Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33df8205-50aa-3293-aa8a-912e6c6d115e.roa
File:                     33df8205-50aa-3293-aa8a-912e6c6d115e.roa (raw, json)
Hash identifier:          U0uymyHYYlV4lTzgHJIHMgzjg+Me0H5HHrZBrn5OZcQ=
Subject key identifier:   8F:82:3E:E4:9C:22:F6:F7:47:B1:0E:03:CD:41:3C:0C:34:72:9E:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6FF746CA4C0A4A015B6B33E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33df8205-50aa-3293-aa8a-912e6c6d115e.roa
Signing time:             Tue 07 Oct 2025 01:00:29 +0000
ROA not before:           Tue 07 Oct 2025 01:00:29 +0000
ROA not after:            Mon 05 Jan 2026 02:00:29 +0000
asID:                     396575
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:f7:46:ca:4c:0a:4a:01:5b:6b:33:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  7 01:00:29 2025 GMT
            Not After : Jan  5 02:00:29 2026 GMT
        Subject: CN=48ca7257-bee3-4b8a-8694-458852665807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:40:0d:60:90:c3:5e:36:59:be:49:f5:62:
                    45:21:e0:70:f3:4a:c2:44:a7:2f:9c:ed:c6:83:10:
                    be:20:5b:13:52:21:30:ab:13:27:f1:9c:20:8a:ed:
                    fb:62:78:c4:c9:f2:6b:74:44:13:a4:0c:1e:ef:94:
                    2b:b5:bd:65:7d:0e:27:d5:85:d9:2e:ce:4f:fa:c0:
                    29:b0:3b:19:3d:d0:80:05:21:27:ea:9c:34:63:ad:
                    b1:2e:fb:15:2d:1d:c1:59:dc:5b:c3:17:cd:41:a1:
                    9c:62:cb:8c:e7:19:6f:cc:08:21:34:68:1a:97:9c:
                    6f:bd:52:80:cd:09:dd:4f:f8:a1:98:c0:c5:d3:0b:
                    a5:ba:f0:45:02:24:1a:bc:8b:7f:e0:7b:46:4f:44:
                    3a:a4:f3:b2:90:4f:b3:82:49:a0:ec:76:d2:e8:07:
                    97:3d:56:6c:58:d9:f8:b5:37:47:fe:65:38:51:0b:
                    6a:17:9b:02:5f:70:5f:e3:b2:7e:74:0d:9d:cc:28:
                    67:40:82:03:96:e3:73:7a:2a:08:ca:a1:04:36:50:
                    6f:86:16:a7:b4:99:72:5a:47:5a:b9:cf:9b:1f:92:
                    b4:57:f4:d9:22:b8:d4:f6:13:73:57:e3:b9:92:07:
                    9e:f9:87:3a:45:5a:97:61:2f:21:23:79:6b:12:a3:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:82:3E:E4:9C:22:F6:F7:47:B1:0E:03:CD:41:3C:0C:34:72:9E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33df8205-50aa-3293-aa8a-912e6c6d115e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:0c:95:ed:61:4a:15:ac:f7:71:e5:0f:5f:ba:02:30:dc:b6:
         0e:5b:fc:91:c4:7e:0f:cc:17:ee:b9:7c:21:90:39:68:2f:3a:
         88:2d:dc:80:b1:28:ff:8b:7f:01:ec:02:dd:a1:15:14:c7:28:
         46:10:5e:7c:cc:c9:01:2c:81:c8:2f:4e:db:c6:96:e7:bf:c4:
         f0:f8:d6:81:35:05:63:f9:d6:5a:b0:df:92:f8:6c:e8:88:bb:
         42:72:28:c9:1d:b6:32:af:1d:f7:a8:e0:53:8d:30:1a:72:e9:
         f9:32:dd:e3:b8:42:06:9d:74:b0:28:68:c9:04:cf:87:16:5c:
         7f:a1:a2:52:b7:c4:63:be:5f:9a:71:98:39:66:f6:18:da:6a:
         44:2d:8a:42:e5:64:9c:f2:a4:40:c4:83:f7:2c:a6:13:4c:a4:
         ab:3e:f0:82:25:1a:57:84:82:11:1b:45:3f:da:29:cd:43:c2:
         ad:9f:f0:5d:18:fc:19:76:d8:53:ff:63:70:c4:f9:5f:01:46:
         21:b3:e4:14:9e:3e:98:cb:ef:b8:9e:9f:4d:b7:6d:20:83:8a:
         f9:cb:2a:cd:fd:89:14:15:39:75:f7:68:bf:a9:8c:90:80:29:
         64:78:89:db:31:9e:c4:e5:a8:2a:9f:2d:99:ff:7f:2d:fc:40:
         77:57:01:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:56:28 2025 by rpki-client