf:c1:b2:70:3d:a4:21:54:e7:33:dc:15:fd:
                    8b:23:42:ff:23:6c:a7:4c:04:1c:90:4d:12:86:aa:
                    99:71:4a:d8:32:22:c5:63:9e:8e:4b:22:57:ec:89:
                    48:9c:23:4d:86:0d:a6:6f:04:75:4f:e2:d4:a2:39:
                    99:67:9e:28:e5:38:8e:b1:bf:ed:a2:44:a9:bf:98:
                    db:59:cb:90:c9:d1:00:f4:67:3f:81:a4:53:ee:58:
                    b4:84:ea:56:48:96:e7:30:78:2a:69:09:9d:af:0a:
                    cc:9f:7e:b3:30:ef:d2:03:b5:3c:72:1c:93:90:b3:
                    1b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A7:B9:42:B3:1A:10:D4:9E:2F:95:A3:53:73:14:0B:B6:2F:FE:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf012d4-7697-30ff-8006-4fd63859eee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:17:27:98:03:6d:e6:d4:95:75:66:a5:b1:56:30:85:8f:aa:
         59:97:2e:3d:92:f5:c8:5b:f7:31:70:d7:d0:9f:77:73:fe:bd:
         68:65:5c:df:30:14:a6:3e:69:fd:88:38:21:ad:2c:6f:13:ae:
         b8:ec:f9:cc:4e:a1:9b:e9:a8:03:24:8e:85:c6:64:e3:d3:c7:
         c8:66:93:4a:9c:c2:cd:bf:a7:14:2c:98:d9:c4:79:a5:fd:66:
         3b:08:0c:11:54:56:71:6e:48:75:8b:1b:83:83:cc:b9:39:c3:
         cb:3d:dd:72:8b:1d:2a:79:3d:4b:b6:4c:54:4a:2f:76:02:67:
         6a:5e:e0:58:f1:2d:85:0b:41:d7:23:5c:aa:2f:5d:6e:12:d3:
         02:b1:3c:ff:b3:47:3d:5f:d2:ef:4c:ec:b1:b5:30:9e:46:0d:
         c5:a3:c9:76:bd:a1:c5:4f:61:c5:98:8c:fd:15:92:74:bc:43:
         4d:8c:97:34:0d:7b:5a:89:17:6e:dc:9b:97:cf:6c:51:1e:40:
         f7:ec:41:36:c9:0c:30:8f:79:af:97:38:20:4c:79:9a:b4:d9:
         5d:4d:c8:e8:2d:01:8b:f2:88:48:d0:17:74:27:5e:d1:18:3e:
         ac:62:4f:92:2e:93:ba:cf:10:1a:b5:67:f4:f4:38:25:a2:58:
         7b:9e:38:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:51:47 2025 by rpki-client