Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1bacd7c-d946-3b6f-a95c-5a913b033afe.roa
File:                     b1bacd7c-d946-3b6f-a95c-5a913b033afe.roa (raw, json)
Hash identifier:          fPBHPdLgohX82Px6VoZkdUBfzAqmSmQBvlAVS9i8uik=
Subject key identifier:   A9:22:6A:88:82:F7:DC:A1:5E:B6:7D:EE:1A:33:CA:CD:D3:5E:63:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8A43328298A494425F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1bacd7c-d946-3b6f-a95c-5a913b033afe.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396604
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8a:43:32:82:98:a4:94:42:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=b5a0ec8a-0e9e-47bb-ad57-120bb3be0aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:40:91:c2:45:e3:e0:b7:6c:3b:e5:8a:93:
                    38:15:cc:e5:54:56:28:f7:35:1b:4e:0a:06:1d:14:
                    9e:e9:55:02:92:25:b2:18:d0:a1:3e:79:da:b7:1d:
                    6e:17:7b:7d:f9:b7:e0:a1:52:f3:c1:16:fa:ef:f3:
                    9e:94:67:68:c5:3b:93:21:e6:d3:26:38:9a:35:8e:
                    3e:4a:99:57:d7:62:b4:6c:df:19:fd:ef:c4:ee:ee:
                    01:e7:62:aa:27:3c:a1:a3:b0:05:31:ef:11:ea:06:
                    c7:a3:d7:e0:73:04:09:d2:34:cf:70:35:54:ab:91:
                    28:34:c1:1e:d5:9d:29:58:b1:b3:1f:0d:fd:5b:65:
                    bd:21:af:91:76:49:84:7d:5a:3b:41:96:72:f2:a8:
                    94:e5:7f:50:92:fd:0b:d4:4c:05:44:59:8a:0a:cd:
                    2a:58:6c:ac:f6:9f:6f:a1:37:29:ee:2b:f0:f4:0e:
                    26:6b:58:a1:f8:88:9f:29:8c:92:a1:d2:f7:a9:b6:
                    bf:3b:19:de:20:fd:00:4b:22:0f:95:27:08:aa:0f:
                    9f:ae:0c:39:4f:87:90:06:0e:c3:24:f5:d2:93:75:
                    a5:fd:69:8e:e0:5f:e5:c8:5a:55:24:f9:14:bd:2b:
                    a9:b5:ed:b1:c1:d5:b3:63:c4:27:b0:ac:7f:19:31:
                    50:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:22:6A:88:82:F7:DC:A1:5E:B6:7D:EE:1A:33:CA:CD:D3:5E:63:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1bacd7c-d946-3b6f-a95c-5a913b033afe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:96:db:a1:a1:f9:e9:1e:86:71:24:39:c0:8d:d8:48:3c:b2:
         b6:b3:c8:44:d0:45:9d:4c:49:43:97:df:b6:ca:e3:a4:ee:95:
         a2:36:8f:01:25:ed:78:e2:3e:20:f1:2a:f9:47:a7:6f:10:ba:
         c1:df:02:a1:cf:59:cb:90:71:fd:6d:4e:1f:97:13:d2:00:4b:
         36:51:a4:6e:58:79:b6:ee:d9:72:7c:d0:01:b8:52:09:61:35:
         e6:6c:b4:48:14:fd:bd:7a:90:ac:44:64:4c:4b:d9:72:ad:4e:
         f4:a5:9a:f3:8a:3b:01:66:9b:42:ae:14:93:f6:2a:87:76:ed:
         98:12:67:02:4b:b4:63:57:7c:32:cb:07:39:f3:3e:0e:0a:89:
         ca:f2:cd:93:3c:7f:89:0a:b3:df:8d:f0:dd:93:0c:5d:2a:74:
         7b:55:03:d9:46:62:b8:eb:90:88:22:de:47:3f:16:a8:f7:85:
         e3:74:34:f6:09:63:3b:dc:5d:ac:18:c1:5d:cf:3b:58:65:01:
         76:ed:8c:25:ea:02:aa:14:28:ee:6a:b8:64:2d:a2:86:06:7d:
         79:a9:e8:44:e5:c9:10:02:ef:8c:c5:9c:e3:9d:cc:1c:78:1b:
         ec:ac:ad:93:32:a5:f1:4d:75:21:17:72:c4:d1:c9:01:77:29:
         7d:87:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:26 2025 by rpki-client