Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c719077e-3d2d-3f0f-92be-6ef7b5f800a2.roa
File:                     c719077e-3d2d-3f0f-92be-6ef7b5f800a2.roa (raw, json)
Hash identifier:          Qt403aPSXhOFyP0ZbFUgKz3ioE8KnX7XlirwlYGSvNg=
Subject key identifier:   91:B9:0A:CD:02:30:EB:15:3C:C5:D5:AE:B6:3A:0A:08:41:D1:9F:06
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA791D89A5FBDDA83975C1080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c719077e-3d2d-3f0f-92be-6ef7b5f800a2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397199
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:d8:9a:5f:bd:da:83:97:5c:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9ea26c8d-4008-40de-864d-7032b078d81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:ab:66:34:15:af:65:62:e5:7b:51:20:3f:
                    9e:a9:4d:35:df:08:b4:73:7f:39:e2:cd:f5:9c:e3:
                    d0:26:f3:87:c4:b3:69:f1:0e:9f:79:99:1d:ad:05:
                    dd:13:f6:ff:7d:96:13:2e:8f:93:83:70:1a:a6:d2:
                    18:ef:4d:ef:6a:8d:ac:32:4f:3d:12:97:d9:53:1e:
                    91:1d:a0:cd:d9:ca:47:7c:7a:27:33:3e:cb:4a:8c:
                    33:c9:8a:9c:99:78:ed:26:f2:c7:3a:4d:a9:6d:13:
                    94:ce:88:ed:7f:ec:bf:75:e8:d6:4b:58:01:b9:5d:
                    84:d1:bd:ee:9b:09:20:94:7a:14:c1:1f:e3:09:7d:
                    3f:7d:02:c5:98:b7:15:4e:8a:73:ef:a6:93:0d:9d:
                    39:32:d2:14:bc:9d:02:f0:10:15:02:11:f2:0c:a2:
                    21:ad:81:96:d9:27:5d:60:c7:be:e9:a7:cf:8f:19:
                    99:47:ce:da:a8:f6:34:9d:b4:6f:6e:43:7c:84:11:
                    ab:2d:28:36:42:d2:62:59:f6:dd:9c:39:ff:66:b3:
                    9a:d0:a4:8c:e3:42:0a:12:ee:f8:b0:ba:82:82:0b:
                    dd:d2:ef:ba:c9:a5:dd:b8:b6:41:4d:e6:24:83:01:
                    8e:6d:05:cb:74:02:8d:33:cb:9e:85:af:4e:6f:e3:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B9:0A:CD:02:30:EB:15:3C:C5:D5:AE:B6:3A:0A:08:41:D1:9F:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c719077e-3d2d-3f0f-92be-6ef7b5f800a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:59:e0:91:44:4d:2d:81:e4:c2:a3:41:4e:28:aa:33:53:42:
         f9:35:68:72:96:08:d4:31:3f:1b:48:ea:01:21:83:59:eb:26:
         4f:da:c8:a5:ae:d5:ae:fd:11:49:f0:ac:c0:00:b1:35:68:2d:
         b0:ef:65:13:d0:ee:61:6e:6d:6d:de:a8:22:be:23:0a:44:99:
         5a:7d:90:bc:ab:3c:df:d3:74:ac:90:41:2a:b3:38:cd:2c:cb:
         18:98:72:c5:c2:f0:42:3b:71:71:f5:66:f0:d9:86:a2:41:21:
         71:4c:56:e0:a8:a8:59:56:73:14:f6:f5:60:a8:6f:b7:a7:54:
         b9:2b:8c:a0:4d:71:d2:de:77:15:30:8d:f4:62:49:75:62:c8:
         5d:06:54:64:bc:52:35:a5:f1:79:c1:61:9d:e9:eb:ab:ea:24:
         63:4f:d6:bf:aa:fa:bf:f7:32:c7:86:b0:0e:b1:c4:16:5e:b9:
         b7:21:46:e7:9d:3b:4d:2b:fb:ce:c2:fd:ab:e5:d9:ab:c5:95:
         27:86:60:0b:c0:d9:b2:b2:2b:ef:82:29:f3:81:e4:4a:5e:c5:
         55:28:c6:5d:45:8f:67:aa:a3:1c:82:4f:5b:19:0d:60:cb:36:
         85:c6:b7:31:ef:f2:9a:01:0f:27:43:1f:7c:53:8d:bb:a2:bf:
         ab:84:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:31:12 2026 by rpki-client