Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/020d640e-c2ce-3470-913a-172ec1cdce20.roa
File:                     020d640e-c2ce-3470-913a-172ec1cdce20.roa (raw, json)
Hash identifier:          VfgqAtPBBDQg6v+1zbt73YBzmLaC5WyS6ytBHTBiKd4=
Subject key identifier:   6B:F9:D2:6A:C0:58:B1:55:24:AC:64:7D:D0:93:E0:98:CD:28:75:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C619646CC22DE0D54800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/020d640e-c2ce-3470-913a-172ec1cdce20.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     397210
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c6:19:64:6c:c2:2d:e0:d5:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=dd465b4b-b62c-439f-831c-e0ce5d9abeb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:21:65:ec:f5:a2:de:33:bc:19:a3:ab:9b:
                    9a:1f:58:3e:92:2f:6f:e2:39:82:c3:a7:23:2f:b1:
                    c6:b6:23:55:93:d5:4f:6d:df:4f:fb:13:d6:08:2c:
                    25:87:9f:9b:df:2e:ec:21:84:cb:28:07:40:ac:04:
                    b9:30:ff:1f:17:73:0f:83:70:ac:20:e8:8e:0c:e3:
                    91:bc:7c:84:24:d7:51:80:91:4a:42:86:30:aa:a1:
                    77:f6:2b:47:31:24:3a:0a:ae:bb:60:b0:7d:10:49:
                    ed:4b:71:d6:f4:f3:11:a4:75:2f:f7:2e:af:7c:5a:
                    b1:e5:f1:b1:da:27:42:92:20:ae:d8:3d:b9:9f:ab:
                    ea:27:b9:b9:7b:1c:a1:5c:94:00:24:53:3d:bc:49:
                    75:18:02:7b:2d:cb:bc:aa:b5:b2:65:91:12:bc:c2:
                    b9:23:46:df:af:fb:86:a4:bd:5d:f9:f6:b2:47:3b:
                    52:09:aa:92:2c:19:fb:5a:b2:11:4e:a9:ca:16:ec:
                    30:aa:07:e6:87:d7:9a:8b:32:f8:27:9c:ca:b3:ee:
                    97:82:07:d9:ed:f9:ab:df:9a:83:78:cb:50:9e:d7:
                    54:10:25:78:f8:53:e3:f4:37:04:0f:99:9e:ab:a3:
                    83:64:56:18:0e:77:ac:22:1c:91:b3:b5:46:ff:55:
                    e3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F9:D2:6A:C0:58:B1:55:24:AC:64:7D:D0:93:E0:98:CD:28:75:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/020d640e-c2ce-3470-913a-172ec1cdce20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b1:f4:0f:dc:2e:7e:a6:0b:d9:44:49:44:b3:d0:b2:ce:05:
         11:2f:a5:27:64:6b:34:1c:68:bd:b4:33:d7:91:44:fa:3c:f2:
         f7:a3:02:3c:fe:49:ad:79:75:82:bb:bc:35:f4:f5:38:89:45:
         33:de:c3:cd:78:64:b2:9c:08:dd:92:f6:af:ba:42:d3:33:93:
         6a:06:93:d9:d6:40:2f:e8:b3:11:f7:e6:91:38:d1:a2:46:67:
         95:b5:92:c6:b7:a1:ad:c1:c2:bc:9a:a2:72:b7:36:8b:98:3f:
         da:af:db:65:72:84:83:47:ea:64:2f:e4:0d:89:5c:d6:1c:b8:
         a0:0e:f1:db:01:cb:91:34:b0:dd:33:ce:60:30:e6:6d:42:f0:
         30:b2:13:cf:9d:50:b7:8c:6b:af:ef:e0:14:bd:63:f5:bd:81:
         d0:f2:e7:c7:fb:82:e1:6f:f9:c3:75:5e:98:ec:47:77:25:65:
         6b:73:c8:99:da:2c:f6:34:0e:7c:25:93:85:52:71:64:6d:d5:
         70:3c:a4:4a:7a:ac:97:5f:21:b1:4e:42:15:1c:15:d9:99:b5:
         77:7d:89:de:88:d5:5b:4c:f9:8f:00:79:ee:e9:b7:91:75:a7:
         9d:db:5f:20:e4:4b:6c:65:b4:6b:84:93:30:89:5f:3b:8d:4d:
         c4:50:db:0b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacYZZGzCLeDVSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZGQ0NjViNGItYjYyYy00MzlmLTgzMWMtZTBjZTVkOWFiZWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwohZez1ot4zvBmjq5uaH1g+ki9v4jmCw6cj
L7HGtiNVk9VPbd9P+xPWCCwlh5+b3y7sIYTLKAdArAS5MP8fF3MPg3CsIOiODOOR
vHyEJNdRgJFKQoYwqqF39itHMSQ6Cq67YLB9EEntS3HW9PMRpHUv9y6vfFqx5fGx
2idCkiCu2D25n6vqJ7m5exyhXJQAJFM9vEl1GAJ7Lcu8qrWyZZESvMK5I0bfr/uG
pL1d+fayRztSCaqSLBn7WrIRTqnKFuwwqgfmh9eaizL4J5zKs+6XggfZ7fmr35qD
eMtQntdUECV4+FPj9DcED5meq6ODZFYYDnesIhyRs7VG/1XjKQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGv50mrAWLFVJKxkfdCT4JjNKHVGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDIwZDY0MGUtYzJjZS0z
NDcwLTkxM2EtMTcyZWMxY2RjZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB4sfQP3C5+pgvZRElEs9CyzgURL6UnZGs0HGi9tDPXkUT6PPL3owI8
/kmteXWCu7w19PU4iUUz3sPNeGSynAjdkvavukLTM5NqBpPZ1kAv6LMR9+aRONGi
RmeVtZLGt6GtwcK8mqJytzaLmD/ar9tlcoSDR+pkL+QNiVzWHLigDvHbAcuRNLDd
M85gMOZtQvAwshPPnVC3jGuv7+AUvWP1vYHQ8ufH+4Lhb/nDdV6Y7Ed3JWVrc8iZ
2iz2NA58JZOFUnFkbdVwPKRKeqyXXyGxTkIVHBXZmbV3fYneiNVbTPmPAHnu6beR
daed218g5EtsZbRrhJMwiV87jU3EUNsL
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:10:59 2025 by rpki-client