Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddad6be-d722-30fc-b465-d259a1d72813.roa
File:                     8ddad6be-d722-30fc-b465-d259a1d72813.roa (raw, json)
Hash identifier:          IjxuKlktoxusi6Kbs9T3VnKnR3SMlUwrJ7lqattUKHA=
Subject key identifier:   86:39:E6:F2:83:B0:22:05:BE:83:4A:EB:04:47:3D:F7:97:6E:77:1C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8C7FA9D4766A21678400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddad6be-d722-30fc-b465-d259a1d72813.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396588
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8c:7f:a9:d4:76:6a:21:67:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=81f79820-77d1-4ec8-9629-7319ad2e5969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:3a:82:a0:26:07:81:a5:5b:5b:4c:c3:03:
                    bb:62:4d:8c:23:f9:24:a2:af:de:d8:f7:19:5b:a4:
                    94:99:45:0d:be:aa:31:8c:8f:b8:24:08:95:0d:79:
                    9d:7b:73:33:d0:be:e5:81:e3:03:9d:af:84:05:a5:
                    7d:7d:07:ca:2e:e0:28:18:73:b7:34:e0:4f:d6:98:
                    a9:78:85:b6:f8:d2:33:da:1c:f6:75:73:ec:79:a4:
                    55:0c:a2:28:aa:96:ba:36:08:e8:0e:01:37:a3:74:
                    50:07:7c:cf:11:6d:4c:33:6a:52:13:83:60:52:12:
                    74:d9:e7:f1:c1:a7:f5:4c:6a:a7:0b:2a:61:fb:bf:
                    f3:8c:93:b5:49:e2:b2:1c:85:62:82:a9:34:d7:e2:
                    70:ac:b9:34:45:b2:3c:5c:23:1b:13:d4:c9:95:97:
                    cf:1f:92:9e:c5:e8:0b:c3:b1:f0:7f:86:bc:da:2b:
                    21:78:37:5a:5c:b9:ba:87:6c:b1:f0:fa:60:11:e7:
                    ea:a9:0e:b8:3c:49:61:32:64:db:e8:b8:00:ac:b5:
                    98:85:dd:86:99:ff:78:b7:9c:fa:4c:ae:9b:10:d0:
                    2a:96:56:35:75:03:21:96:d6:c7:bc:00:28:b3:6c:
                    26:eb:90:15:5f:d6:4b:e4:6c:de:90:28:26:2f:eb:
                    01:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:39:E6:F2:83:B0:22:05:BE:83:4A:EB:04:47:3D:F7:97:6E:77:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddad6be-d722-30fc-b465-d259a1d72813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:40:1c:bf:80:a7:70:1c:2e:1d:c7:0f:8d:a7:74:3e:c2:32:
         db:fc:71:3f:e3:2b:75:83:50:cf:78:8a:9c:5b:da:32:43:6a:
         df:c1:1b:4d:7e:1d:0c:89:8d:bb:91:c8:89:12:74:7c:4a:07:
         52:28:5e:5b:9d:5c:fc:ca:7c:3e:37:83:2e:76:63:df:ec:07:
         86:b8:8d:2a:08:22:0e:27:95:7a:aa:7f:b1:ec:ea:c9:7f:4f:
         dc:8c:65:5f:6d:cf:b9:77:39:16:fd:62:99:66:05:c4:54:7b:
         0b:eb:86:ad:d4:7e:8c:2c:98:f9:0f:83:b8:2b:05:a7:3e:25:
         d8:94:e3:77:cc:50:d0:c1:39:02:b5:ee:6e:83:c5:17:4f:2a:
         bd:e2:93:c4:1a:de:d2:d4:a9:1f:86:f2:83:95:89:34:5a:81:
         d8:bd:50:36:f6:77:b5:41:32:11:64:2c:d1:2e:57:45:9b:b5:
         f5:40:45:d0:16:be:24:f1:4f:57:ce:39:1b:15:c3:fb:a4:80:
         22:15:63:0a:9d:d5:ed:a5:01:07:a2:a3:a9:38:6e:24:b6:60:
         46:86:78:f9:a6:a0:5b:bf:4e:42:e7:0f:65:17:8d:ff:ed:b6:
         41:bd:12:09:61:c4:a7:38:11:8e:31:fe:39:98:f9:e7:a6:a0:
         1c:13:9d:08
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIx/qdR2aiFnhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
ODFmNzk4MjAtNzdkMS00ZWM4LTk2MjktNzMxOWFkMmU1OTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjo6gqAmB4GlW1tMwwO7Yk2MI/kkoq/e2PcZ
W6SUmUUNvqoxjI+4JAiVDXmde3Mz0L7lgeMDna+EBaV9fQfKLuAoGHO3NOBP1pip
eIW2+NIz2hz2dXPseaRVDKIoqpa6NgjoDgE3o3RQB3zPEW1MM2pSE4NgUhJ02efx
waf1TGqnCyph+7/zjJO1SeKyHIVigqk01+JwrLk0RbI8XCMbE9TJlZfPH5KexegL
w7Hwf4a82isheDdaXLm6h2yx8PpgEefqqQ64PElhMmTb6LgArLWYhd2Gmf94t5z6
TK6bENAqllY1dQMhltbHvAAos2wm65AVX9ZL5GzekCgmL+sBGwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIY55vKDsCIFvoNK6wRHPfeXbnccMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGRkYWQ2YmUtZDcyMi0z
MGZjLWI0NjUtZDI1OWExZDcyODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBNQBy/gKdwHC4dxw+Np3Q+wjLb/HE/4yt1g1DPeIqcW9oyQ2rfwRtN
fh0MiY27kciJEnR8SgdSKF5bnVz8ynw+N4MudmPf7AeGuI0qCCIOJ5V6qn+x7OrJ
f0/cjGVfbc+5dzkW/WKZZgXEVHsL64at1H6MLJj5D4O4KwWnPiXYlON3zFDQwTkC
te5ug8UXTyq94pPEGt7S1KkfhvKDlYk0WoHYvVA29ne1QTIRZCzRLldFm7X1QEXQ
Fr4k8U9XzjkbFcP7pIAiFWMKndXtpQEHoqOpOG4ktmBGhnj5pqBbv05C5w9lF43/
7bZBvRIJYcSnOBGOMf45mPnnpqAcE50I
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:46 2025 by rpki-client