Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75683f65-9b25-383c-83d0-1ae289a2d1aa.roa
File:                     75683f65-9b25-383c-83d0-1ae289a2d1aa.roa (raw, json)
Hash identifier:          VAuw+YmmhRG+EcoLMnyr5zBD4q5fLFR2/T1lu5EQhUs=
Subject key identifier:   9B:C8:70:5C:C4:0B:BD:27:05:16:18:7D:16:6F:E2:1C:DD:E1:7A:88
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6FF734BAC1EC35614E645400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75683f65-9b25-383c-83d0-1ae289a2d1aa.roa
Signing time:             Tue 07 Oct 2025 01:00:29 +0000
ROA not before:           Tue 07 Oct 2025 01:00:29 +0000
ROA not after:            Mon 05 Jan 2026 02:00:29 +0000
asID:                     396545
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:f7:34:ba:c1:ec:35:61:4e:64:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  7 01:00:29 2025 GMT
            Not After : Jan  5 02:00:29 2026 GMT
        Subject: CN=c65c31ed-0eb1-4309-a67f-a7ac3e24cad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:81:53:5e:96:bc:49:d1:5c:fa:cd:e1:0e:
                    05:c8:56:95:b0:30:6b:45:f8:b5:ba:5d:f2:7c:33:
                    9f:c9:f9:d3:aa:57:67:7c:ff:a4:8c:1d:8e:ab:12:
                    f4:e8:51:fa:4c:63:1e:93:fd:0d:01:c8:5d:56:ff:
                    5d:80:68:91:24:6c:76:26:30:c4:0c:57:61:93:34:
                    8c:05:f7:9a:5e:24:aa:0d:74:f1:0f:d4:2c:67:74:
                    15:cf:a0:04:7c:f9:11:82:ee:c3:2f:ec:7f:ea:71:
                    64:13:80:67:0b:df:fc:9b:42:3f:97:2c:eb:4c:bd:
                    d0:ca:e4:6d:ad:b4:2c:b0:fc:45:48:bd:3b:45:e6:
                    a0:1e:05:10:fb:c5:86:42:95:c9:ec:a1:ac:c2:5e:
                    b0:70:0b:7b:35:9d:b4:48:76:4a:cc:14:81:1a:c6:
                    b5:4b:60:28:2a:b2:e9:0d:f1:9f:f2:e7:f5:fa:5c:
                    3e:02:7e:26:5c:6b:3b:1a:54:71:1b:a9:ec:78:bc:
                    f9:61:fa:7b:c5:01:15:fe:45:13:b8:14:18:b1:08:
                    39:05:da:31:b0:a3:e3:02:7f:68:ef:0c:6e:18:c4:
                    87:0e:17:35:c1:21:22:1b:3d:90:7e:c6:99:c4:1c:
                    d7:19:bb:f9:d9:9f:1b:52:64:8d:e6:c8:ed:0e:ac:
                    eb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C8:70:5C:C4:0B:BD:27:05:16:18:7D:16:6F:E2:1C:DD:E1:7A:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75683f65-9b25-383c-83d0-1ae289a2d1aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:33:73:44:e6:2a:e8:7e:df:01:24:56:3e:85:a8:c6:7a:9b:
         4e:8d:f0:0c:7b:89:8c:93:e3:13:39:4f:d8:06:67:41:4a:a0:
         c5:e2:9b:33:b7:5f:ad:c3:a9:9e:d5:e3:1f:5b:c3:3a:03:6c:
         3e:3a:50:da:61:64:fc:92:08:be:49:10:6f:77:a2:4b:dc:c1:
         69:2b:aa:a0:31:ad:30:eb:8c:be:3d:8a:8f:ea:10:85:8c:d9:
         cc:0c:d8:8f:3e:d4:be:e2:b0:30:6d:ba:0a:30:12:e5:88:61:
         cb:4c:32:6e:1e:56:44:48:48:13:46:e9:dd:13:88:4e:0a:cf:
         fa:bc:2a:7b:05:96:c2:d4:69:a5:3e:cd:9b:2f:7e:ed:eb:99:
         cf:89:2e:55:0f:6f:d4:c3:3b:c1:39:04:a3:7e:e6:7a:2e:3a:
         b1:52:e7:12:5a:09:1f:a8:4a:e1:7e:f8:e6:3e:51:76:23:1e:
         dd:ad:f9:3f:45:28:ec:84:ad:18:cc:d2:9d:73:2c:1a:1a:22:
         0c:0c:45:31:b9:80:f2:2c:4b:56:49:74:91:97:76:b6:6d:a0:
         f7:5e:22:01:08:7a:19:4f:67:09:b1:dc:b6:24:e1:7f:e1:8e:
         50:cc:a9:85:c4:53:98:03:3a:60:20:b1:12:5a:0e:6d:36:6d:
         11:38:01:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:32:34 2025 by rpki-client