Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b76dd78c-694b-317c-8d7e-69e4429fa1eb.roa
File:                     b76dd78c-694b-317c-8d7e-69e4429fa1eb.roa (raw, json)
Hash identifier:          uGHi7Bj1WFzyBZBiYY2tTxIvJaD203pvxPQ41AWkRJs=
Subject key identifier:   C6:43:45:B7:00:15:54:D6:9D:B7:3C:48:11:99:E0:B5:D0:2B:23:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C913911DE68F06D518820
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b76dd78c-694b-317c-8d7e-69e4429fa1eb.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396546
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:91:39:11:de:68:f0:6d:51:88:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=53c67ef4-ca7b-4741-8100-07ded398b975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:f5:53:d3:76:91:7d:6c:5c:2a:13:aa:6e:
                    37:7b:78:79:d7:c4:3c:47:b6:a7:f5:c1:01:86:2c:
                    5c:2b:d0:e1:83:81:5d:e2:26:d4:3a:34:ea:f4:3a:
                    9e:00:bd:bd:56:ce:f1:0d:93:35:65:24:0c:03:da:
                    6b:7c:0f:8c:33:b0:8f:bf:0a:ac:4c:f2:fe:dd:e4:
                    1f:88:31:2a:2e:1e:93:cd:70:59:ac:61:ce:e0:55:
                    34:b8:e1:69:43:b1:2b:88:58:ed:f0:64:8a:a2:b8:
                    d6:d6:3e:20:89:6d:86:56:50:33:a9:34:0f:fd:3e:
                    64:0d:2f:0e:e1:c9:af:54:af:e3:df:2e:b7:cf:e8:
                    eb:73:15:fb:18:c8:d7:93:26:e4:91:71:69:87:e7:
                    59:4e:50:c5:26:15:73:40:5d:4d:5f:4c:0c:ce:01:
                    4d:b0:bb:cf:37:a2:79:e3:c6:43:42:a5:4e:f1:ac:
                    7f:16:1f:66:d7:af:2d:29:ee:14:5e:06:2b:a6:08:
                    b3:ae:17:a0:ba:f7:70:0c:37:1f:bc:1d:70:0f:19:
                    b2:a5:af:19:8d:b8:ad:08:24:a5:6e:38:89:d8:d0:
                    85:72:c9:9d:ad:95:8b:c6:21:0d:3b:79:19:5b:3d:
                    cc:a9:69:1a:55:41:5b:6c:c5:63:dd:d5:bf:74:11:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:43:45:B7:00:15:54:D6:9D:B7:3C:48:11:99:E0:B5:D0:2B:23:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b76dd78c-694b-317c-8d7e-69e4429fa1eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:19:5d:7b:1d:e1:77:be:3c:96:ee:3e:46:5c:98:3a:7c:96:
         0c:68:a9:3a:1f:ed:10:40:f1:94:df:eb:07:ab:a5:1d:15:09:
         14:89:a5:81:c0:20:70:76:aa:c8:97:70:01:ba:17:ad:8a:4f:
         e5:8d:da:72:1c:fd:be:47:da:63:f3:38:2e:0d:ff:3f:17:9c:
         dc:84:ea:10:ef:ee:f5:3c:f6:5a:3b:28:a3:e2:2c:98:26:d8:
         f8:30:2f:b5:eb:b2:5a:de:c2:ec:f4:12:5c:cd:0f:ce:c1:c0:
         f1:a4:9e:54:cb:8b:d1:7f:b4:c9:b9:2a:3d:80:07:9c:43:88:
         0b:0c:1e:75:95:11:a2:d6:39:ab:03:cf:c5:8c:55:f5:12:f4:
         45:eb:60:9a:a4:1a:de:37:31:ec:a1:a1:14:b4:bd:2e:21:ba:
         ca:24:c7:dc:5f:81:47:e2:c4:81:58:cb:f4:0c:c7:e9:d4:2f:
         0a:65:23:0e:d9:f5:fd:71:30:d5:f6:c0:30:90:be:d6:2f:89:
         5b:25:36:f0:df:c3:20:6a:cc:cf:ac:15:0d:5f:12:93:cd:63:
         f2:b4:8a:22:3d:da:6c:f8:b5:7f:93:df:fa:61:e2:ef:50:b1:
         90:35:84:1d:17:9d:a8:9a:ed:61:05:30:b3:5e:a1:9f:40:3a:
         2e:b8:ea:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:26 2025 by rpki-client