Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5ba93ba-56ca-3e91-910a-5e005d6416b6.roa
File:                     a5ba93ba-56ca-3e91-910a-5e005d6416b6.roa (raw, json)
Hash identifier:          u5JVMgQxV+Qqenc4B6QxnBAv2JOZWH9ZALd4NyofviQ=
Subject key identifier:   BA:B0:B8:62:FB:DB:3B:61:07:31:A3:2E:CE:74:CB:D4:2E:ED:4D:F6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C90463F736811EE55F100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5ba93ba-56ca-3e91-910a-5e005d6416b6.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     397205
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:90:46:3f:73:68:11:ee:55:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=3033dd9e-0031-4ef9-935b-7324d9219b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:44:42:9a:29:01:6d:4e:b2:a4:f3:85:5c:52:
                    b4:13:50:66:8d:aa:f9:d1:fd:b0:90:72:a7:e5:68:
                    67:13:81:72:0f:5a:d9:bc:c4:2b:08:54:1c:9a:0a:
                    6a:91:67:9f:85:08:3e:ab:c2:b2:51:98:c3:95:fe:
                    36:ab:90:6a:cd:13:eb:0f:30:b5:80:77:b9:ad:21:
                    9b:82:d0:39:8e:4b:02:ab:df:9b:e4:22:2b:bb:d4:
                    08:17:ff:b7:c0:86:d3:da:18:ba:1d:6a:de:f8:7d:
                    e5:a4:f2:73:4c:0c:cc:53:2b:f9:63:60:fd:42:1d:
                    15:f6:c0:00:02:57:af:f2:05:76:55:8b:ba:a8:43:
                    cb:62:0f:32:44:fb:fc:af:7c:9f:66:c8:0c:8c:aa:
                    79:75:bb:33:a5:5a:67:dc:d0:0a:13:6c:34:b3:e6:
                    03:25:e1:f3:1c:26:f9:e2:57:3c:81:ed:75:a1:f6:
                    67:ca:3a:21:27:83:ba:dc:fd:26:43:9c:aa:05:3f:
                    f5:84:67:de:85:50:3e:df:1b:c3:db:88:81:54:12:
                    42:40:cd:cc:63:27:6f:0e:80:2e:aa:27:2c:58:3a:
                    22:98:d7:85:a7:3a:cc:40:ba:f5:26:59:02:3e:ee:
                    12:44:02:64:44:96:fc:87:2a:70:bf:1e:af:10:bf:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B0:B8:62:FB:DB:3B:61:07:31:A3:2E:CE:74:CB:D4:2E:ED:4D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5ba93ba-56ca-3e91-910a-5e005d6416b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:99:30:11:65:3b:27:00:05:36:4c:e7:45:03:8d:10:0a:a4:
         40:ac:48:fa:96:d3:4a:22:b0:a0:c5:ab:c3:2d:07:aa:29:a8:
         90:7f:05:83:1a:dc:7d:5a:2f:72:7b:9a:20:5d:94:b1:e0:bd:
         ac:a3:2e:74:f3:80:0f:15:d1:46:d9:24:bb:22:1d:ba:68:c8:
         b7:c8:96:7a:62:6c:49:19:39:94:34:40:e0:87:f4:0d:ff:78:
         ec:22:92:0c:64:70:ba:3a:be:3e:8f:ba:ba:bc:92:0f:be:de:
         27:72:6e:06:6e:03:48:99:d2:a7:a1:51:a2:c0:4c:ec:d4:04:
         f5:6a:37:c4:e2:d0:e0:76:c7:2c:f4:2e:dc:70:b0:51:9a:c1:
         ad:7f:5b:91:52:ce:2f:05:2c:f8:6d:d8:5a:4d:cb:3a:8a:5c:
         61:62:da:0e:4b:73:40:25:e7:d3:87:d2:c4:94:f5:62:85:14:
         9b:80:52:b0:40:07:7d:ef:b4:23:74:1f:10:a4:db:9e:e9:d2:
         d8:74:2d:06:8e:78:2b:1a:67:ae:f8:fd:6d:90:e2:c2:e3:dd:
         e1:0b:5e:31:ab:fd:ff:ae:76:d1:a4:5c:a0:08:58:47:a0:1b:
         9c:13:d1:e4:88:bd:09:46:9d:c4:2a:29:96:7f:ee:f3:fe:1e:
         6b:46:5d:70
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfJBGP3NoEe5V8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
MzAzM2RkOWUtMDAzMS00ZWY5LTkzNWItNzMyNGQ5MjE5YjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgURCmikBbU6ypPOFXFK0E1Bmjar50f2wkHKn
5WhnE4FyD1rZvMQrCFQcmgpqkWefhQg+q8KyUZjDlf42q5BqzRPrDzC1gHe5rSGb
gtA5jksCq9+b5CIru9QIF/+3wIbT2hi6HWre+H3lpPJzTAzMUyv5Y2D9Qh0V9sAA
Alev8gV2VYu6qEPLYg8yRPv8r3yfZsgMjKp5dbszpVpn3NAKE2w0s+YDJeHzHCb5
4lc8ge11ofZnyjohJ4O63P0mQ5yqBT/1hGfehVA+3xvD24iBVBJCQM3MYydvDoAu
qicsWDoimNeFpzrMQLr1JlkCPu4SRAJkRJb8hypwvx6vEL9EwQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLqwuGL72zthBzGjLs50y9Qu7U32MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTViYTkzYmEtNTZjYS0z
ZTkxLTkxMGEtNWUwMDVkNjQxNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAqmTARZTsnAAU2TOdFA40QCqRArEj6ltNKIrCgxavDLQeqKaiQfwWD
Gtx9Wi9ye5ogXZSx4L2soy5084APFdFG2SS7Ih26aMi3yJZ6YmxJGTmUNEDgh/QN
/3jsIpIMZHC6Or4+j7q6vJIPvt4ncm4GbgNImdKnoVGiwEzs1AT1ajfE4tDgdscs
9C7ccLBRmsGtf1uRUs4vBSz4bdhaTcs6ilxhYtoOS3NAJefTh9LElPVihRSbgFKw
QAd977QjdB8QpNue6dLYdC0GjngrGmeu+P1tkOLC493hC14xq/3/rnbRpFygCFhH
oBucE9HkiL0JRp3EKimWf+7z/h5rRl1w
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:58:36 2025 by rpki-client