Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2552ecef-6986-38c2-a293-2d60cf5b3fd7.roa
File:                     2552ecef-6986-38c2-a293-2d60cf5b3fd7.roa (raw, json)
Hash identifier:          Pp/NkjyFiOTQQBYVqLGKvNDDvRfevDdjAy3DEInSeOY=
Subject key identifier:   79:D2:AA:6E:02:6F:6D:24:09:C2:39:AE:CD:96:FD:89:5B:3C:49:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8DD4169449615FDB95E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2552ecef-6986-38c2-a293-2d60cf5b3fd7.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396613
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8d:d4:16:94:49:61:5f:db:95:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=120e4361-e0f7-4873-8067-f69b1e68f2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0a:1b:7e:74:52:4c:99:6a:a2:1e:51:dd:f9:
                    1d:f2:5e:03:ad:f3:a5:1e:35:b0:74:85:e7:c3:1e:
                    0f:1e:fa:89:0a:5f:7f:ea:5b:ad:07:1a:d8:9b:4e:
                    f7:17:52:8c:3b:8e:be:86:3c:e1:47:2f:aa:95:01:
                    ab:d6:6d:0f:68:e8:54:38:b0:7a:dc:60:24:92:b0:
                    0c:0c:cb:54:eb:00:16:8b:e4:35:6c:f6:b1:b2:2c:
                    c7:6f:89:b6:91:e6:0f:71:82:37:fc:42:25:0e:71:
                    89:f5:4b:d5:68:1d:8f:a6:e3:9f:90:0d:a3:0b:f8:
                    c5:12:31:d1:8e:0b:82:df:41:48:b9:94:f8:8b:3b:
                    14:c7:f6:2f:b9:2e:4c:f1:3d:8a:58:5d:1a:12:af:
                    ab:07:87:73:55:df:61:f1:92:1f:72:fa:75:6a:4e:
                    10:15:e2:b8:b3:47:b4:e1:9c:bc:67:b4:5b:e9:36:
                    30:20:1e:10:48:9c:e8:3b:7e:97:70:be:f3:5e:45:
                    42:bd:dc:1e:13:26:a7:7e:73:10:b2:30:37:84:13:
                    aa:a9:15:ae:24:9d:e1:fe:b8:53:c4:b8:ce:ad:79:
                    ff:da:96:d9:d3:34:59:be:dc:41:83:e0:3b:e3:fb:
                    0d:c8:7d:f1:63:58:c3:2e:61:49:87:d8:8e:a7:60:
                    96:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D2:AA:6E:02:6F:6D:24:09:C2:39:AE:CD:96:FD:89:5B:3C:49:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2552ecef-6986-38c2-a293-2d60cf5b3fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:83:a1:0e:35:35:19:be:06:ad:24:54:54:f2:d9:8b:b8:07:
         34:d5:5d:36:b5:f6:84:d9:9e:53:97:32:67:3e:f9:9e:86:8c:
         47:3e:40:cb:b7:31:95:9c:19:6b:59:37:6f:c3:0b:54:fb:45:
         50:b3:8c:1f:34:1a:be:0e:68:34:16:7e:8f:10:0a:69:14:98:
         cc:88:ad:c3:9b:f3:fc:45:de:56:5c:d1:f6:35:16:e2:fa:3d:
         95:c9:9f:00:72:20:4c:90:fa:e2:55:ec:19:4c:c5:de:c2:56:
         06:f1:a7:b8:35:f6:72:1c:89:a5:55:a5:c2:46:ec:f2:3e:fd:
         a0:db:2c:ee:6c:49:f8:df:26:3b:88:3b:aa:0a:b5:62:29:3c:
         64:cb:ce:a1:54:44:3b:e6:a3:72:f5:b8:97:d7:70:d2:e3:8a:
         17:b1:bf:4f:9d:2c:14:30:84:b4:78:33:f8:12:76:a4:dd:58:
         47:65:21:7d:18:e6:25:f2:b9:23:70:ba:7c:6e:58:86:c3:6e:
         64:16:d0:de:ee:4a:65:72:03:00:c2:36:d1:0e:63:54:8f:b8:
         a6:4b:89:b9:5b:03:71:a2:dc:23:77:c3:b8:94:6d:c7:f3:ad:
         96:a0:e4:01:91:47:2c:d4:d7:c8:46:9d:05:bb:7a:88:3f:11:
         56:3e:4c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:00:35 2025 by rpki-client