Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cc3758-1111-31a1-b00c-39cfc72c1b3b.roa
File:                     59cc3758-1111-31a1-b00c-39cfc72c1b3b.roa (raw, json)
Hash identifier:          qQzPXqHBzW3YeuVPd2rUEuvL98vco+xAC1O51G0yvWA=
Subject key identifier:   AB:07:83:9E:7C:5E:B1:D1:8A:C2:44:88:77:94:E5:63:FC:45:66:3B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C84203829BBB094C75980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cc3758-1111-31a1-b00c-39cfc72c1b3b.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396596
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:84:20:38:29:bb:b0:94:c7:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=adae1bb4-09e1-46a2-8595-8d9b8af27f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:15:c0:b9:82:aa:9a:5f:9a:0f:fc:e4:2a:cb:
                    55:45:b8:df:f5:2a:58:20:8f:14:41:67:ef:49:ba:
                    76:d0:27:d1:4e:69:9c:e3:d2:2d:e8:d9:c1:84:cd:
                    79:21:4a:4a:b9:48:ac:96:f5:ad:a9:9e:4b:67:03:
                    e1:12:52:ff:7a:cf:35:a2:b6:03:d6:61:67:70:dd:
                    47:eb:7b:c5:ad:31:26:91:c7:bc:bf:fc:79:4d:b1:
                    29:bf:18:b5:b3:fa:0d:76:a7:35:31:34:1d:74:27:
                    ab:c9:95:ad:6e:dc:40:eb:2a:20:6e:64:29:b5:04:
                    68:c7:77:8e:63:78:a1:e4:7b:d4:fb:19:19:38:cb:
                    ff:03:77:f5:f7:c9:5c:a2:16:cd:be:89:0b:66:e2:
                    ee:d6:a7:f1:ef:c8:a9:a3:e4:c3:1d:d4:ac:28:e1:
                    91:aa:64:5a:6b:a0:63:55:f7:45:5d:5f:44:0f:a8:
                    b8:09:39:17:5b:54:51:dd:db:9e:d4:3d:38:23:46:
                    2a:aa:58:32:7d:7d:0e:b5:f8:da:b7:77:9e:52:53:
                    aa:b5:9a:26:ba:4b:20:02:3d:a3:69:d4:b4:68:e8:
                    9c:ed:bd:54:b8:07:34:9e:6b:21:20:eb:b8:35:40:
                    5e:a6:cb:9e:79:ea:6e:cd:31:05:70:97:bf:de:f3:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:07:83:9E:7C:5E:B1:D1:8A:C2:44:88:77:94:E5:63:FC:45:66:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cc3758-1111-31a1-b00c-39cfc72c1b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:5c:17:e2:11:c5:3b:e5:e1:ff:6e:78:63:83:30:1b:54:51:
         07:30:af:a5:40:76:05:ed:f3:8a:fa:c1:3a:94:49:7a:ce:06:
         fa:c1:24:c2:72:e1:07:aa:e2:0e:50:ba:02:ee:13:0f:7d:e6:
         64:fa:e1:1b:ac:da:84:ce:25:98:f0:1e:cb:ed:12:41:47:88:
         86:84:2b:8c:99:75:6c:79:1e:be:21:b3:c1:b4:21:c9:03:f9:
         f0:99:44:ac:34:b3:b7:2e:f5:47:fe:02:df:e4:b6:ff:82:ac:
         a1:e5:3a:f3:dd:f9:6f:cf:db:81:dc:ca:16:cf:91:85:61:c9:
         44:16:8b:6f:4a:0b:b7:05:63:24:11:72:df:2e:b5:01:3f:e6:
         df:8a:1e:55:e3:d4:e8:ac:ce:76:63:8e:19:99:6a:d8:05:55:
         69:92:91:33:04:d0:59:bb:88:f0:4a:23:c6:47:40:a2:be:81:
         04:45:84:17:fd:05:64:b9:93:d5:87:51:df:ac:ee:66:dd:10:
         b7:4a:d8:e5:5e:86:a3:0d:e3:3e:15:87:17:d7:3d:43:e4:02:
         14:17:34:09:06:81:41:bd:f0:31:e4:d2:24:c3:56:0b:d6:4e:
         f8:f8:94:b7:74:ca:d5:bb:d5:ee:56:76:c9:fc:96:04:0f:65:
         e1:80:22:44
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIQgOCm7sJTHWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
YWRhZTFiYjQtMDllMS00NmEyLTg1OTUtOGQ5YjhhZjI3Zjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hXAuYKqml+aD/zkKstVRbjf9SpYII8UQWfv
Sbp20CfRTmmc49It6NnBhM15IUpKuUislvWtqZ5LZwPhElL/es81orYD1mFncN1H
63vFrTEmkce8v/x5TbEpvxi1s/oNdqc1MTQddCeryZWtbtxA6yogbmQptQRox3eO
Y3ih5HvU+xkZOMv/A3f198lcohbNvokLZuLu1qfx78ipo+TDHdSsKOGRqmRaa6Bj
VfdFXV9ED6i4CTkXW1RR3due1D04I0YqqlgyfX0Otfjat3eeUlOqtZomuksgAj2j
adS0aOic7b1UuAc0nmshIOu4NUBepsueeepuzTEFcJe/3vPgRwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKsHg558XrHRisJEiHeU5WP8RWY7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTljYzM3NTgtMTExMS0z
MWExLWIwMGMtMzljZmM3MmMxYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBzXBfiEcU75eH/bnhjgzAbVFEHMK+lQHYF7fOK+sE6lEl6zgb6wSTC
cuEHquIOULoC7hMPfeZk+uEbrNqEziWY8B7L7RJBR4iGhCuMmXVseR6+IbPBtCHJ
A/nwmUSsNLO3LvVH/gLf5Lb/gqyh5Trz3flvz9uB3MoWz5GFYclEFotvSgu3BWMk
EXLfLrUBP+bfih5V49TorM52Y44ZmWrYBVVpkpEzBNBZu4jwSiPGR0CivoEERYQX
/QVkuZPVh1HfrO5m3RC3StjlXoajDeM+FYcX1z1D5AIUFzQJBoFBvfAx5NIkw1YL
1k74+JS3dMrVu9XuVnbJ/JYED2XhgCJE
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:58:16 2025 by rpki-client