Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7dda03a-4d6e-3f43-bef2-a39e65001570.roa
File:                     c7dda03a-4d6e-3f43-bef2-a39e65001570.roa (raw, json)
Hash identifier:          kn2pU6/lOWDpkNXrDfWFWcYYFVz1pP4JnElqplmyAx4=
Subject key identifier:   2B:C2:DA:FD:E1:0B:EC:34:51:FC:AD:4F:DC:89:2A:D6:70:FB:2C:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8E2FBBCFF523F19E5480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7dda03a-4d6e-3f43-bef2-a39e65001570.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     36625
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8e:2f:bb:cf:f5:23:f1:9e:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=75f52d7b-e984-4a56-9eb7-575d7da91596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:4a:20:0a:86:32:eb:14:2d:80:72:dd:91:
                    5d:18:0b:e9:d9:23:bc:31:12:29:80:92:69:28:a6:
                    1d:64:4e:8a:2a:fc:32:e0:a3:65:0d:77:96:7a:da:
                    1d:2f:18:41:0c:34:d1:bc:01:03:fa:98:bf:8f:b9:
                    f3:2d:77:27:85:94:21:7a:f6:c1:bb:3d:d2:5e:f1:
                    c0:27:ac:e7:37:76:4c:eb:3e:41:aa:1a:ea:5a:0f:
                    43:06:24:c5:0c:96:43:0d:9f:47:be:76:71:26:37:
                    33:a7:1c:b2:59:de:b9:6e:00:56:d6:5d:ec:3e:4d:
                    a9:04:9e:65:25:d9:c6:65:99:94:93:24:49:da:39:
                    f9:96:5d:6b:b5:56:f4:01:ee:25:b5:5d:9c:3b:e0:
                    0b:44:71:3c:55:65:ce:29:6a:6b:8b:13:1a:93:2e:
                    08:2c:6a:22:5a:c4:47:2a:8e:a9:fe:6f:64:9f:80:
                    b5:33:19:94:67:9a:4e:e3:58:fe:95:37:5c:60:80:
                    a5:d7:95:39:c8:47:74:07:b8:78:cc:76:05:3f:48:
                    fb:5b:13:c3:3c:ee:58:01:b8:1e:36:06:ce:15:5b:
                    1b:b5:76:f2:a4:63:2c:7f:a8:d1:fd:6c:86:61:a8:
                    df:13:d4:c3:93:07:97:99:fe:fb:bc:82:0b:dc:85:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C2:DA:FD:E1:0B:EC:34:51:FC:AD:4F:DC:89:2A:D6:70:FB:2C:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7dda03a-4d6e-3f43-bef2-a39e65001570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b9:df:d4:34:4a:ef:92:ce:88:47:7b:44:c8:f4:82:31:90:
         d5:ec:aa:20:54:5a:b1:2f:5a:84:b6:e7:30:80:c1:4e:32:04:
         15:8c:62:1c:57:1f:8f:68:cc:1e:0f:7c:a7:19:57:1a:40:0f:
         9a:a9:ae:d7:b7:c1:26:8b:23:56:7a:0b:27:4c:8b:ee:88:fc:
         88:70:ec:1b:0c:e6:f9:63:f3:76:aa:8c:24:f5:1c:a2:d0:36:
         8f:f6:bd:5b:27:01:d6:4b:95:71:a5:9b:62:82:a9:85:ca:40:
         7f:39:a2:84:f3:c3:d8:4c:70:03:ca:ea:41:2c:5c:00:e9:c4:
         c7:8e:ba:b6:f5:ff:e8:7b:0c:e3:d6:a1:d2:b1:3b:92:98:c3:
         0f:1e:7a:dc:e5:e9:08:3d:a1:b4:aa:ae:6b:7a:0f:05:a0:e6:
         55:7d:10:36:6c:b2:cc:b9:36:f5:55:d3:6f:1b:b8:b4:34:8b:
         41:e6:9c:db:44:69:bc:a2:e5:77:f0:8e:75:4f:3b:6c:4b:81:
         ad:b1:7b:f6:62:1a:aa:39:aa:31:a3:51:59:ab:d3:96:6f:41:
         96:0e:91:7b:ac:08:c5:fe:d2:8a:5c:5a:30:95:86:e2:4a:b7:
         e3:c3:f8:bf:b8:50:88:a9:ea:cb:58:29:de:11:40:39:83:0f:
         63:88:72:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:11:50 2025 by rpki-client