Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f52ddab5-9066-3f75-9717-363d3686d66d.roa
File:                     f52ddab5-9066-3f75-9717-363d3686d66d.roa (raw, json)
Hash identifier:          InzoprHSJli+CBQQwubP0hZbtaJrm1oVXC4pTNvl8DA=
Subject key identifier:   45:C9:71:F2:B8:BD:53:38:98:F7:3D:64:C0:C2:0E:2E:85:71:0B:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8F3B7F58F2813349D8AE2290
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f52ddab5-9066-3f75-9717-363d3686d66d.roa
Signing time:             Fri 18 Jul 2025 13:01:05 +0000
ROA not before:           Fri 18 Jul 2025 13:01:05 +0000
ROA not after:            Thu 16 Oct 2025 13:01:05 +0000
asID:                     396588
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8f:3b:7f:58:f2:81:33:49:d8:ae:22:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 13:01:05 2025 GMT
            Not After : Oct 16 13:01:05 2025 GMT
        Subject: CN=d013ba61-a253-4c19-a66d-08a280a48770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:07:33:32:39:c1:af:c6:f6:d7:0e:9d:6a:cf:
                    c2:14:4b:dc:3e:16:20:8c:4b:7c:c8:2d:2e:73:47:
                    f7:d3:94:4d:15:ba:2b:e5:af:ba:75:a0:cd:40:1b:
                    5a:ef:b0:61:b4:28:ed:bb:a7:7e:35:3d:3b:b7:33:
                    08:1e:b4:62:c0:5b:4b:1d:b4:b4:d7:c8:b7:ed:b4:
                    1e:e8:ab:a2:57:f9:e5:2c:2f:48:6d:58:6b:ad:d6:
                    5d:1a:ee:83:e1:3e:55:1c:ef:57:34:70:7c:ea:a1:
                    fc:08:9c:76:86:bb:ed:4c:46:fd:10:9c:53:2e:01:
                    f6:46:bd:2a:63:66:d0:82:0b:b6:59:56:ae:8c:d1:
                    06:9a:97:d1:18:7c:62:d3:06:fe:1f:42:9a:b4:51:
                    d7:26:01:67:8f:4c:ed:30:ea:4d:8f:c3:71:bf:14:
                    b8:2a:e2:86:1b:5a:3a:f5:2a:61:80:b8:d5:3f:68:
                    7a:0b:f2:fe:7f:22:fb:fa:d7:a6:79:54:1e:aa:2c:
                    2f:b2:52:ab:dd:9b:71:3a:d3:40:b6:ac:15:5f:7d:
                    46:d7:7b:cc:ee:bc:1c:bc:73:02:97:d8:3c:09:fa:
                    20:10:64:a6:7d:8a:46:b7:c1:78:73:88:82:a1:77:
                    05:cc:fc:10:f0:91:d8:0e:84:48:fc:5d:5f:89:97:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C9:71:F2:B8:BD:53:38:98:F7:3D:64:C0:C2:0E:2E:85:71:0B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f52ddab5-9066-3f75-9717-363d3686d66d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6f:dc:6c:e5:5f:d0:5f:be:7e:94:67:d3:29:fd:37:0f:ea:
         e0:f4:44:f0:8c:39:af:05:9c:ae:c5:44:83:6c:39:3d:06:7b:
         ab:bb:f6:9f:31:04:c3:cf:0d:12:0f:40:da:9a:33:f8:cc:36:
         2d:06:ac:3b:83:1d:ab:a8:d2:79:ad:d1:26:05:84:d7:c2:92:
         68:ef:df:be:3b:32:fb:a6:b2:b3:78:60:5e:0a:cd:ad:83:f8:
         aa:1a:9c:2b:7e:16:64:98:90:88:14:3e:ee:45:7d:42:59:96:
         2e:c6:99:46:a5:2a:79:f3:d4:ea:73:cb:79:f9:f0:e9:af:4d:
         c7:46:87:b0:76:88:53:f2:6f:da:27:c6:7c:7a:d9:c6:8b:9b:
         12:57:b2:4d:9f:cb:78:ba:1b:c7:69:c9:c8:aa:31:5d:3c:de:
         bd:0b:90:b3:04:15:50:d4:d5:6a:36:2a:c0:f8:78:7f:95:ee:
         48:8d:c4:81:c3:c7:72:22:fa:db:3c:97:43:cf:18:7c:62:ca:
         af:79:38:6f:ee:77:f1:cb:12:c2:14:d6:dd:ba:0b:95:03:e2:
         a8:28:a2:57:b9:b4:c3:26:ee:8e:92:ae:69:39:36:6c:6d:5b:
         31:4e:ac:18:11:8d:a5:83:7d:96:3c:35:fd:ea:15:8e:26:86:
         6e:13:d2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:50:20 2025 by rpki-client