Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2c5774-84a9-36bf-baaf-1c9f08fa772b.roa
File:                     1b2c5774-84a9-36bf-baaf-1c9f08fa772b.roa (raw, json)
Hash identifier:          06CdcxVaaJea9A0Wtv6+pfikt/+SUNtOClwSu6ltxl8=
Subject key identifier:   FD:9F:DF:1D:5C:DB:DB:2C:F0:BC:03:A6:83:4F:58:4C:B2:DE:A1:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769CD7D51DB09A1888942C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2c5774-84a9-36bf-baaf-1c9f08fa772b.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396547
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:cd:7d:51:db:09:a1:88:89:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=c2da21e7-7531-46cc-a4bf-d2b3f131558a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:c6:a1:4f:aa:73:61:a2:76:7f:e5:52:c0:
                    a2:de:0e:62:8c:7e:26:66:d9:76:a3:a4:32:d4:69:
                    42:eb:bb:6a:e6:06:4e:78:68:a6:65:c1:89:c1:67:
                    0a:78:dc:85:bb:75:49:22:a6:c5:84:fc:98:5d:4b:
                    8a:be:d6:fb:8d:1d:c5:e2:31:7a:ee:92:bb:b6:09:
                    b4:21:13:9e:06:eb:ac:e1:df:75:9d:02:03:37:69:
                    e8:07:e1:49:ec:60:75:ea:cc:c5:2d:be:50:80:3f:
                    2f:db:04:fa:52:82:3c:b8:ac:70:76:ee:bd:20:a1:
                    dc:20:b7:d4:53:73:74:8f:f2:31:2a:a0:aa:d9:46:
                    e9:ea:b0:20:59:14:c5:16:3f:af:55:a3:cb:43:5c:
                    d6:8f:66:1f:5f:15:e1:8b:db:e3:2b:d8:5e:64:8c:
                    17:d2:ef:8c:9f:e9:c2:83:3a:3f:6a:9b:d7:ca:77:
                    e7:ba:cc:6a:b2:e4:33:af:7d:0b:18:94:d8:1c:84:
                    54:57:0d:e4:a7:ad:4c:c2:d2:99:25:23:0a:d8:ce:
                    06:96:e4:f6:20:b1:4e:6d:ed:5d:b8:af:92:52:2f:
                    a7:e4:1b:a6:e7:5e:e7:b3:ff:54:42:b6:81:b2:11:
                    5a:b1:6f:8d:74:78:af:6f:bb:ce:2c:3c:7e:00:6d:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9F:DF:1D:5C:DB:DB:2C:F0:BC:03:A6:83:4F:58:4C:B2:DE:A1:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2c5774-84a9-36bf-baaf-1c9f08fa772b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7a:93:30:29:b3:fe:97:76:e6:47:2d:04:5c:0a:69:b7:14:
         12:ff:c5:40:2b:28:82:05:db:7f:be:0d:12:c7:5f:89:bf:b9:
         d4:83:e4:0c:9b:31:c5:01:28:38:67:68:e2:1b:b0:99:64:85:
         f2:9f:49:f1:08:27:4d:d1:55:f1:29:cd:ac:35:52:76:50:42:
         7c:8b:7f:86:92:f2:a1:5e:cc:8a:d0:e8:bb:bb:dc:59:ae:98:
         f8:91:67:38:c7:08:97:02:51:17:c6:93:c2:ca:31:0e:ea:5e:
         3f:84:d4:28:c0:21:41:2e:7c:16:ec:cb:63:6b:f6:41:ed:53:
         d3:36:29:e3:d3:8b:d6:77:2a:df:aa:1f:7c:c2:f5:34:de:e7:
         e1:d7:7b:13:cf:92:0e:be:d3:bd:be:80:e4:f2:aa:6a:9e:ab:
         e2:0d:0d:cd:4e:53:a7:89:b2:10:77:fc:03:d0:5c:1a:da:d0:
         18:e1:11:dc:70:84:d2:bc:69:7b:97:a5:48:1f:96:19:7f:10:
         99:ea:74:91:5a:83:eb:75:b4:b7:e5:33:bc:ce:2e:82:59:f5:
         16:42:69:35:8c:c6:e6:6e:c1:54:56:fa:04:81:d9:d3:89:8c:
         74:9d:ff:8c:2c:9e:d0:1b:75:30:04:03:fa:19:88:20:26:b9:
         4f:f8:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:25:43 2025 by rpki-client