Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31b86d97-8dee-3fd4-8e67-5babf87f0018.roa
File:                     31b86d97-8dee-3fd4-8e67-5babf87f0018.roa (raw, json)
Hash identifier:          BQhZ8JOO6iCGpbTzN31K/mGFX0d2o7+had0NO8OUI1U=
Subject key identifier:   1E:8A:BB:60:8D:F3:10:2B:7F:42:6C:51:C0:4C:40:64:9B:79:54:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C875F43F25DDB7C949880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31b86d97-8dee-3fd4-8e67-5babf87f0018.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396826
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:87:5f:43:f2:5d:db:7c:94:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=31b39f16-a215-4ccc-8870-903ccbaa4754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8c:e3:57:87:d3:62:66:5a:81:f6:30:1b:87:
                    41:ac:43:d4:76:72:fd:8a:0f:d3:98:34:68:b4:5e:
                    74:10:7e:d6:20:fc:11:ae:e1:1c:3a:b0:f4:47:92:
                    e0:d1:c6:a3:cc:fd:07:73:35:90:ec:f1:78:71:88:
                    ec:7a:04:4f:89:99:b2:89:89:3c:f4:bf:3b:40:3c:
                    37:69:96:a1:25:f1:18:3e:d4:ff:98:00:42:9a:e5:
                    ec:12:d6:d3:a5:20:26:92:9d:19:ca:41:36:bf:4c:
                    d1:69:d4:a9:dd:37:13:1b:ab:3e:af:f8:9b:21:2d:
                    c5:13:5c:f2:27:35:70:5f:f4:b6:5b:12:eb:08:33:
                    d7:c1:05:ba:40:c7:dd:13:34:15:6a:2f:4d:93:87:
                    51:31:9c:c7:7f:8a:b1:a2:64:b4:ab:23:c3:bb:de:
                    5b:f3:2d:84:fe:68:1a:43:1f:32:b0:ff:47:52:f0:
                    65:78:27:46:bd:f9:88:7e:29:f9:1f:68:8d:38:f2:
                    a1:e0:45:17:85:04:8f:4a:46:d9:8d:82:1d:36:39:
                    9b:1f:3e:f7:ca:56:98:79:d2:81:f8:68:7c:07:31:
                    ba:f4:31:02:18:fd:38:a1:3c:32:8a:3f:9e:71:27:
                    6b:e5:b9:53:a5:a8:b7:f4:56:53:82:8d:11:b8:6b:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8A:BB:60:8D:F3:10:2B:7F:42:6C:51:C0:4C:40:64:9B:79:54:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31b86d97-8dee-3fd4-8e67-5babf87f0018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:91:c2:66:f3:32:72:8c:57:81:13:e9:5f:e2:27:1b:94:c3:
         e1:f4:e8:cf:ed:10:ab:d3:50:09:9b:c4:1f:f5:0c:16:76:a9:
         c2:8c:20:a3:ba:50:12:92:fa:b2:92:1b:37:96:64:0e:9d:52:
         f5:a9:7a:ea:86:de:36:86:b9:10:a7:a4:a6:12:9c:70:7e:29:
         e5:2c:78:fd:ae:80:36:48:34:ee:a0:2d:eb:74:91:19:17:4e:
         2d:d1:83:29:76:be:e1:fa:41:cb:85:d6:58:7f:77:c0:97:3e:
         49:89:c9:7a:aa:10:d1:de:de:fd:67:db:54:0f:cd:01:8b:58:
         0a:7e:8c:e0:41:97:2a:88:92:a0:67:38:d1:7d:b0:5f:70:b4:
         c2:f6:89:54:3f:38:4d:c7:8e:bf:1c:ba:77:c2:76:8f:86:be:
         40:20:b4:93:9e:dc:6b:e3:32:39:08:2c:7d:6c:6b:b5:c1:d0:
         e4:4c:9c:ce:d0:38:0f:db:64:37:a7:5e:3e:8d:a8:e0:1b:eb:
         05:22:a1:4b:63:f0:d7:f8:d2:ef:20:54:2b:cf:17:d5:44:49:
         64:f8:1f:9e:91:aa:4e:e0:7c:02:a8:db:18:21:9e:7c:45:bb:
         e8:c4:d7:1f:1d:dc:91:8e:13:80:08:79:a0:70:85:c2:9b:fe:
         00:52:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:45:21 2025 by rpki-client