Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cce30016-7a7b-3725-909c-c81fce4c90e6.roa
File:                     cce30016-7a7b-3725-909c-c81fce4c90e6.roa (raw, json)
Hash identifier:          VAyaSoyKpqV0bW1r7mwlIMDrqDH7iUzTzrnwVhnb1HU=
Subject key identifier:   8D:19:30:21:14:88:69:AF:33:60:73:13:F1:E4:B9:AE:95:E8:20:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6FF73FDA62CBBC71E523D040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cce30016-7a7b-3725-909c-c81fce4c90e6.roa
Signing time:             Tue 07 Oct 2025 01:00:29 +0000
ROA not before:           Tue 07 Oct 2025 01:00:29 +0000
ROA not after:            Mon 05 Jan 2026 02:00:29 +0000
asID:                     396827
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:f7:3f:da:62:cb:bc:71:e5:23:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  7 01:00:29 2025 GMT
            Not After : Jan  5 02:00:29 2026 GMT
        Subject: CN=3e0d528d-4ff3-4a8f-8aea-601195c24bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d3:67:91:c7:25:cd:e8:bf:67:84:cd:7c:2c:
                    f7:6e:76:f2:27:54:3d:cc:c6:3c:ed:8a:fa:4c:6d:
                    65:9b:09:d3:2f:dc:ad:54:e3:b7:3c:0b:9c:96:c9:
                    de:a4:68:61:03:e1:b1:3d:30:a4:94:31:68:fc:ba:
                    6d:67:d7:3e:5e:9c:c6:75:9c:b8:36:97:ab:77:ed:
                    5b:22:ae:3a:79:83:9a:e6:df:22:b3:f0:2d:e0:71:
                    90:6f:ea:ca:3d:73:ff:f9:fa:57:c8:e0:de:7e:ba:
                    2b:33:0b:8a:2b:05:a3:eb:87:b2:a1:cb:ae:3e:a8:
                    f1:7f:93:68:3b:8d:38:58:55:e4:0c:dd:23:bd:7e:
                    e8:83:1b:46:87:22:e5:df:43:e3:e9:df:c1:dd:2d:
                    73:d9:28:c8:ca:21:cb:53:94:ab:a2:25:f5:9f:81:
                    a5:d0:a3:98:9f:be:23:40:73:2c:4e:67:32:58:3a:
                    f2:d4:ae:31:be:df:48:21:4c:49:e5:c5:38:3f:93:
                    13:3c:27:c5:e4:4e:8f:80:2b:08:26:03:a9:77:66:
                    40:6c:27:d3:87:0d:85:0c:0d:e0:67:96:af:37:52:
                    db:79:8f:5e:a6:21:2c:b2:50:2c:71:fd:67:41:49:
                    e4:a9:88:4c:ac:3d:9f:8c:a3:89:28:82:96:70:41:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:19:30:21:14:88:69:AF:33:60:73:13:F1:E4:B9:AE:95:E8:20:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cce30016-7a7b-3725-909c-c81fce4c90e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:79:6d:6d:2a:fe:e1:0a:f3:43:26:b9:f2:d0:5e:7b:0e:59:
         c0:a3:6c:ff:f9:01:34:9c:ab:1c:f1:0a:fc:e9:24:38:04:20:
         57:16:c9:59:8e:41:e8:fd:d7:91:df:4a:ec:1d:59:8d:5c:8e:
         22:d0:cf:7a:cd:c5:bc:e3:c1:5d:02:2c:d5:9a:83:e2:09:a1:
         e3:50:f0:49:b1:9a:1c:34:a4:4f:2b:b2:dd:24:6a:76:10:f6:
         b0:d2:5c:98:66:52:64:b1:61:3d:33:6d:7f:9b:09:31:e9:14:
         b1:a1:dd:95:69:86:20:32:d3:9c:44:38:b4:50:88:24:1f:cf:
         82:f6:8f:f4:6c:2c:21:5a:1b:a7:74:6e:da:f9:5e:a9:30:00:
         15:3e:cd:37:b3:22:27:9f:26:08:72:bd:24:ff:95:b6:89:ff:
         70:9a:b2:dd:df:e7:9f:2d:0a:3f:de:1d:1c:6c:ae:5c:33:c5:
         5a:d8:e6:68:17:79:81:b5:48:13:67:20:4f:37:fa:81:20:d3:
         6c:69:44:0b:98:34:3c:6a:bf:f5:3c:c0:5f:b7:2d:49:4f:da:
         e0:5f:7a:0e:0b:1b:ca:01:61:57:73:8a:d1:c5:33:b8:31:a4:
         bc:c8:59:6a:1c:27:48:9a:bc:1b:d4:e2:d2:40:08:57:b7:c3:
         09:8d:f4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:46:46 2025 by rpki-client