Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b03e940-c8f9-3a39-90c5-b6e2a6367e34.roa
File:                     6b03e940-c8f9-3a39-90c5-b6e2a6367e34.roa (raw, json)
Hash identifier:          p0giM6sSdgrARhdvKmljJmrBfc9kRFXemBuKxUt84cY=
Subject key identifier:   77:F3:CC:22:E8:3B:6C:53:3F:9A:00:C6:7E:63:CA:75:10:B8:F6:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C854E2546DA411A205100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b03e940-c8f9-3a39-90c5-b6e2a6367e34.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396542
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:85:4e:25:46:da:41:1a:20:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=70f7f591-29d8-4f06-b6f2-99527fec1d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:04:23:3b:a8:17:84:06:9e:9f:61:e5:ac:
                    e2:27:de:88:93:f1:76:3d:ff:d3:d7:4d:72:ca:79:
                    af:b1:97:31:ab:ef:68:0b:b2:61:9a:06:ef:85:bc:
                    f3:d1:cc:d5:eb:fa:b6:cf:c9:5a:b0:d7:d3:41:4d:
                    01:d1:20:5b:36:24:1a:5a:fb:93:6e:8f:3c:d9:34:
                    44:32:85:61:6c:cb:78:80:76:b9:e5:14:2b:b1:48:
                    89:73:98:07:18:d1:cb:b5:92:a9:3d:bf:76:be:e1:
                    01:c5:bf:fa:39:24:9c:23:41:2d:38:4c:7b:48:3b:
                    22:fd:f4:d3:1b:c6:6a:74:12:36:91:6f:5d:c8:80:
                    7e:0f:14:fe:1d:22:14:86:e1:af:5d:48:fc:ac:57:
                    f4:01:ce:ce:24:91:48:b9:e3:6e:e4:f3:0e:27:81:
                    02:34:ec:e2:5e:25:a0:0f:3b:bb:1b:fe:f9:40:cd:
                    37:6a:0c:dd:c9:a1:04:ff:fc:c1:69:d9:02:39:b5:
                    49:d5:ec:22:a9:d0:5d:77:00:35:0a:19:47:b4:1f:
                    11:08:6b:1c:f6:13:af:9c:1b:f0:04:af:03:b7:40:
                    a1:cd:01:42:65:ee:40:da:c0:8a:42:45:65:6c:4a:
                    a7:15:5e:81:df:a6:68:c0:27:92:43:7a:7e:87:5e:
                    47:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F3:CC:22:E8:3B:6C:53:3F:9A:00:C6:7E:63:CA:75:10:B8:F6:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b03e940-c8f9-3a39-90c5-b6e2a6367e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:e1:d1:75:a7:d0:ba:13:69:7f:a4:14:4e:78:d9:f2:c5:20:
         42:55:58:76:1b:0d:8e:a9:bc:c8:cb:be:91:1f:24:0f:d9:ce:
         d8:bc:74:51:7c:8a:9c:56:6e:73:9f:e8:6e:78:aa:06:bb:e1:
         26:e1:1e:d1:11:0e:12:01:4a:f7:de:ed:b3:29:d0:83:c3:14:
         f1:c6:82:ad:d5:63:7a:c1:92:30:4f:3c:a5:1d:41:25:1a:ad:
         f5:33:0b:8c:0b:93:e7:6d:8d:fb:f2:0c:61:f1:63:6f:de:96:
         3b:3f:18:62:a1:3a:fc:bf:90:97:de:61:44:f4:a1:f2:d1:6b:
         ef:d3:11:cc:f4:29:7a:21:29:3c:0a:64:50:12:36:9f:2b:b1:
         71:15:a3:de:3f:ee:d8:54:7b:34:d3:7b:ad:44:5f:4e:70:5b:
         37:e3:4a:9c:ef:de:57:d9:b0:ec:e6:55:c1:bd:7b:1d:e7:03:
         47:ed:0e:f7:db:84:69:45:fb:d8:c4:f9:3c:4a:f9:f5:37:5a:
         40:4c:44:26:d4:19:6d:a8:75:7f:f2:62:1a:b9:45:a0:2d:3a:
         eb:c8:1b:38:e4:01:8a:0d:1a:1c:90:69:a0:54:5c:e1:f1:52:
         13:67:84:a6:24:e4:32:3b:c9:ca:12:ec:71:64:d4:3e:7a:1d:
         07:99:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:10 2025 by rpki-client