Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05f9cab7-ed3c-315f-92ab-366594526730.roa
File:                     05f9cab7-ed3c-315f-92ab-366594526730.roa (raw, json)
Hash identifier:          fQqo4XB+F8dsHbnEeERtFTMt0pzRcwbT1Pb3zOFiVFg=
Subject key identifier:   A2:5E:9A:E2:55:3B:6B:39:D7:94:A7:2D:8D:1D:1F:C0:52:71:AE:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769CA07829D9F10222335E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05f9cab7-ed3c-315f-92ab-366594526730.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396591
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:ca:07:82:9d:9f:10:22:23:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=159fdd24-a994-4b16-9a93-d10b8ac58397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ca:e3:55:c9:53:f6:3b:f7:35:d9:f7:b6:02:
                    fe:57:43:ac:34:d8:c4:8c:c2:3b:ac:7c:98:93:34:
                    a3:e5:40:e0:d3:46:7c:82:43:3b:a5:da:f0:2b:c2:
                    96:44:72:5d:e6:06:32:de:9b:8c:0b:53:75:27:fc:
                    34:57:3d:20:55:aa:3d:f8:31:a9:76:9a:f9:aa:8a:
                    be:f7:aa:c2:24:7f:aa:cd:18:c3:c4:42:af:18:95:
                    63:6c:b6:69:49:8a:75:11:95:d7:b2:c8:6d:32:d1:
                    4e:ad:39:70:cb:c4:9a:56:f2:14:3c:42:b4:09:4c:
                    66:25:24:c9:3d:6a:62:5d:d5:c8:aa:c5:66:c5:8b:
                    cd:27:49:d1:82:7c:45:7f:a3:54:2e:70:bd:b2:ee:
                    c1:02:99:88:34:f7:50:53:3b:a5:1b:a9:1b:0b:e5:
                    73:6c:42:1b:90:d7:a4:4f:25:c2:89:10:79:2a:40:
                    a9:24:71:c1:38:7f:36:89:ab:25:90:03:42:40:0a:
                    73:b6:0f:ee:37:6b:af:dc:20:13:54:f8:62:f1:d0:
                    40:67:9c:57:82:82:1a:18:66:7d:1f:39:32:75:e8:
                    ef:67:f6:df:67:5c:7b:cd:de:1f:d6:bc:70:f4:69:
                    80:33:0a:9f:0a:f5:f7:08:13:27:30:7c:08:44:16:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5E:9A:E2:55:3B:6B:39:D7:94:A7:2D:8D:1D:1F:C0:52:71:AE:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05f9cab7-ed3c-315f-92ab-366594526730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ed:95:75:fb:45:c4:9d:d8:50:47:06:ad:5a:ef:6a:c4:a9:
         a5:a7:f6:78:11:20:dc:a3:ce:71:51:98:a5:ed:3c:be:38:14:
         95:4e:58:ad:bd:12:da:5a:49:e9:d3:37:da:30:9e:6d:a7:16:
         12:41:ce:02:6e:3c:60:84:1c:5f:24:8e:1b:24:09:4a:2f:1d:
         a2:2d:83:00:4f:35:32:aa:fb:8e:af:e7:de:86:6b:79:b5:49:
         cb:76:f4:d0:33:e5:8b:de:2e:07:77:a3:90:e9:c3:69:97:81:
         09:e6:b1:24:39:c4:2b:78:49:bd:48:a7:c5:8d:09:f0:5f:9f:
         71:7a:fe:db:2f:73:d9:ba:ee:ea:31:41:9e:73:55:9b:f9:c2:
         89:f1:34:50:36:d5:bf:4f:30:38:67:06:ed:62:60:a1:62:8b:
         b0:64:4c:47:23:d3:58:ff:44:58:fb:85:71:87:f5:1e:6f:ed:
         e0:db:e9:7c:ac:d1:93:f0:76:e5:47:b0:4c:71:df:6f:05:23:
         4d:fc:36:0b:af:fb:d8:02:08:25:e1:1e:ea:6f:8d:67:36:f2:
         ca:71:98:cc:17:d5:9c:4d:cf:a8:39:cb:32:b7:fb:fb:63:29:
         07:89:cf:9a:3b:13:da:0d:dc:bc:6f:a3:7a:67:30:6d:81:c7:
         32:f3:9a:f9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacoHgp2fECIjNeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
MTU5ZmRkMjQtYTk5NC00YjE2LTlhOTMtZDEwYjhhYzU4Mzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8rjVclT9jv3Ndn3tgL+V0OsNNjEjMI7rHyY
kzSj5UDg00Z8gkM7pdrwK8KWRHJd5gYy3puMC1N1J/w0Vz0gVao9+DGpdpr5qoq+
96rCJH+qzRjDxEKvGJVjbLZpSYp1EZXXsshtMtFOrTlwy8SaVvIUPEK0CUxmJSTJ
PWpiXdXIqsVmxYvNJ0nRgnxFf6NULnC9su7BApmINPdQUzulG6kbC+VzbEIbkNek
TyXCiRB5KkCpJHHBOH82iaslkANCQApztg/uN2uv3CATVPhi8dBAZ5xXgoIaGGZ9
HzkydejvZ/bfZ1x7zd4f1rxw9GmAMwqfCvX3CBMnMHwIRBbQhwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKJemuJVO2s515SnLY0dH8BSca5xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDVmOWNhYjctZWQzYy0z
MTVmLTkyYWItMzY2NTk0NTI2NzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAz7ZV1+0XEndhQRwatWu9qxKmlp/Z4ESDco85xUZil7Ty+OBSVTlit
vRLaWknp0zfaMJ5tpxYSQc4CbjxghBxfJI4bJAlKLx2iLYMATzUyqvuOr+fehmt5
tUnLdvTQM+WL3i4Hd6OQ6cNpl4EJ5rEkOcQreEm9SKfFjQnwX59xev7bL3PZuu7q
MUGec1Wb+cKJ8TRQNtW/TzA4ZwbtYmChYouwZExHI9NY/0RY+4Vxh/Ueb+3g2+l8
rNGT8HblR7BMcd9vBSNN/DYLr/vYAggl4R7qb41nNvLKcZjMF9WcTc+oOcsyt/v7
YykHic+aOxPaDdy8b6N6ZzBtgccy85r5
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:02:09 2025 by rpki-client