Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/192d6f3e-49fb-3200-81c1-507ad761ee89.roa
File:                     192d6f3e-49fb-3200-81c1-507ad761ee89.roa (raw, json)
Hash identifier:          dKrmme4BgRqQ1Ct9Wq1GdfZJFMcUQLoD1U7Bof1xlvo=
Subject key identifier:   76:FF:92:AC:7F:AC:F1:2C:CD:14:8B:A4:59:84:0C:39:8F:99:A2:2F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C2487E626F78EC2F296D
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/192d6f3e-49fb-3200-81c1-507ad761ee89.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     36629
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c2:48:7e:62:6f:78:ec:2f:29:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=31d4f9f6-c76a-4e9e-b09f-719cb721cd17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0f:6f:3c:ca:ab:5a:bc:c3:0b:61:a2:91:8a:
                    f8:3d:97:8c:e9:d9:95:93:d7:8f:ca:79:1c:15:d1:
                    44:41:cc:87:f0:84:10:96:b7:4c:bb:35:bc:d3:4f:
                    9e:f1:a0:16:22:d4:2e:12:7d:bd:c8:8a:58:76:e2:
                    4f:1e:a4:34:39:94:63:0f:78:01:60:ef:e8:19:a1:
                    d5:c2:3d:cf:69:d2:cd:65:d0:d1:82:14:7f:d2:1c:
                    e8:fa:da:6e:de:e6:a2:50:39:b8:c0:6d:90:1d:79:
                    64:43:e7:21:8d:17:15:bd:b7:b2:7b:f7:f6:25:f5:
                    bc:07:7f:f9:7e:a0:38:96:c3:f5:61:a3:12:3e:0e:
                    a7:e6:7d:67:05:5e:f0:2b:da:4e:87:4b:c6:a6:2c:
                    54:e8:57:8b:84:77:65:16:b7:52:8e:a4:11:92:c1:
                    8b:cc:fb:62:c5:b7:a7:4f:4b:14:4d:71:71:48:d0:
                    1f:34:cc:fa:81:c6:f9:8c:a6:b3:e0:53:ea:17:13:
                    ef:ae:69:15:8c:9e:4a:29:e7:77:41:70:4e:2d:99:
                    66:d8:2e:cd:0a:43:1c:19:3f:c8:24:d5:77:cd:ff:
                    b8:8c:53:ab:5e:65:8b:c8:72:59:ba:a0:22:1e:14:
                    0e:03:6b:87:d8:c2:5d:28:46:40:3a:91:0e:f1:1f:
                    e9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FF:92:AC:7F:AC:F1:2C:CD:14:8B:A4:59:84:0C:39:8F:99:A2:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/192d6f3e-49fb-3200-81c1-507ad761ee89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:74:f0:d8:05:f3:31:45:a6:67:9e:0d:65:04:60:1d:0b:52:
         19:c7:aa:52:41:df:12:da:a0:a5:e5:c1:04:89:f5:80:fc:55:
         42:37:af:4a:ba:ee:16:e3:fa:ef:8e:94:dd:d3:57:88:09:1e:
         ed:24:22:50:a7:57:7b:54:a5:ad:0e:7b:03:e2:22:66:c4:8c:
         6e:9e:d7:e8:88:c3:ee:ea:33:d7:db:9a:5a:2c:51:e8:26:a2:
         7a:95:18:85:0d:c2:a8:15:ef:1c:dc:93:40:60:b8:9f:a7:88:
         ec:38:25:07:50:87:9f:86:c8:dd:6c:66:de:31:ff:63:a4:8b:
         eb:30:c9:6b:52:85:6a:74:2a:e0:52:fb:8b:5e:18:e5:34:f3:
         eb:59:1a:fd:56:30:37:df:f9:a0:a8:df:0b:98:05:3b:83:56:
         7a:a1:d2:91:fa:af:a8:07:58:0d:be:79:0a:12:cd:17:74:b9:
         1e:0a:f8:87:43:e8:19:da:4c:23:a1:8c:2d:71:2c:8d:0d:68:
         91:b2:b2:60:a8:af:0d:12:75:1f:96:42:25:51:2f:e5:3b:c8:
         56:bf:fc:f7:e7:9e:59:83:b9:72:06:9d:94:e7:5a:d9:38:c8:
         82:f7:91:4f:51:f6:e1:d6:c2:a7:a4:26:55:e1:d6:ef:2e:a1:
         c8:7a:61:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:06 2025 by rpki-client