Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/675eea21-b05a-3e9c-a904-7e9552fe8ed0.roa
File:                     675eea21-b05a-3e9c-a904-7e9552fe8ed0.roa (raw, json)
Hash identifier:          UckuSi5+tp6PCuVQGi81lnlDkeiw+0ieNioCJX0fKRM=
Subject key identifier:   BC:09:58:D1:FB:91:81:55:39:55:5B:BF:CB:79:EE:84:8D:F4:6C:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C90EFEE88F8E15B115400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/675eea21-b05a-3e9c-a904-7e9552fe8ed0.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     36617
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:90:ef:ee:88:f8:e1:5b:11:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=ddca2cd1-4c5f-4b29-b40c-690c9a42382f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:91:ff:b7:a1:4a:58:fb:7a:d2:0b:01:63:eb:
                    07:02:68:77:f9:89:8c:86:e7:99:43:19:e4:7c:43:
                    f5:9a:a4:a9:dd:7d:f7:bd:b6:59:f8:80:bf:b2:db:
                    97:9b:f5:ff:b2:be:23:8b:b8:4e:14:68:8f:1d:e3:
                    53:e6:a3:2e:99:e5:f3:cc:90:4a:f7:35:3b:c4:ec:
                    8e:79:ca:9e:b9:62:f4:bf:6a:1b:06:35:80:f8:42:
                    f8:6e:9c:0e:55:7b:43:64:74:4b:70:8a:fa:e7:c3:
                    2f:d2:63:04:dd:47:66:9f:c1:4b:53:63:8e:65:52:
                    80:b6:83:be:45:16:5a:a5:53:63:15:88:c2:df:a3:
                    df:d8:82:c5:d4:f8:9a:76:00:e3:87:5c:74:8e:3f:
                    ad:4d:29:70:2a:8a:b0:86:4c:39:97:d1:5e:7a:2e:
                    65:1f:5d:f7:49:5a:98:8c:03:47:d6:1f:fc:e7:95:
                    92:d0:8f:fd:c7:2f:5e:40:e6:91:95:a0:f0:32:5e:
                    36:e2:a3:e7:97:7d:74:49:5f:60:67:ce:94:4c:fd:
                    dd:e2:af:8c:18:8e:73:53:c7:0c:c2:ad:20:cd:23:
                    49:63:7f:dc:b7:38:a9:12:97:97:d2:5f:16:11:27:
                    5c:43:e7:cd:25:ad:e6:50:07:d3:2a:5b:1c:5e:88:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:09:58:D1:FB:91:81:55:39:55:5B:BF:CB:79:EE:84:8D:F4:6C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/675eea21-b05a-3e9c-a904-7e9552fe8ed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:36:c4:5f:3f:2b:00:c8:94:c1:aa:e0:2e:cb:c0:f1:af:6f:
         17:90:cb:77:08:96:37:ec:23:cc:cc:7b:0b:dd:4d:30:35:dd:
         2f:4e:7b:62:25:f5:c7:4e:03:41:c7:76:e0:cf:eb:18:3b:b5:
         5e:eb:2c:27:6c:63:a8:a1:ea:c8:63:46:b7:dd:5c:c1:89:e9:
         d7:21:e3:12:4a:3b:78:71:2e:a2:86:93:c3:96:7f:81:35:ca:
         24:b9:a8:e6:30:d7:6b:0b:4f:f1:33:af:28:f2:f7:a8:5f:c2:
         d8:19:28:05:77:5f:84:1e:40:97:09:e9:71:06:c7:73:dc:dd:
         ed:bb:56:73:f6:c8:94:a8:53:3f:9b:9e:e8:29:35:f7:67:02:
         ac:45:14:72:14:3d:df:2f:a2:53:2a:6c:ab:8f:9a:80:3e:d4:
         e2:25:9f:82:87:d7:e7:bf:6b:6f:2b:2c:ee:66:52:48:d8:98:
         f4:97:49:7b:e6:bb:52:f9:c7:17:fd:af:25:35:9b:47:cb:15:
         9a:66:d3:08:f8:38:4a:80:91:21:81:50:bc:b0:06:2e:b9:02:
         31:9e:1d:11:ed:32:af:f7:23:09:25:d8:28:1c:15:14:d2:4d:
         3e:af:d6:11:cf:72:4f:a0:4d:a9:e9:3d:e8:d8:b0:dc:68:80:
         4a:56:86:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:35:28 2025 by rpki-client