Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6951c975-218f-321a-86a7-34389e4dcbd9.roa
File:                     6951c975-218f-321a-86a7-34389e4dcbd9.roa (raw, json)
Hash identifier:          ctGKqKjEKao5Pzu1NUv85VwM2Lf69ZiR9lI8KwFagLU=
Subject key identifier:   6B:F5:E7:CB:18:BA:36:78:26:4F:7D:6F:EB:9E:7B:02:99:CF:F1:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D07AD15C5F0CE8DC2896CDF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6951c975-218f-321a-86a7-34389e4dcbd9.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     396549
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:15:c5:f0:ce:8d:c2:89:6c:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=ce74b3bd-c007-418d-b5be-4198e160259f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:5b:44:bb:fb:11:4b:80:67:ae:fb:b7:9e:
                    f9:a8:ae:e6:95:42:80:34:9f:a9:70:2a:be:20:4d:
                    91:cd:97:4a:14:f4:10:39:38:51:8b:29:95:e6:63:
                    3f:a7:78:22:f4:e7:ad:12:f6:17:a9:ab:6b:50:c0:
                    c5:0d:7e:66:6d:1b:e5:14:5a:a1:a6:cf:f3:8c:81:
                    c1:73:84:bc:3b:1e:dc:b1:7c:bd:64:5b:10:a3:b1:
                    f0:73:02:70:fe:31:b1:85:5f:89:df:59:2a:d5:27:
                    58:f0:fb:7d:07:70:33:10:10:3b:36:ce:22:f2:fc:
                    41:d2:ef:30:98:e2:e4:18:1c:8b:93:ab:dd:c7:7a:
                    bd:72:f0:f2:77:ac:e4:78:bb:09:6d:cc:d3:eb:42:
                    18:7d:5c:2d:24:cf:2e:11:4e:fa:8a:41:55:52:c5:
                    ce:f9:6e:30:60:9e:77:1d:8e:ff:0a:7d:dd:5d:56:
                    41:78:17:dc:e8:42:1d:38:3d:ab:2e:16:b0:af:a8:
                    44:09:a8:47:20:3a:ac:1e:b7:d7:a4:89:37:52:50:
                    63:6f:19:74:fd:cf:04:f6:2f:cd:09:0a:56:60:c7:
                    7f:50:17:57:e1:76:78:09:0f:84:a2:e0:de:a4:54:
                    64:ec:cc:8e:7c:de:13:bf:74:20:cc:6c:6c:8e:94:
                    3c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F5:E7:CB:18:BA:36:78:26:4F:7D:6F:EB:9E:7B:02:99:CF:F1:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6951c975-218f-321a-86a7-34389e4dcbd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ab:28:8f:f5:91:21:fc:46:e6:1b:6a:f9:fa:50:06:f6:7f:
         c7:32:43:19:77:1e:b7:8e:2a:0e:8e:9c:3a:7e:7d:27:19:cb:
         ed:7d:a8:b4:6f:17:a2:45:df:1d:89:fe:b6:e1:c1:12:5e:24:
         0a:8b:e8:29:6b:47:42:04:76:fb:f7:c0:86:ee:50:f9:a1:15:
         ce:0a:06:8b:b1:11:39:2e:2b:dd:21:cf:f3:22:c3:5a:d8:2b:
         9b:c1:a1:16:59:e2:90:1a:cf:d7:63:19:83:d8:c8:ef:fe:fe:
         38:b1:cd:43:fd:83:dd:19:38:d2:53:ad:4c:46:c0:9b:f8:48:
         d6:c1:e4:e6:7b:f1:0f:dd:6a:4b:1f:24:be:c7:5d:44:e1:bf:
         ef:95:5f:a9:43:4a:68:a0:b4:15:91:9b:6a:13:5d:78:8f:8b:
         f0:4a:60:25:fd:98:cf:3c:5e:51:e0:71:fd:95:a7:c4:3d:2b:
         11:32:a8:cd:67:f7:34:24:0f:77:9b:65:92:d8:32:89:59:f4:
         4b:dd:51:b7:d4:31:b2:0e:f6:22:90:14:0e:78:be:1a:c1:0b:
         56:f9:1b:f6:e8:62:d7:67:01:6e:66:d0:76:0c:8f:a5:1e:b2:
         77:0b:4d:4b:85:f4:92:11:1a:85:df:71:e0:43:8e:e4:44:34:
         b8:bc:59:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:13 2026 by rpki-client