Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3384a359-bd8b-39ce-a1b4-5ccfbb442ca7.roa
File:                     3384a359-bd8b-39ce-a1b4-5ccfbb442ca7.roa (raw, json)
Hash identifier:          rsdn3kzo+8nDBQWpmgOnjHnr0BstzovDb2rV/waxHS4=
Subject key identifier:   23:67:85:E1:4C:36:A4:F2:E1:98:84:D3:9A:28:40:4D:24:E8:C3:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C7038CE4E3EACCB11978
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3384a359-bd8b-39ce-a1b4-5ccfbb442ca7.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396581
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c7:03:8c:e4:e3:ea:cc:b1:19:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=8e361713-049f-4c1d-bb72-2927993708dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:fa:7a:31:95:90:00:39:cb:8f:20:f0:70:
                    f3:be:22:62:6c:a8:24:47:2e:af:51:f5:cb:79:53:
                    da:f3:79:95:99:40:ac:f4:74:e6:e2:cd:98:dd:c1:
                    33:30:cd:ba:33:3a:14:79:95:82:ea:f5:c5:c9:63:
                    e0:16:9d:fa:dd:8f:9a:61:75:f5:6c:b6:fe:65:ac:
                    c2:27:81:81:45:26:0a:6b:d1:d3:cb:cc:62:82:f0:
                    09:24:b8:f2:9b:78:22:48:79:e1:7e:20:10:47:85:
                    cb:8c:e6:48:a2:e9:3b:30:10:72:b2:64:33:2a:8b:
                    0a:73:11:67:bc:f6:3f:05:5c:27:94:22:ce:54:cf:
                    f2:d1:41:54:6d:ac:e6:75:86:2e:d3:3d:22:52:62:
                    a1:5c:5c:ca:3b:74:22:3d:72:de:8a:e1:58:7f:cf:
                    bb:59:11:52:b2:a6:b0:0f:4d:b7:19:b7:2a:02:d0:
                    42:9e:f6:a5:a7:93:9c:3e:da:be:86:85:fa:e7:62:
                    a3:b2:15:ba:c2:68:14:b3:0e:dc:3e:6b:1b:21:6c:
                    80:74:90:0c:4e:4a:94:0d:25:68:46:40:d4:cf:89:
                    95:b3:62:75:92:6a:8c:80:26:16:7b:1d:cc:43:c4:
                    5e:0d:b9:5a:20:6d:66:7d:c4:eb:4a:c6:a2:3a:58:
                    80:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:67:85:E1:4C:36:A4:F2:E1:98:84:D3:9A:28:40:4D:24:E8:C3:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3384a359-bd8b-39ce-a1b4-5ccfbb442ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:73:3e:87:8d:fc:01:87:6f:eb:20:36:ad:93:2d:77:21:87:
         25:96:3f:90:65:fc:6c:c8:6c:d2:c4:cb:aa:f8:3d:9a:74:f5:
         ba:4e:3b:1c:80:7c:b5:03:42:e8:40:ec:f8:b3:11:78:8a:fd:
         f7:6c:b2:2e:d1:c4:5f:13:6c:52:92:8a:84:d6:5c:b2:e6:23:
         f8:e7:17:37:07:2c:67:d5:fe:6a:29:43:3e:e9:e7:de:24:4b:
         9f:62:3d:0c:01:09:1d:86:65:60:56:c5:b4:2f:72:6f:81:02:
         f5:43:3f:1d:55:c4:c6:1d:41:26:87:d0:51:d3:da:5a:dd:98:
         8e:71:5a:85:a6:64:e1:59:1b:1c:dd:f7:47:07:3f:dc:05:99:
         7d:74:8a:37:49:14:b6:9d:8d:b8:e5:2e:bb:6e:5e:22:fe:29:
         d9:a1:a9:cf:ce:c2:52:a6:7f:8c:a0:ab:24:4d:08:eb:21:c2:
         19:05:33:1b:80:a1:ca:93:28:30:ae:83:52:e3:a2:12:df:43:
         d8:ba:11:3d:db:5e:ef:b2:04:d9:8a:fd:02:35:98:99:36:cc:
         15:e8:ce:e8:98:d7:2e:a3:48:b0:38:b6:bd:e5:9c:28:5b:5f:
         da:60:00:a6:e2:ec:ec:e3:d3:6f:d2:bf:66:bb:95:fd:0d:58:
         f6:a2:3e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:52:36 2025 by rpki-client