Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee910d51-32a3-33b5-8c34-544fd8d8730b.roa
File:                     ee910d51-32a3-33b5-8c34-544fd8d8730b.roa (raw, json)
Hash identifier:          vOcBdk3+AqP7kAf+b4L5UbXHxq5kaJSIDufKbqp2f08=
Subject key identifier:   9E:4A:C0:53:15:2D:75:39:17:E4:93:6B:1B:EE:B7:BE:6E:9B:FD:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6FF74778D93E1EF627E73F50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee910d51-32a3-33b5-8c34-544fd8d8730b.roa
Signing time:             Tue 07 Oct 2025 01:00:29 +0000
ROA not before:           Tue 07 Oct 2025 01:00:29 +0000
ROA not after:            Mon 05 Jan 2026 02:00:29 +0000
asID:                     396544
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:f7:47:78:d9:3e:1e:f6:27:e7:3f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  7 01:00:29 2025 GMT
            Not After : Jan  5 02:00:29 2026 GMT
        Subject: CN=8ba8b295-8f22-42b3-b8ae-29953d6aa01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6b:2d:a9:61:92:9b:d8:9e:1a:53:82:1f:19:
                    98:43:a0:17:1d:37:b8:9a:e5:d5:bd:1c:0a:d3:21:
                    5f:0d:67:bb:cd:eb:71:28:3d:13:e4:01:b6:62:6d:
                    75:b3:63:4e:85:fb:b5:e9:08:f1:aa:ca:23:8b:a3:
                    d2:2a:2b:58:c9:21:5a:d8:89:0d:f7:6e:28:1a:fb:
                    a1:04:61:0c:de:39:cb:d6:d2:23:89:3e:b2:80:fa:
                    58:44:1a:50:28:60:d0:c2:7e:b5:c6:37:b4:b2:9a:
                    2f:13:78:fd:f4:22:c4:5d:0e:ac:73:a0:15:a4:9a:
                    fa:ed:6e:33:66:b7:08:5b:96:14:75:be:0f:a6:f8:
                    4d:85:b9:f1:81:ef:1b:d2:f9:9f:f8:76:7e:0a:d9:
                    cb:c5:40:12:9b:67:61:70:ae:fa:cc:36:52:9c:93:
                    9b:84:ef:1e:a8:96:5f:f4:2c:ac:f2:bd:51:f1:f6:
                    f0:b9:35:d2:d3:9d:e8:87:04:54:f5:1a:2f:bb:be:
                    49:b9:a4:7e:28:f5:5c:cf:54:e1:a6:16:a1:34:36:
                    10:23:a2:c5:48:75:de:86:89:e7:53:ef:35:48:53:
                    37:67:c5:c9:27:b3:ed:64:11:13:e1:80:0f:10:ae:
                    cd:57:2c:19:15:22:f6:18:f6:da:30:ed:41:27:16:
                    1c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4A:C0:53:15:2D:75:39:17:E4:93:6B:1B:EE:B7:BE:6E:9B:FD:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee910d51-32a3-33b5-8c34-544fd8d8730b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:10:14:3a:8c:5b:f8:18:38:31:d6:f7:f2:5d:d7:3b:79:7c:
         f2:4e:1a:e0:d4:e4:f7:11:53:a0:b0:8e:1b:66:07:d8:7a:32:
         f3:60:81:22:95:18:7f:4f:79:28:00:97:7a:70:aa:0c:c1:33:
         bd:10:73:95:6a:d2:98:72:13:1d:81:91:c1:5a:9e:ae:a6:31:
         f1:b9:0a:38:88:85:81:6c:57:ae:41:80:dc:0d:6a:7e:7d:f6:
         59:97:4f:fd:00:75:28:5f:dd:e5:9e:2b:d2:38:7a:06:72:cd:
         4b:6e:61:c5:38:26:95:3a:b5:08:70:f9:b5:38:ae:8d:06:95:
         bf:3b:55:71:e8:ae:75:5b:58:95:5b:97:79:8d:43:08:32:e7:
         55:a3:e3:79:31:f9:8a:a7:cb:c4:fe:dc:fa:a3:2d:da:c7:64:
         2e:10:87:98:51:54:8b:49:1a:54:45:fc:41:24:ea:2b:38:de:
         74:32:2f:69:98:32:b8:0b:97:39:8f:fa:f6:be:7f:dd:bf:05:
         8e:49:e2:aa:74:1e:f5:b1:22:1f:4d:a3:4b:71:54:25:f7:4b:
         8b:84:57:ef:da:21:69:76:6e:51:b7:4f:87:cd:0a:c0:a1:69:
         05:bf:bc:4a:aa:5b:d2:14:74:07:14:41:ba:17:13:75:fe:2a:
         0f:1d:ad:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:13:16 2025 by rpki-client