Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3792c634-d972-3669-bbe5-664c40f50dcb.roa
File:                     3792c634-d972-3669-bbe5-664c40f50dcb.roa (raw, json)
Hash identifier:          PS+79/PPKQGJIduLE4eWdbbeYQ1gJuUN8zbTbSgyC8g=
Subject key identifier:   1A:05:7E:0A:EA:32:EF:AD:C0:FE:E6:6F:4B:9A:D0:A7:CC:F8:2A:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8D94AC549B138E860800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3792c634-d972-3669-bbe5-664c40f50dcb.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396610
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8d:94:ac:54:9b:13:8e:86:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=2953abc8-9894-4d07-a0ca-e2a5afe74e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b2:9c:fb:1e:df:5f:7e:89:aa:06:3c:57:8f:
                    59:b4:eb:1d:55:88:7b:9a:4f:23:ac:55:35:c2:1b:
                    ad:92:e8:2f:73:d9:f9:33:89:45:8c:ca:94:fa:ec:
                    42:c1:06:db:2e:bc:c1:5f:6f:69:70:7c:2c:58:14:
                    28:ba:4b:df:4e:be:1b:4f:cc:3e:54:2c:c0:3f:83:
                    6a:aa:ca:73:ba:31:28:e1:d8:ac:35:e5:1b:e4:ed:
                    16:10:ba:7c:8e:fe:2d:4f:c4:9a:b5:f7:6a:41:16:
                    88:a1:3d:00:01:ce:77:98:16:69:58:dd:38:68:3c:
                    c4:b1:b9:5b:5b:6a:e3:e3:86:a3:d3:09:42:df:35:
                    8b:79:c2:cf:1c:50:e5:c8:63:c3:56:a3:ef:3e:ea:
                    d0:7e:cd:50:75:2c:25:db:a1:53:de:1e:80:a0:81:
                    51:70:ab:cf:93:99:d7:6f:b0:71:32:8c:24:d6:60:
                    04:99:65:47:ce:89:87:78:b3:c4:cc:4f:20:83:4f:
                    70:ad:c9:1a:47:b2:0c:77:d7:df:cd:3c:a3:c5:48:
                    12:8b:15:61:cd:b9:f6:eb:f9:6f:e7:38:6f:c1:7b:
                    20:0d:e7:bc:6a:80:9a:c5:fe:70:c3:b7:46:01:19:
                    cf:49:03:b1:c8:8f:25:a9:49:ac:5a:34:ad:c6:08:
                    d6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:05:7E:0A:EA:32:EF:AD:C0:FE:E6:6F:4B:9A:D0:A7:CC:F8:2A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3792c634-d972-3669-bbe5-664c40f50dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:bc:d6:67:87:ea:be:1d:4c:bf:a9:f5:be:a9:da:b2:5c:7a:
         e3:d3:11:51:e9:83:c3:aa:c8:16:c2:be:aa:b5:7d:1e:33:e0:
         f5:c0:ce:1f:3c:99:86:35:26:8f:4d:94:66:c0:4e:05:79:53:
         ad:94:f7:c9:56:6c:37:7a:65:a6:3b:23:25:ec:8d:80:70:c8:
         db:d3:07:76:2f:8a:4a:5d:bb:4d:c0:6c:1e:fb:90:64:50:e5:
         16:8d:d7:03:2a:50:70:20:b3:41:08:01:8c:ed:b9:eb:ca:47:
         d6:83:fc:47:e5:15:10:dd:cd:6d:7e:e7:fe:e0:4b:05:62:e1:
         af:9f:71:d3:64:b6:1f:f0:39:fa:50:c3:78:0d:1c:b9:cb:72:
         8d:fc:89:25:27:53:58:2d:9a:6e:39:a7:69:c0:40:63:16:83:
         f4:10:e1:f1:84:3b:82:47:c8:9d:c9:84:b3:fa:35:74:21:8a:
         53:1c:cb:35:71:28:64:34:5b:16:f8:a1:bf:dc:e0:c7:4c:7b:
         2e:1e:a6:f3:0f:99:4c:96:6b:40:93:21:54:0e:2a:63:28:98:
         eb:3c:4d:26:6c:ae:30:08:f4:2c:7c:72:31:f9:4e:89:c4:3f:
         99:e9:98:b2:ab:93:80:40:7b:2b:07:49:91:93:1c:68:f9:b9:
         e2:73:97:99
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfI2UrFSbE46GCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
Mjk1M2FiYzgtOTg5NC00ZDA3LWEwY2EtZTJhNWFmZTc0ZTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbKc+x7fX36JqgY8V49ZtOsdVYh7mk8jrFU1
whutkugvc9n5M4lFjMqU+uxCwQbbLrzBX29pcHwsWBQoukvfTr4bT8w+VCzAP4Nq
qspzujEo4disNeUb5O0WELp8jv4tT8SatfdqQRaIoT0AAc53mBZpWN04aDzEsblb
W2rj44aj0wlC3zWLecLPHFDlyGPDVqPvPurQfs1QdSwl26FT3h6AoIFRcKvPk5nX
b7BxMowk1mAEmWVHzomHeLPEzE8gg09wrckaR7IMd9ffzTyjxUgSixVhzbn26/lv
5zhvwXsgDee8aoCaxf5ww7dGARnPSQOxyI8lqUmsWjStxgjWKQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBoFfgrqMu+twP7mb0ua0KfM+CpNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzc5MmM2MzQtZDk3Mi0z
NjY5LWJiZTUtNjY0YzQwZjUwZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQArvNZnh+q+HUy/qfW+qdqyXHrj0xFR6YPDqsgWwr6qtX0eM+D1wM4f
PJmGNSaPTZRmwE4FeVOtlPfJVmw3emWmOyMl7I2AcMjb0wd2L4pKXbtNwGwe+5Bk
UOUWjdcDKlBwILNBCAGM7bnrykfWg/xH5RUQ3c1tfuf+4EsFYuGvn3HTZLYf8Dn6
UMN4DRy5y3KN/IklJ1NYLZpuOadpwEBjFoP0EOHxhDuCR8idyYSz+jV0IYpTHMs1
cShkNFsW+KG/3ODHTHsuHqbzD5lMlmtAkyFUDipjKJjrPE0mbK4wCPQsfHIx+U6J
xD+Z6Ziyq5OAQHsrB0mRkxxo+bnic5eZ
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:16:31 2025 by rpki-client