Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d428083-837e-3b7a-b490-7b10864d80ef.roa
File:                     3d428083-837e-3b7a-b490-7b10864d80ef.roa (raw, json)
Hash identifier:          kQdJcJXBtj9ntdt8LSxMfAqsh62DpH0hHFd5oV1hugs=
Subject key identifier:   A2:49:3C:A9:94:11:D6:FA:26:CA:3B:1B:F4:BA:5F:30:D7:F4:AE:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6FF74465BD54DAA455485B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d428083-837e-3b7a-b490-7b10864d80ef.roa
Signing time:             Tue 07 Oct 2025 01:00:29 +0000
ROA not before:           Tue 07 Oct 2025 01:00:29 +0000
ROA not after:            Mon 05 Jan 2026 02:00:29 +0000
asID:                     25485
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:f7:44:65:bd:54:da:a4:55:48:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  7 01:00:29 2025 GMT
            Not After : Jan  5 02:00:29 2026 GMT
        Subject: CN=3d752ab0-7381-4c73-a511-05c8592caf75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:10:2e:92:c1:2b:b9:69:3d:9c:dc:4e:59:
                    5d:da:d2:b2:12:9b:f3:df:d3:1e:27:aa:2e:cc:b3:
                    58:39:4a:88:23:43:ea:6f:1f:3d:a6:96:97:0f:49:
                    55:61:a5:be:51:f4:47:f6:f1:ed:de:ce:4b:60:34:
                    c6:bf:dc:0a:d9:9f:f8:bd:0f:99:36:29:20:de:90:
                    e2:42:8a:6f:87:6c:57:9a:fb:76:85:38:cb:6e:02:
                    b4:e7:47:38:44:73:67:68:ce:18:f5:8f:4d:eb:55:
                    22:fb:e7:7d:1c:0e:b5:d7:82:cf:8f:20:1c:4d:7a:
                    49:c2:7d:a5:17:54:f2:a1:83:30:62:88:da:3c:04:
                    60:cb:fc:75:e2:e6:e7:cf:d7:13:ef:22:b9:18:e4:
                    b5:71:99:7c:40:c5:b8:75:e0:a0:a9:12:bd:24:67:
                    62:36:35:87:dc:95:7a:a8:62:5c:80:bc:68:c1:2e:
                    88:03:6e:f6:a2:d1:49:06:9f:78:4b:36:d9:6c:de:
                    5e:0c:f5:0f:49:80:a3:5a:b2:c3:66:cf:0e:5f:25:
                    a2:54:4d:95:45:63:00:0e:60:e8:af:31:93:15:df:
                    d3:d5:4a:d0:a4:6a:d1:b0:7c:ff:ba:a7:8d:99:4c:
                    1b:31:fb:5f:f8:f7:c9:66:f8:32:9c:c8:f0:9f:a3:
                    bf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:49:3C:A9:94:11:D6:FA:26:CA:3B:1B:F4:BA:5F:30:D7:F4:AE:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d428083-837e-3b7a-b490-7b10864d80ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:4c:e1:aa:c1:08:a8:58:20:af:2a:83:97:9d:97:c2:b1:82:
         c7:06:d3:b1:f7:29:ff:cd:b0:68:4d:48:98:fb:5d:c4:61:51:
         60:7a:fd:55:02:ba:7d:9c:ea:d1:c3:41:aa:4f:22:69:97:58:
         4e:a4:15:51:46:b7:f3:44:6b:3f:44:bb:dd:07:d7:1b:a9:b0:
         86:51:e3:fa:f9:b0:62:74:7f:32:91:38:d3:f6:10:a8:30:bf:
         0b:86:11:98:1e:af:70:09:ca:60:83:82:71:4e:70:a2:f1:f0:
         1b:c5:32:db:d8:51:c2:bc:ae:11:95:d3:a5:ae:06:fe:07:c8:
         c0:2d:3b:fa:ee:0d:5a:2d:c1:75:6f:5f:8c:df:64:9d:63:78:
         e6:b8:42:15:d5:18:32:0d:31:b8:6e:4d:3f:30:92:cd:97:1f:
         34:59:24:22:40:da:bf:b2:fc:d2:17:77:45:f4:5a:27:df:aa:
         9b:c5:a9:51:9c:b5:c2:3d:bd:01:d6:5b:8e:31:11:e7:24:20:
         ef:04:24:a1:40:2b:9b:a4:9a:20:25:db:7b:08:b5:e2:b0:5a:
         5d:66:f9:55:16:28:e5:10:8d:fc:fe:45:00:8f:02:e9:33:42:
         d8:7d:0e:4b:2b:82:0c:2f:c1:df:3b:8f:a1:6f:f1:01:b3:e8:
         31:b2:36:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:21:38 2025 by rpki-client