Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57a51ee1-7469-3306-913c-6cb951e57e32.roa
File:                     57a51ee1-7469-3306-913c-6cb951e57e32.roa (raw, json)
Hash identifier:          3pQAKSDOPne9Y94hiA/gNRHwVox8UeSf8VWyxtZlmak=
Subject key identifier:   12:56:58:B2:76:0C:DB:F6:6F:79:FC:19:50:75:BD:C1:80:58:23:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C85AFB6B4C96D66011860
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57a51ee1-7469-3306-913c-6cb951e57e32.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     20172
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:85:af:b6:b4:c9:6d:66:01:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=9cf593c9-2a08-4a22-b916-0679b375cabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:37:14:65:9b:2b:a5:41:91:12:8b:34:cd:90:
                    36:53:06:93:6f:9f:68:29:73:28:76:b9:47:89:13:
                    0f:a1:2d:0a:83:27:84:56:28:a6:3a:35:b4:8f:ff:
                    27:67:86:5d:17:28:ed:2d:1d:c0:0e:d9:24:f6:85:
                    05:5d:c9:d6:23:ca:b5:e1:65:fa:49:71:71:15:e6:
                    2f:0d:ed:6f:13:80:fd:08:a1:57:40:4c:c5:87:2d:
                    aa:c0:9e:59:6b:3e:33:24:4f:26:79:41:ec:e9:e3:
                    47:bb:74:25:20:0d:77:63:e1:c4:de:3f:96:48:c2:
                    25:9f:bc:21:c5:46:37:b1:b9:14:8e:ba:5f:d3:63:
                    50:21:f5:a5:89:b7:5d:f1:36:f3:5f:cb:aa:e6:c9:
                    ea:b3:36:67:1b:22:3b:fd:4c:24:91:58:2d:25:a2:
                    4a:44:48:2c:73:d6:73:8e:01:8c:a1:91:fc:c8:74:
                    93:dc:87:d9:e9:ef:73:b9:0e:12:4f:4e:2d:af:3c:
                    57:0a:63:86:54:b0:5c:80:ad:15:1e:0d:ae:8f:10:
                    b6:9b:39:6e:29:fe:32:16:20:51:02:43:f4:d0:5f:
                    5a:48:b4:7d:31:fd:c5:96:4b:4a:2e:a0:e7:2e:af:
                    9a:3f:ea:5e:e2:e8:8d:5f:f1:12:3d:8c:42:8d:be:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:56:58:B2:76:0C:DB:F6:6F:79:FC:19:50:75:BD:C1:80:58:23:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57a51ee1-7469-3306-913c-6cb951e57e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:3e:a9:1c:47:04:15:8a:2a:ee:8d:66:82:3b:bd:28:67:7a:
         27:3d:9c:7b:ae:51:66:67:a7:96:5d:7d:ad:2c:f3:3b:55:75:
         58:0b:7a:aa:74:70:14:b6:28:a5:63:85:e2:e6:fd:03:36:13:
         59:b3:3f:71:f4:c1:c7:ad:1d:24:2d:bc:82:1f:65:18:58:b2:
         34:c6:f6:7f:bf:70:61:7d:bc:74:aa:03:38:94:24:67:46:16:
         16:c1:91:0c:88:f2:98:1b:6e:8b:36:ee:ba:87:70:34:a2:8f:
         80:3f:26:3e:26:59:e2:a8:34:fd:a0:4e:be:70:5a:35:8e:23:
         92:b9:f5:97:05:25:77:13:09:64:1e:02:70:c3:e7:51:8f:31:
         bd:2a:1b:1d:cd:a9:4a:2f:c4:8c:d1:54:a6:7a:ca:96:85:28:
         f6:f0:dc:a1:c2:44:5b:62:5b:27:d7:8d:a3:a4:a6:87:1e:86:
         b6:a1:cd:ec:25:bd:a9:2a:ab:85:3b:1e:e3:d9:30:df:2d:10:
         da:67:ea:00:22:81:bf:4c:c5:68:8b:40:d1:3e:4c:a4:78:ce:
         00:a6:96:fe:d5:7a:2c:ef:fb:ac:4e:95:09:44:8e:66:b6:56:
         4c:97:71:38:29:98:73:04:63:56:2b:3a:48:6c:f7:21:90:5f:
         ee:ed:cc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:01:35 2025 by rpki-client