Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e77fecb2-deca-3224-add0-5a42310f76a2.roa
File:                     e77fecb2-deca-3224-add0-5a42310f76a2.roa (raw, json)
Hash identifier:          XiBnHk9wDB/yLLBGirQdTgECJFBPrpnshwrlKkQoCf0=
Subject key identifier:   A4:79:1B:00:8F:72:4C:E9:E2:D4:F5:CA:F3:9C:42:42:AA:08:BA:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C886CB0BB645F28D57800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e77fecb2-deca-3224-add0-5a42310f76a2.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     19836
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:88:6c:b0:bb:64:5f:28:d5:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=344a5dba-e8b6-47ae-90cb-67fc207288c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:1a:33:77:f0:6a:48:d1:c0:0c:55:75:73:
                    b7:bb:df:ac:b8:68:db:ff:05:77:b3:b5:07:42:f0:
                    c5:57:fd:3a:7f:7f:57:6d:fe:de:0b:07:9d:cb:b9:
                    17:47:27:3a:34:1f:6f:22:b0:f5:09:37:da:b4:c9:
                    58:6f:c2:40:fd:44:a6:68:70:b7:1d:74:b4:07:36:
                    e4:8b:80:80:c1:86:f0:18:dc:ea:37:14:1c:44:3f:
                    ff:1a:9a:49:6a:f4:b4:7e:dd:62:fe:16:69:05:fa:
                    d0:96:67:68:19:28:fc:3b:f4:36:33:e2:a7:04:ab:
                    81:56:f5:b2:ac:57:10:e7:6f:e8:c0:47:71:d6:b2:
                    09:5c:a9:c7:d2:45:37:e6:ee:3e:20:a4:28:8d:70:
                    0d:dd:8b:51:91:fd:95:ea:74:08:35:45:6f:a8:85:
                    dc:a5:9d:4f:b8:3a:cc:08:2d:ad:0d:19:ac:10:21:
                    6e:b1:9e:88:0e:89:34:c7:f0:fa:7a:a8:f6:7c:71:
                    25:d2:61:c4:b6:5c:21:4d:ae:0e:a5:62:4e:c0:56:
                    60:3a:7d:fd:df:64:b2:f3:ba:4e:a8:83:3a:d5:c3:
                    eb:b2:67:cc:39:23:15:ce:00:1c:8b:17:72:7d:33:
                    62:25:61:55:7e:d8:86:8d:24:97:18:71:89:af:bf:
                    da:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:79:1B:00:8F:72:4C:E9:E2:D4:F5:CA:F3:9C:42:42:AA:08:BA:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e77fecb2-deca-3224-add0-5a42310f76a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d7:ca:f3:6a:55:88:bb:06:db:ef:e9:2b:7d:dc:64:4a:1d:
         e0:3f:37:44:5e:8d:2e:a1:49:8a:f9:0f:43:0b:38:c7:d4:93:
         2c:ad:85:bd:d3:72:a1:35:4a:09:56:53:4a:7d:a4:2c:a6:19:
         ad:fc:7a:aa:3b:04:52:9c:ff:94:03:8f:74:0d:e5:a8:8a:18:
         ec:9e:d0:c0:c0:68:06:c2:d0:5c:81:84:ce:35:1a:0a:56:ce:
         d8:10:15:3c:a8:3e:88:7a:3f:9d:e7:75:b7:1a:6f:d0:4f:e8:
         0f:58:a1:77:ee:07:d3:9c:a9:f1:47:1e:94:dd:95:fb:f0:4f:
         b2:3e:ea:b9:84:1c:3b:44:57:37:5f:e0:bb:0a:17:72:06:9d:
         54:ae:f1:75:9d:07:35:fb:b2:aa:a1:8d:c0:c4:3b:1b:3b:62:
         02:e2:32:24:21:0d:09:fb:87:cc:9d:0d:60:82:8d:f7:2c:0e:
         16:b9:8a:f4:75:01:9f:99:c6:d6:2a:20:09:ae:81:de:71:4b:
         bd:0a:f6:f9:ed:d3:b3:59:90:50:2e:e7:26:81:26:3e:81:41:
         46:0f:fd:ef:42:b4:10:44:bf:ce:11:22:df:f8:06:80:2d:ef:
         22:04:96:1d:99:2f:af:7f:ad:6e:55:c1:2f:ef:a6:94:43:cb:
         66:b5:a8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:13:10 2025 by rpki-client