Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57dc8f4e-f25a-3dfc-94ab-4cf8d18e4cb9.roa
File:                     57dc8f4e-f25a-3dfc-94ab-4cf8d18e4cb9.roa (raw, json)
Hash identifier:          cKcrTCRdiywBl8RiiD5dmN/14cC7Be3hPn8mlJfbT7g=
Subject key identifier:   8A:38:9C:44:53:1C:C2:0E:1F:16:6E:C8:E5:0C:81:EB:8A:F5:9F:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8ACBD7ECB2C5063BD600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57dc8f4e-f25a-3dfc-94ab-4cf8d18e4cb9.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396583
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8a:cb:d7:ec:b2:c5:06:3b:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=c0ddcc09-7ae4-4b93-98a9-c13a1f964964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:76:28:6f:d4:cd:f3:b5:45:20:7e:5b:d6:
                    56:6f:10:49:32:68:57:83:a1:4c:2a:dc:1e:db:6f:
                    a0:4f:ca:02:11:53:1e:95:9f:f6:29:3c:7f:dc:d7:
                    28:b1:1e:5b:d7:4c:38:3f:94:85:a1:f5:69:90:82:
                    0a:cb:bb:44:aa:4a:5f:6d:bc:7f:14:f0:4c:25:fe:
                    b6:11:2f:24:11:50:6f:7f:e0:b9:6a:0d:18:c8:f7:
                    dd:b4:55:2f:f3:21:fd:5c:d0:a0:64:0b:16:0d:83:
                    b9:cb:33:26:49:34:09:da:cb:28:15:df:25:7c:4e:
                    35:50:0a:d0:f1:88:85:0e:77:c4:b6:c2:d0:08:df:
                    d8:e8:db:56:85:01:bf:b1:d7:86:65:a1:14:52:a6:
                    13:9a:de:c8:dd:51:f7:bf:d4:ea:23:1f:9e:98:3b:
                    46:b6:c1:80:18:f7:50:a7:40:63:2f:53:9c:ca:7c:
                    d1:b8:d8:31:39:71:92:17:6e:a0:54:4f:4b:6e:4d:
                    3a:10:c0:10:f9:62:b8:98:39:18:b5:df:27:1e:ff:
                    f8:31:91:60:a1:9a:30:5f:56:50:c0:5e:ae:18:17:
                    29:64:5d:ab:b8:25:1a:9a:01:e7:da:20:d3:55:3b:
                    cf:bc:d3:0d:4c:c2:4b:3b:8e:12:ac:3f:18:50:78:
                    02:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:38:9C:44:53:1C:C2:0E:1F:16:6E:C8:E5:0C:81:EB:8A:F5:9F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57dc8f4e-f25a-3dfc-94ab-4cf8d18e4cb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:20:ef:d0:3f:f7:8c:af:c3:3f:d7:15:b7:36:14:d5:d2:d3:
         b4:74:a2:43:94:4f:46:6c:a8:db:fe:d4:4d:a5:b0:82:fc:0b:
         41:2c:78:d6:8b:fc:f7:33:b1:94:09:b2:92:74:cc:ff:28:b4:
         f4:61:27:5c:21:bf:5d:08:7f:b9:bd:44:cb:a9:87:50:45:02:
         0a:14:7c:00:1e:91:90:77:89:4b:f0:4e:3a:f2:88:8d:ba:ce:
         19:6e:01:0f:4e:d0:0d:8b:05:22:3c:58:0f:6c:1a:92:06:ce:
         c0:ba:77:3e:bf:c0:1f:65:cb:5b:5d:db:a4:ba:11:67:62:8d:
         e1:80:8a:75:d7:a3:bb:33:70:9a:dc:ac:68:c4:ad:34:68:0a:
         ba:32:bb:8d:09:c5:cd:56:ba:d3:b7:33:ca:67:ca:a6:48:86:
         8b:c2:5e:cd:fa:bc:23:2f:33:7e:df:34:22:ac:6d:77:00:50:
         71:a9:60:e3:41:85:c0:80:2d:50:8a:1d:a7:93:2a:df:2f:42:
         28:0a:52:66:12:c4:55:9c:92:f6:60:b8:9b:ee:2e:39:7b:2d:
         16:c3:af:87:30:0a:f0:0e:e7:ea:40:0b:45:ea:01:ea:13:5f:
         ff:00:aa:2a:86:3b:73:12:1e:79:17:32:a8:ea:4b:24:36:e5:
         16:35:ce:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:23:59 2025 by rpki-client