Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a00bf98b-f550-3973-8137-f998d6d73741.roa
File:                     a00bf98b-f550-3973-8137-f998d6d73741.roa (raw, json)
Hash identifier:          PrZJxzNd+/96UUEBSUD0gV6nyL1cQa8cQ1avih6K22U=
Subject key identifier:   E5:E4:20:90:A3:81:1A:AE:A9:B6:4F:1D:E2:2B:B8:93:61:84:7B:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8F3B841269B9E12086CFD380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a00bf98b-f550-3973-8137-f998d6d73741.roa
Signing time:             Fri 18 Jul 2025 13:01:05 +0000
ROA not before:           Fri 18 Jul 2025 13:01:05 +0000
ROA not after:            Thu 16 Oct 2025 13:01:05 +0000
asID:                     396552
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8f:3b:84:12:69:b9:e1:20:86:cf:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 13:01:05 2025 GMT
            Not After : Oct 16 13:01:05 2025 GMT
        Subject: CN=48d3ebdb-a2cd-41f8-b6cf-cc8d14514eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:98:32:bc:69:1b:77:c3:f1:92:a0:bf:10:
                    2c:15:1b:91:5b:2c:d5:c0:31:39:92:5f:da:60:69:
                    a5:1a:d9:fa:49:ba:2c:d9:92:9e:cb:c7:ba:33:ee:
                    b2:7d:14:89:8f:5b:97:7c:77:9f:5c:c7:ef:a2:0c:
                    fe:08:bb:eb:5f:d4:cf:d9:d2:82:fd:ae:45:74:17:
                    cc:43:57:af:8a:f3:35:c3:5f:e7:c8:f5:42:2c:e4:
                    da:91:dc:ed:48:1d:c3:a7:a8:d9:47:d2:7e:90:c7:
                    39:c1:00:3f:d3:d2:03:38:f8:d1:d4:a8:42:7d:b3:
                    3e:a3:fd:01:32:e1:fa:de:ce:fc:68:9b:47:a8:9e:
                    54:09:df:21:4d:ca:af:3e:9a:05:a1:d3:ac:11:6f:
                    6c:01:d0:30:01:97:a6:46:c9:7e:30:6d:e4:d7:dd:
                    e2:b7:74:43:9f:f7:4c:df:54:d9:28:e3:92:01:88:
                    d3:77:cc:c5:cc:e8:7d:f6:a5:fb:56:d3:1f:0f:01:
                    98:af:68:1f:d4:de:b7:49:cf:b0:8c:90:d4:41:1d:
                    19:cd:cd:bf:fb:75:b6:67:f8:1b:e8:49:f5:d8:17:
                    22:fe:ae:09:92:8b:61:d4:1f:86:f9:4f:d0:24:46:
                    95:3f:4c:97:87:18:ee:71:09:d8:ba:68:0c:38:2a:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E4:20:90:A3:81:1A:AE:A9:B6:4F:1D:E2:2B:B8:93:61:84:7B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a00bf98b-f550-3973-8137-f998d6d73741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:18:dc:f2:f0:cb:34:e6:df:ac:a8:47:2c:89:7d:9f:de:a1:
         d0:17:ee:11:83:18:a0:ed:52:b3:18:db:ee:4b:53:e5:57:ab:
         3b:c5:55:14:19:0c:31:25:68:d8:91:be:e0:52:81:c1:4c:37:
         9f:3e:7c:6b:aa:35:72:cb:bb:80:62:91:af:89:8b:a4:e1:f4:
         fc:dd:50:38:92:7a:58:1d:b9:f0:e7:7d:5c:6c:84:fd:d3:25:
         de:7f:9e:a0:04:dc:0c:df:59:3a:97:01:f3:c6:7e:31:19:74:
         1f:94:d8:c5:74:67:e2:27:b2:c2:5a:77:8f:c7:82:07:c8:74:
         ac:60:27:c6:9c:cf:33:b6:91:24:58:8e:f6:2b:8a:27:ae:67:
         7f:09:d4:fc:ba:12:a9:0d:a1:3f:21:8e:fe:d9:af:fa:07:93:
         6f:01:97:93:e4:06:e0:86:f7:87:3c:df:ba:04:3e:8b:19:28:
         df:34:52:f1:e6:5e:86:16:5c:42:4b:da:41:bf:bc:b7:75:18:
         09:94:83:37:b3:64:18:63:52:03:17:1e:96:46:cf:57:6f:67:
         c5:fa:e5:be:af:f8:87:0a:0d:40:b8:b8:a0:31:e2:f2:e7:16:
         61:ad:73:11:08:71:f9:90:51:cd:b4:74:4c:48:4e:a6:b7:12:
         3e:8e:f9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:54 2025 by rpki-client