Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb4dcc77-c1c7-3660-a39c-7e4742103c94.roa
File:                     fb4dcc77-c1c7-3660-a39c-7e4742103c94.roa (raw, json)
Hash identifier:          JW+GppFBVBSFSeOY5B9OZW/Snm70avBqxb1ZDZvQl4o=
Subject key identifier:   88:E0:A5:B0:78:6F:25:EF:7D:EE:B5:45:85:06:9A:B5:CF:F4:6D:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8D3886FA34B966E47E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb4dcc77-c1c7-3660-a39c-7e4742103c94.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396572
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8d:38:86:fa:34:b9:66:e4:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=a11ac017-2811-4fb0-af52-892b2189b244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:79:c7:31:c5:f0:c2:5e:64:8f:2e:bc:10:
                    f9:55:b0:7e:4a:17:3b:8b:6b:6c:d4:97:74:43:f7:
                    ea:40:d0:b7:a0:a8:5c:e6:2d:18:64:f5:36:87:7e:
                    74:03:e3:b3:7a:97:a6:a0:58:4c:5a:5a:cc:92:91:
                    34:f0:fc:61:a2:a7:b1:e4:27:4f:df:8a:34:4f:f5:
                    07:c1:17:b6:c5:a0:1a:e5:84:69:d1:98:48:37:d1:
                    20:02:7d:e7:97:45:7f:1b:83:24:d0:1d:a4:bc:07:
                    dc:3b:c8:95:49:82:25:68:a4:2d:1a:dc:df:09:23:
                    00:c8:85:03:0b:c6:c2:96:9e:80:6f:b1:1b:a3:b8:
                    99:d0:49:e5:27:f6:86:48:15:e1:1c:5c:f1:9d:ac:
                    6e:2a:df:ba:c6:92:de:5e:75:43:ad:f8:f9:e8:af:
                    14:df:70:be:a9:35:92:df:03:be:c7:72:63:d7:bc:
                    25:18:96:1d:b7:31:b5:3e:e9:57:a8:e4:66:23:fb:
                    27:f4:22:e9:97:2d:14:5a:19:e8:b7:1e:4b:ba:43:
                    cc:b7:18:05:7f:65:69:0d:7d:fb:08:f7:8c:ab:60:
                    b4:9c:a6:99:8b:9d:b8:61:d7:4e:af:6f:1f:89:ce:
                    08:c4:27:10:ce:2f:df:ba:0c:2a:3d:3a:31:25:07:
                    cb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E0:A5:B0:78:6F:25:EF:7D:EE:B5:45:85:06:9A:B5:CF:F4:6D:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb4dcc77-c1c7-3660-a39c-7e4742103c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c9:bd:78:4d:6b:49:44:ff:fb:6e:a4:b1:fd:d4:08:00:a8:
         59:25:96:61:a1:1e:4d:30:2c:98:a3:69:a6:51:4c:77:79:75:
         86:e4:f5:f5:01:7f:70:f7:55:1a:ff:b1:48:b7:56:f3:33:d7:
         87:d9:c3:cc:ea:43:54:ed:e3:7c:6e:ac:48:46:59:d1:82:66:
         87:4d:54:51:a0:ba:69:39:9f:6e:9e:32:62:2f:30:c8:8c:51:
         33:0d:de:20:fa:47:f3:f9:f7:3d:30:30:c1:59:85:8c:e2:a5:
         71:d4:b4:9a:84:35:d4:0a:67:bf:cb:41:da:4a:ff:bf:ff:b6:
         93:79:2d:fb:bf:3b:0d:df:a7:85:18:06:d0:39:7c:c7:27:a5:
         ee:51:b1:01:f7:82:50:ec:f2:3b:d4:cf:3f:51:ef:30:d2:0b:
         24:6b:8e:26:fe:49:65:24:b6:25:c8:93:9a:2e:93:7e:00:b7:
         d3:a3:9a:69:83:df:fb:3a:f4:2f:7a:ba:88:cf:37:f1:c6:25:
         43:da:d2:2c:ec:cc:33:87:fb:1e:73:85:a4:03:7d:94:16:a6:
         5a:3f:94:35:e7:b3:bb:1b:e4:81:2a:a9:9d:18:20:69:e8:81:
         69:15:c2:29:5a:2c:3e:80:a6:39:02:47:1d:30:b9:22:a1:1c:
         bc:96:a2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:37:29 2025 by rpki-client