Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/278fd58f-4831-3f7e-919d-314e16703a11.roa
File:                     278fd58f-4831-3f7e-919d-314e16703a11.roa (raw, json)
Hash identifier:          rHfsOOegf7Q7gfMFaOwG0NGPpwlmIn0kcV9cIcc5u6w=
Subject key identifier:   1A:13:D4:AD:A3:AB:18:A9:5B:A8:83:37:A9:EA:6D:3C:5E:09:64:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8D28C8BAF0581073D2A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/278fd58f-4831-3f7e-919d-314e16703a11.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396587
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8d:28:c8:ba:f0:58:10:73:d2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=0ff32f2d-9e4f-44ff-9c5d-bedcd76a7e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:63:c1:0a:3b:10:da:7f:1d:32:f3:63:33:
                    e3:46:35:19:aa:cd:ef:fc:a5:52:44:8c:93:c0:ab:
                    6e:a9:ac:77:95:e8:ea:b2:33:5c:92:ce:77:09:fe:
                    d9:ab:21:85:c2:68:cc:c4:d0:bd:af:51:0b:95:32:
                    49:96:ef:ef:03:0b:07:5f:a3:77:4a:f7:b7:09:ee:
                    a7:c8:7e:61:38:43:3e:7d:e1:76:36:bd:2c:57:ad:
                    2d:dd:a0:8a:49:ab:ca:e3:3e:72:8e:e0:45:bb:2d:
                    e1:41:d4:e6:3a:f5:55:f0:e3:74:9a:93:d3:88:bd:
                    01:34:f5:b2:fb:0a:8c:84:94:e8:70:b5:3f:dd:93:
                    be:85:4b:cd:40:26:f9:b7:7b:e7:74:c0:97:88:01:
                    93:0d:a3:00:69:ae:39:b7:39:81:91:78:87:c0:ac:
                    83:3d:c5:55:f2:09:d5:1e:a5:b9:4b:38:64:5a:c4:
                    79:d0:d8:b3:bf:2a:85:80:13:71:7f:3f:4e:d9:6b:
                    e3:20:4a:d9:ee:d9:22:dd:c6:7f:93:c9:cf:e4:b5:
                    2e:0a:a8:fb:d7:19:bc:72:ac:df:07:44:8d:a3:5a:
                    39:ee:36:3e:28:f9:da:c1:52:90:6c:10:4b:1f:88:
                    cb:4f:12:16:a8:f8:f5:06:d2:02:44:c3:f6:0d:69:
                    ba:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:13:D4:AD:A3:AB:18:A9:5B:A8:83:37:A9:EA:6D:3C:5E:09:64:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/278fd58f-4831-3f7e-919d-314e16703a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:77:83:49:4e:12:be:d9:49:c5:07:cb:9d:b8:f9:60:7c:19:
         64:0c:45:d4:97:90:65:d7:99:41:d4:e4:b7:fa:69:8c:67:5c:
         b8:e9:5f:66:46:49:da:07:9a:e8:e5:7f:8a:6a:35:d1:17:8d:
         b6:cf:aa:25:6d:03:58:d9:d7:5e:39:61:00:31:6f:3d:8f:c7:
         37:bf:50:c7:bf:9f:e7:d4:82:ca:fe:59:1f:cd:a4:26:e1:4e:
         59:9a:73:02:78:68:70:e0:24:38:7e:81:87:b4:a9:c5:a0:da:
         63:28:4e:cf:46:0d:45:38:3d:64:15:1e:d8:61:71:f6:f0:fc:
         ac:1a:5c:3a:79:3b:c2:9b:5b:ff:20:1f:b3:7a:ae:ee:d0:09:
         0f:3a:dc:70:74:5e:80:06:c1:82:15:80:b8:33:e2:b5:9d:b0:
         05:15:db:f6:f4:f2:82:50:4d:57:b6:d6:1b:ae:2a:ae:0c:ff:
         3d:23:e8:eb:83:84:c6:4f:4f:61:d9:89:82:8b:b5:86:ce:e4:
         97:c5:7e:8f:27:eb:62:b8:f9:35:ce:24:a2:48:a7:d1:d6:25:
         5c:f1:ad:2e:51:04:5a:6b:38:b9:d1:36:ed:66:90:10:27:91:
         35:ad:ae:72:a7:06:8f:57:5b:35:58:5b:29:0a:f2:7c:d4:b0:
         ef:2f:b6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:35 2025 by rpki-client