Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ff2770c-368a-3f1a-ac90-79714d484412.roa
File:                     6ff2770c-368a-3f1a-ac90-79714d484412.roa (raw, json)
Hash identifier:          Gs4ovhwZEi53AszUhEK4mzgg1pbc40MBf7YDPOtCz20=
Subject key identifier:   F4:A2:35:24:46:9E:A4:14:D0:1D:1B:48:6C:18:81:13:49:21:0F:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8FEBB7FB4E5AED419480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ff2770c-368a-3f1a-ac90-79714d484412.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     36630
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8f:eb:b7:fb:4e:5a:ed:41:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=39d32b83-a43a-43b7-952d-c2a8ca1c8fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:bf:84:0a:4b:65:a1:0f:05:88:00:1e:e1:
                    cb:4d:b5:2a:b2:f5:21:f5:ea:f6:bf:56:96:34:8a:
                    f1:cd:0a:8b:f2:27:d6:d4:ae:cd:95:5e:14:d6:16:
                    a5:a3:5a:92:2b:73:c3:15:cd:fc:90:b0:02:b1:89:
                    e7:9a:26:e6:3c:e5:21:78:71:08:39:c5:a8:68:c3:
                    62:4b:55:24:21:0e:23:bf:d0:e4:9d:8c:b7:5a:0e:
                    38:b3:16:38:9b:5e:66:8b:d4:32:bd:2c:75:19:b9:
                    f3:88:5f:53:6f:52:6d:3c:d4:fc:ab:f3:1f:3d:e6:
                    f6:bb:b7:a5:f6:b4:61:4d:95:9c:5d:72:ac:9f:e2:
                    56:38:85:73:e9:9c:a8:b7:1f:47:9a:3b:39:ad:d8:
                    fc:23:33:2c:ea:c2:62:d9:7f:9c:5c:1a:87:84:f6:
                    4c:87:ec:c1:7f:29:a3:00:e4:18:6d:d8:48:be:ac:
                    47:7a:71:a0:cb:71:8c:ae:46:30:fc:df:db:f0:d0:
                    fc:0e:d2:d6:68:69:34:82:c7:52:8c:0f:18:54:e9:
                    87:12:eb:12:86:ce:af:3d:91:9d:82:4c:b8:96:f6:
                    fc:de:a9:71:23:16:3c:65:35:81:50:59:3d:e9:61:
                    01:fc:6d:bc:1d:8b:9a:7f:9c:a5:53:76:d6:5f:24:
                    1b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A2:35:24:46:9E:A4:14:D0:1D:1B:48:6C:18:81:13:49:21:0F:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ff2770c-368a-3f1a-ac90-79714d484412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b5:17:f8:1d:69:38:67:e5:8c:46:02:01:95:66:67:c5:a6:
         81:3d:86:dc:5a:8f:36:1d:e4:9a:ce:ae:58:37:2b:a9:6d:d4:
         ab:eb:81:22:26:ef:eb:9c:34:6c:d8:ec:16:f3:90:8a:2a:52:
         38:b7:8f:4a:cc:d7:67:2f:86:18:67:2d:fb:ab:3d:73:eb:5c:
         98:6e:f2:f7:19:ce:45:98:60:19:56:5a:e4:8f:d4:3b:08:2b:
         46:8f:87:9f:ad:19:5d:39:55:25:95:c0:01:f0:22:14:0f:bb:
         91:45:d8:6a:1d:23:f5:e1:4a:e9:bf:da:1a:3a:88:45:81:cd:
         55:96:54:2d:09:29:b3:ea:6e:99:9f:7d:47:62:15:e9:77:b8:
         3f:2c:cb:1d:63:a0:a8:21:06:4d:56:11:3e:30:63:88:1e:29:
         bc:c3:aa:47:9a:47:2f:22:68:85:d3:53:4a:ff:7c:96:de:52:
         1e:20:00:72:c6:68:ce:f2:7a:5d:34:2e:29:f1:32:60:93:a2:
         00:aa:e9:fa:9a:e1:d4:f3:c9:e0:41:48:7f:3a:5b:80:ea:7d:
         0e:8f:6b:72:1f:ec:fd:e0:38:6c:cb:36:1f:f9:ae:97:bc:de:
         b2:af:7b:1a:4a:6a:3e:56:68:65:8f:17:60:94:fd:09:28:21:
         2a:34:68:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:10:50 2025 by rpki-client