Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16383821-492d-3eaf-9614-2068d89aec24.roa
File:                     16383821-492d-3eaf-9614-2068d89aec24.roa (raw, json)
Hash identifier:          hVsQuLS3AwofXh7/DFZZGoCpfB1M8F9HMZYPUWU+NvE=
Subject key identifier:   02:09:0C:79:C8:3E:AD:BF:12:16:76:07:28:8F:D9:7B:B1:85:83:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C285368C5A3FD99B3240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16383821-492d-3eaf-9614-2068d89aec24.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396553
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c2:85:36:8c:5a:3f:d9:9b:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=4c7c507b-f6bf-4d65-bf30-5e2d507a6887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:b3:5a:be:6f:4e:39:22:c7:90:a2:9f:cd:
                    9c:ef:7c:32:36:87:a4:3a:59:25:24:55:8c:2b:f0:
                    d6:e8:32:82:a0:c8:87:65:50:b3:2e:91:76:31:c0:
                    74:20:55:53:de:75:e8:e1:24:de:1d:34:79:fb:b5:
                    07:cc:80:94:a7:e8:84:d7:90:ce:a2:97:54:24:fc:
                    cd:80:82:72:e8:73:46:53:6b:b6:bf:eb:19:3a:d3:
                    9d:da:2d:72:09:e8:ad:10:df:21:3e:a3:09:4a:72:
                    c2:e2:ca:c2:b0:82:9a:8d:e2:6a:6c:47:74:4a:4a:
                    05:d0:52:8b:57:51:52:19:96:aa:77:83:4b:aa:b9:
                    5c:ea:ba:fd:95:2b:c2:dd:d0:ed:c1:da:2c:b4:7e:
                    dc:4b:31:72:ed:20:f0:bd:00:ac:7c:58:a7:12:b0:
                    5c:54:37:cc:df:ff:27:5f:f8:51:8c:c7:f8:cb:3d:
                    84:fa:5b:c3:ef:61:02:07:ed:b1:9f:f5:d9:1a:b0:
                    a4:32:47:83:db:68:ad:ae:e9:48:b6:c2:f4:55:47:
                    3c:a4:dd:86:8b:85:32:57:da:04:88:64:2d:22:ec:
                    17:a3:25:6d:0e:9c:2f:5a:7a:5f:e4:7b:a9:fe:4c:
                    99:d5:65:bf:00:15:25:eb:84:9f:b2:54:04:51:3c:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:09:0C:79:C8:3E:AD:BF:12:16:76:07:28:8F:D9:7B:B1:85:83:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16383821-492d-3eaf-9614-2068d89aec24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:dd:2c:4e:43:05:10:12:5e:b0:c4:4d:b9:c7:1a:fe:cd:f3:
         a5:d8:3d:63:13:97:cc:ab:53:52:4d:0a:a7:b2:08:2d:15:fe:
         27:65:76:00:eb:06:d6:16:5c:6a:3b:88:96:93:7e:90:5b:fc:
         98:65:88:9d:bf:aa:dd:cb:8d:13:21:fc:24:bc:c6:85:3c:d5:
         20:65:dc:36:5e:f8:46:e9:26:5a:46:d1:39:3e:b8:fc:b6:75:
         60:8c:e0:af:06:a6:d3:ad:02:e8:1e:7e:6c:8b:f4:16:67:8a:
         ae:7a:3a:4b:ba:11:5c:0b:91:ff:7c:2a:29:1c:16:9b:c3:c2:
         ef:20:e0:c8:da:2a:8c:fa:c7:a2:e5:da:18:47:b7:62:1d:32:
         86:23:a7:a9:82:3b:03:92:e6:2e:b7:32:41:07:78:f8:6a:84:
         e3:c8:86:63:8e:cb:2b:8a:69:da:24:da:60:23:54:76:44:1e:
         89:eb:4f:18:ad:71:a0:ec:ec:c0:d8:ed:ce:8f:f5:e9:94:46:
         95:a1:df:ce:a0:da:77:17:98:8f:e7:24:5c:d1:e4:af:ea:c7:
         61:4c:61:f0:85:49:75:3b:a0:ab:8d:75:01:3c:44:8e:91:2e:
         89:e1:32:f3:83:9d:c2:09:f6:a1:ff:c9:7f:7a:e3:b4:8d:38:
         15:2b:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:51:34 2025 by rpki-client