Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ac04fdb-04ff-323f-ac1b-71a5909082cb.roa
File:                     1ac04fdb-04ff-323f-ac1b-71a5909082cb.roa (raw, json)
Hash identifier:          9NRlKFFg7xGhohSMCFVkMEFqxI/SuUo/L54kLqNcMd8=
Subject key identifier:   37:B1:60:DB:EE:2B:80:86:59:BD:5F:D2:59:35:16:1A:76:26:8F:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C90FC3383CE89E63C008
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ac04fdb-04ff-323f-ac1b-71a5909082cb.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396560
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c9:0f:c3:38:3c:e8:9e:63:c0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=4f62876f-b4d4-49e4-ad83-4e8886a54aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:ff:56:f3:35:3b:e0:36:2c:92:0a:a9:4f:
                    7c:ef:c0:f1:69:35:62:76:b3:cd:ae:d8:2c:49:fe:
                    a5:ee:f8:6e:6c:d6:65:81:4d:0d:5d:4e:85:46:e3:
                    31:99:c7:fc:12:69:f0:51:d1:c5:ce:30:ba:41:1b:
                    90:53:72:d4:05:8e:df:dd:e4:49:37:da:3b:f7:c6:
                    93:6b:ee:a2:dd:4f:1c:69:89:d5:1f:3e:6d:bf:b0:
                    aa:08:6b:fc:45:09:4b:be:8e:7b:16:0a:a0:49:9f:
                    ff:d9:a4:2c:dc:51:cc:ab:ae:8c:c1:30:8f:8f:08:
                    e7:89:90:af:8b:d0:ba:85:b5:62:14:b3:ff:5a:34:
                    97:40:61:a8:ce:03:56:a8:a6:7e:fb:c4:d2:e2:80:
                    aa:b4:d2:4d:a2:be:25:79:ac:0c:64:6b:f5:f5:a3:
                    ae:12:46:5e:4b:16:ba:2d:f5:a6:5a:13:23:dc:fe:
                    26:74:26:e2:11:98:2a:fb:5b:fe:f1:e6:79:ba:52:
                    9d:0e:3c:44:01:51:dd:29:14:9b:9a:b4:48:ca:c3:
                    23:99:44:07:25:c8:8a:c0:b5:7e:c7:c5:ab:84:00:
                    f3:0d:2a:dc:45:37:82:d6:bb:44:ab:2d:38:d0:00:
                    84:17:37:15:f4:81:bc:3c:c1:c2:c5:fb:cb:cd:11:
                    de:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B1:60:DB:EE:2B:80:86:59:BD:5F:D2:59:35:16:1A:76:26:8F:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ac04fdb-04ff-323f-ac1b-71a5909082cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:91:2b:48:51:34:de:48:e7:b1:e7:c8:0c:6f:f9:77:5b:67:
         69:51:c8:00:9e:b0:00:84:52:7a:47:d3:f6:87:1f:04:21:74:
         a9:07:4f:0b:40:0b:74:bc:f0:a8:d7:c5:27:0a:ce:bd:bd:80:
         da:c7:d1:0e:0d:5e:bd:5b:2e:2f:6c:67:c6:d0:48:3d:df:3f:
         d5:0c:15:34:1d:70:6a:fc:e2:b6:70:31:37:42:9d:87:19:3b:
         e6:aa:34:03:53:44:7d:59:b4:92:a8:5d:91:70:ed:6d:a5:01:
         89:66:7c:98:4a:3a:1e:e9:73:7c:f1:98:e4:38:da:4d:9b:68:
         be:5d:d9:da:b7:65:08:d4:10:4f:ff:7b:cb:7b:e0:59:24:6e:
         00:fe:24:67:7e:8e:1f:db:85:1d:65:be:42:69:cf:78:d3:0f:
         b3:0e:d5:1f:7a:c7:9e:23:96:b8:ba:c9:c8:bc:5d:c0:de:81:
         2b:46:a6:26:14:e5:0c:8d:02:31:29:c2:36:bb:45:d0:89:45:
         3a:10:db:d1:bc:63:c7:61:dd:b8:0b:ee:b3:fd:39:14:01:d2:
         73:51:26:dc:db:0b:34:c4:a1:1d:51:d4:3a:07:8f:ad:5b:2d:
         94:c8:c4:09:90:ba:9f:24:b8:0a:92:74:42:5c:46:14:a6:b2:
         86:09:ca:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:16:16 2025 by rpki-client