Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cce30016-7a7b-3725-909c-c81fce4c90e6.roa
File:                     cce30016-7a7b-3725-909c-c81fce4c90e6.roa (raw, json)
Hash identifier:          B0D5/KSdGo6BrgLw+krsaoxHR5eA1EyZIAf7OXkDqdE=
Subject key identifier:   D1:6A:FD:7C:EB:4F:1A:2E:0F:0A:A0:92:28:99:55:73:34:65:9A:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8F3B80B61577E61EDB8AFFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cce30016-7a7b-3725-909c-c81fce4c90e6.roa
Signing time:             Fri 18 Jul 2025 13:01:05 +0000
ROA not before:           Fri 18 Jul 2025 13:01:05 +0000
ROA not after:            Thu 16 Oct 2025 13:01:05 +0000
asID:                     396827
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8f:3b:80:b6:15:77:e6:1e:db:8a:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 13:01:05 2025 GMT
            Not After : Oct 16 13:01:05 2025 GMT
        Subject: CN=e107b67b-d7cf-4335-aed0-22bc49a9ee57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:e9:c4:46:f6:73:01:f7:02:b6:ec:34:ee:
                    8d:ad:49:8e:53:85:12:68:9f:15:06:f7:9a:d0:a1:
                    5c:11:e4:fb:52:e2:43:c3:74:7c:6c:21:d0:02:41:
                    67:4f:17:59:3e:36:1f:7e:7e:cf:a5:4b:d3:19:fe:
                    51:2d:b4:f9:a7:21:b6:5d:54:e0:62:2c:d6:1b:df:
                    51:38:8e:df:da:44:b5:e5:56:cd:47:b0:20:a5:a1:
                    cc:2c:a8:5e:3c:38:5b:aa:19:be:c3:7c:ea:83:f8:
                    7f:aa:e5:d2:51:30:cb:92:ae:53:07:c7:d9:9b:bf:
                    b1:c3:8e:c0:76:33:f3:15:db:d7:ed:e1:6d:b1:c8:
                    57:c0:3b:d0:48:da:d5:81:57:18:28:f1:e5:05:0c:
                    39:a3:6b:77:90:42:88:91:33:ee:d2:53:5b:66:ee:
                    94:bc:8a:b8:7a:86:44:eb:9e:59:d1:a0:a1:bf:92:
                    b4:e3:ab:11:6c:5f:71:f4:37:43:e7:90:4a:3a:32:
                    b8:1a:28:9f:aa:b2:c2:a0:f5:0f:66:27:30:75:d3:
                    d3:3a:22:ef:b0:69:e9:b3:1a:e8:30:39:15:c3:4f:
                    27:ff:dd:27:46:16:cc:b8:4c:5a:9d:da:00:a5:a2:
                    d7:2d:3a:93:a2:76:71:29:c2:e4:5d:3b:bf:9b:22:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6A:FD:7C:EB:4F:1A:2E:0F:0A:A0:92:28:99:55:73:34:65:9A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cce30016-7a7b-3725-909c-c81fce4c90e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:d2:3d:f6:49:0a:68:cb:16:a1:4b:75:8d:fe:c5:65:d9:55:
         d7:11:8b:d9:68:35:73:dd:e6:bd:12:98:2f:65:40:a0:54:31:
         01:cc:30:63:b9:51:a0:de:e4:c5:d5:4a:f4:e8:86:e8:f5:88:
         86:eb:cf:c8:40:e8:d1:b2:2d:e1:ff:c8:e6:b2:4d:2a:d2:72:
         fa:97:7f:84:3f:08:c6:c4:02:cf:2c:57:ea:aa:7d:e8:9e:ea:
         de:11:6c:0e:ca:1d:20:c9:9a:6c:21:cc:d8:d8:d1:92:ea:98:
         07:f4:8a:ef:a1:62:ca:98:af:b8:0e:73:d9:5d:a0:20:df:45:
         5c:21:98:7e:f7:73:5e:37:c9:e8:a4:7c:47:a0:1c:6d:ae:c0:
         09:e9:b1:8c:a1:82:25:33:a0:ae:47:68:c7:63:56:54:7b:3b:
         86:f3:03:c5:ed:0b:ba:41:97:02:78:a1:9f:32:c9:fc:7f:cc:
         10:64:6c:62:48:99:59:2d:42:47:2a:1d:cf:c4:7f:64:51:42:
         7e:06:32:b8:be:ea:fd:30:ec:86:65:d3:e2:b1:7a:64:46:55:
         d3:68:00:53:13:41:3f:5c:3b:7b:02:25:df:13:d4:14:af:89:
         d9:07:d4:24:06:d6:7a:ee:4f:96:2a:d1:32:29:07:b1:84:15:
         c6:2d:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:03:35 2025 by rpki-client