Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c13606a1-ea2c-3da4-a8d3-04c89b931564.roa
File:                     c13606a1-ea2c-3da4-a8d3-04c89b931564.roa (raw, json)
Hash identifier:          TdeHbBzcxzu87o9HmCIRa1HEbKzNKPEuQ1ZImdUM4qs=
Subject key identifier:   29:4D:04:B2:23:FE:29:42:81:E1:75:BB:CD:9D:89:A5:06:5F:32:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8CE3F1B3A2B7D29C6D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c13606a1-ea2c-3da4-a8d3-04c89b931564.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     36632
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8c:e3:f1:b3:a2:b7:d2:9c:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=146652fe-9282-42f7-924f-a1b733796f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f0:f1:72:dd:d3:66:f7:eb:fd:43:c4:f2:18:
                    66:36:d0:c4:d5:5e:ce:51:81:59:c4:14:f2:08:17:
                    eb:2d:c9:ae:a9:fd:bd:55:0f:3f:69:c2:d8:3c:1a:
                    3b:db:e7:b9:ea:85:78:88:0b:49:1d:c0:b4:bf:3f:
                    23:5b:d2:44:82:10:6a:11:f7:3e:54:ac:0d:f3:e7:
                    86:f3:c8:b2:35:84:16:77:82:80:d6:88:1e:39:10:
                    3d:c9:3e:ee:03:7e:aa:9e:48:f9:e7:a3:39:8c:e6:
                    d5:8d:0f:46:8f:08:b8:e5:4b:46:02:a2:b4:1e:15:
                    8e:61:be:4f:fe:bf:98:9b:d2:5e:32:e3:b1:aa:95:
                    9a:67:c0:6b:07:46:53:b2:e3:87:dd:25:b7:7c:1a:
                    fe:65:0f:d6:93:fa:94:b8:d3:41:69:b7:c7:9d:f1:
                    8a:6b:c4:38:bf:f6:2b:24:56:13:36:3f:73:cf:01:
                    7b:89:9a:55:9e:8c:40:0f:06:67:49:24:b6:09:09:
                    9c:25:3e:0a:30:a6:9c:83:27:b0:2c:cb:65:db:4e:
                    dc:99:7b:2c:50:8a:7f:61:e8:27:5e:82:50:6e:1e:
                    08:18:74:85:ed:ea:09:04:2f:cd:c9:71:43:60:9d:
                    d1:1d:80:cd:a9:df:cb:b5:63:ec:aa:06:b3:0e:cd:
                    74:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4D:04:B2:23:FE:29:42:81:E1:75:BB:CD:9D:89:A5:06:5F:32:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c13606a1-ea2c-3da4-a8d3-04c89b931564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:49:99:6f:b5:ee:b6:42:63:56:cd:70:42:98:9b:f7:e3:0f:
         c6:2e:ac:b6:1d:9d:25:a9:b7:18:9e:8e:78:60:0a:24:27:a5:
         4f:c2:49:2e:32:e8:19:c5:33:15:6f:7a:27:87:42:54:53:cf:
         b5:76:19:e9:71:30:6a:ab:f9:25:66:0f:83:f6:d4:df:a5:ad:
         e4:e7:be:4e:fa:4d:64:3d:e8:83:d9:46:74:e0:05:bb:c6:44:
         23:90:3c:d0:5d:7d:ab:a8:f7:ca:39:fb:c2:89:7c:b2:96:8f:
         75:69:6e:8b:91:74:65:76:87:1a:f5:7e:db:01:c2:46:59:5b:
         1e:4c:ac:26:0a:33:6f:b3:30:29:54:71:7d:27:de:bd:08:20:
         de:a4:90:1c:5a:3b:97:6b:ae:67:f5:b7:41:e5:f0:4f:4e:d6:
         8d:a3:62:8e:c3:1b:bd:e0:ba:6f:2f:fa:ce:0e:32:6b:0f:fb:
         60:56:88:36:df:65:10:3e:18:9e:4e:f7:b1:56:15:f2:27:66:
         db:2f:5d:25:e5:4d:be:0f:a2:89:2d:85:d5:97:9f:dc:6a:e4:
         29:a8:d9:83:19:af:97:9f:7c:d7:96:cb:02:86:52:32:dd:5e:
         a9:bc:79:1b:9e:24:0b:f4:19:f1:73:f0:2d:66:1d:69:c8:ae:
         8e:6d:8e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:34:00 2025 by rpki-client