Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/985e478f-328b-32f2-8c06-18929e0e212c.roa
File:                     985e478f-328b-32f2-8c06-18929e0e212c.roa (raw, json)
Hash identifier:          A3V1AhFe+Tjvz6JxKZ2EEupeTfluJHq9/QIuqgJzXFA=
Subject key identifier:   68:54:D4:81:24:75:D2:3A:A9:69:00:AD:6A:23:E7:7B:C9:47:CB:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8C41DA7F8EDAE16E5DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/985e478f-328b-32f2-8c06-18929e0e212c.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396603
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8c:41:da:7f:8e:da:e1:6e:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=db672e0b-65af-4d73-9341-fd10be4992aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:9d:09:03:d2:97:f5:51:f2:02:8c:84:c6:
                    74:1e:7c:aa:b7:03:29:48:23:12:f1:e6:c7:f9:34:
                    07:20:8e:cb:45:4b:a6:77:4c:d2:e5:7d:91:df:cf:
                    f1:c4:02:bf:a5:67:0b:e4:85:dd:f7:86:03:65:81:
                    72:80:5e:c6:4e:6b:8b:36:36:0d:07:0e:1c:9b:0c:
                    0f:02:d1:bb:eb:d1:a9:52:91:6b:0a:75:d6:18:f8:
                    f2:36:d5:fe:ed:f1:72:ba:5e:f2:74:56:73:c3:0e:
                    57:32:7e:32:cb:25:db:1d:df:8b:a6:16:0d:c7:21:
                    a2:c8:d0:f5:fd:80:2f:fd:3a:c9:26:9b:41:cb:85:
                    2f:13:a7:f8:26:87:24:4f:7a:8d:63:b3:bd:e0:39:
                    82:78:06:74:19:d6:3e:73:c2:64:06:82:74:37:1a:
                    65:67:8a:e6:5c:2b:97:3b:c8:9d:2f:67:45:1c:3b:
                    23:1c:b7:74:d8:62:d4:82:00:93:e4:69:6d:34:a8:
                    0a:42:cb:d3:07:8e:ca:5a:f1:b3:0e:d7:3f:e2:4f:
                    40:0c:02:5e:3d:0b:a8:52:34:25:88:6a:49:a8:9c:
                    9d:cb:ff:34:ec:55:d5:29:b1:6c:df:4e:57:5c:37:
                    11:4c:ea:d9:5a:d9:0e:9c:18:43:05:aa:ec:f4:6b:
                    14:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:54:D4:81:24:75:D2:3A:A9:69:00:AD:6A:23:E7:7B:C9:47:CB:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/985e478f-328b-32f2-8c06-18929e0e212c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fe:f6:1c:3c:ae:39:a8:e8:7b:ea:57:7d:c1:86:c9:4a:11:
         05:b0:44:47:d2:e9:18:36:1f:19:07:0d:42:cb:a8:b9:19:f9:
         49:75:e9:95:ee:63:81:01:cc:3b:ad:c6:4c:30:27:12:1e:1a:
         0c:aa:85:e7:37:bb:42:c7:78:95:93:bf:84:56:aa:f0:05:90:
         cb:bc:69:66:5f:32:39:76:27:b4:2b:79:35:e5:3a:9a:e3:a6:
         f8:61:87:07:56:31:6d:a4:56:d1:65:98:cf:fc:ae:c6:1f:d8:
         58:87:c5:b9:0f:84:c4:e8:4a:66:bf:67:32:21:e1:8f:13:bf:
         86:d6:94:f9:24:7e:7a:ba:49:f1:38:b1:3d:b4:85:bb:de:bc:
         bb:80:93:4e:bf:31:19:f3:2a:13:e6:45:14:38:a8:7c:8e:30:
         8d:56:8a:35:5f:83:4f:c3:c8:50:ae:9b:cd:5f:fc:c7:70:36:
         ee:24:c7:7a:7a:6d:2a:84:08:a1:e5:d0:19:cb:df:1c:66:a4:
         79:24:09:39:b4:e0:89:ef:94:eb:2e:30:22:14:56:b8:17:13:
         d8:4a:2b:e1:92:21:03:88:9e:57:ac:50:ac:dd:e5:07:be:f9:
         9b:ae:fa:f3:07:08:c5:80:36:d4:9d:41:6d:d8:71:ee:8b:bc:
         3a:71:d8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:06:08 2025 by rpki-client