Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a29efee-f0ef-391e-b187-f60327e58020.roa
File:                     8a29efee-f0ef-391e-b187-f60327e58020.roa (raw, json)
Hash identifier:          O9Ald88YQPcKR2bMU91GvD9cMi9m8WxKP8UUA5wKwb4=
Subject key identifier:   39:84:96:EE:2D:B9:3E:B4:98:F3:27:FB:F8:90:7C:21:56:39:2E:1B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C82FF42C59E739F14A400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a29efee-f0ef-391e-b187-f60327e58020.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     10515
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:82:ff:42:c5:9e:73:9f:14:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=c75bbb40-b432-469d-bcc3-6cbca6701862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:99:df:8a:9e:00:1a:a1:af:33:ba:0a:90:38:
                    f0:0d:d3:5c:25:96:47:e3:07:6d:c4:83:6f:f7:af:
                    99:95:21:bd:18:27:20:25:08:ee:70:20:9f:51:59:
                    df:51:95:d8:88:e0:41:9a:62:25:7f:4e:9a:7c:df:
                    71:64:1c:67:d5:b8:49:fb:eb:95:33:aa:44:7c:a4:
                    8c:fa:27:fc:e5:5e:95:e2:c7:8d:09:f6:22:ac:c4:
                    e2:d0:6f:47:f1:7c:c0:15:12:61:e4:a8:6c:38:97:
                    b7:c4:57:9e:bb:30:33:b0:61:70:9f:11:f8:aa:bb:
                    fb:87:aa:88:8f:9e:bd:e2:2a:7d:aa:e9:f5:0f:05:
                    65:32:84:e6:87:fb:1b:44:d4:3b:64:ef:1c:61:34:
                    43:6f:67:30:ba:c9:af:2e:4f:94:85:66:d2:bb:be:
                    f4:f3:1b:b0:c2:f3:02:2f:f8:6e:1e:07:d8:1e:ff:
                    04:38:b7:b5:b3:f3:ce:21:8a:78:c8:6d:84:8f:e3:
                    03:72:22:58:a8:25:53:e7:70:5e:63:4d:54:ea:2e:
                    05:39:07:59:98:f4:f4:d2:7f:03:5b:0b:08:ee:1d:
                    00:68:0b:43:33:a6:99:63:7a:c0:6a:cb:ea:63:1f:
                    00:df:30:73:35:19:0c:fe:ab:b9:d5:ba:fd:82:56:
                    ce:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:84:96:EE:2D:B9:3E:B4:98:F3:27:FB:F8:90:7C:21:56:39:2E:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a29efee-f0ef-391e-b187-f60327e58020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:70:87:fb:cb:2f:b1:5a:c4:6b:4b:f3:e1:2e:c5:6c:3f:4f:
         de:23:ef:4a:12:67:e7:2e:66:13:51:65:5b:4d:01:69:0c:46:
         25:79:3c:eb:92:24:8b:d8:7f:61:96:b5:a8:84:23:9c:ad:93:
         2c:82:f4:ee:7a:32:16:80:88:85:dc:74:ee:c6:98:86:7f:5c:
         72:bd:ff:69:be:54:07:3f:26:37:5b:1a:ac:4f:dc:6f:f9:8e:
         5e:39:b6:2d:4d:9c:81:c8:7a:2a:a4:4e:2c:33:66:65:e6:fd:
         cc:70:fb:9b:9e:5f:2c:ae:67:62:d1:0f:db:4a:b6:cb:91:d5:
         b3:7c:2a:f8:ee:71:1e:81:38:51:e7:08:7c:b8:11:8f:89:45:
         41:35:80:8d:de:6a:19:3f:2b:51:a6:20:6b:84:d3:5c:07:f8:
         93:1a:6c:8d:12:c1:d6:75:e6:52:ea:79:ae:dc:49:ee:9f:e2:
         0a:4b:82:79:d6:8e:7d:3a:ae:78:32:20:cb:9e:39:a5:42:d0:
         cc:4d:1d:b5:13:ce:bb:1a:eb:cd:e9:29:dc:62:bf:f8:f5:76:
         8a:46:27:b8:f1:52:56:8a:fd:9f:2e:9e:99:39:b8:6e:c3:97:
         e6:c6:4a:94:4b:b4:54:a3:86:ae:32:2d:b9:e6:4d:d5:67:94:
         44:3a:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:55:26 2025 by rpki-client