Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/357b506c-bd3e-3199-9608-eb9621697a3b.roa
File:                     357b506c-bd3e-3199-9608-eb9621697a3b.roa (raw, json)
Hash identifier:          8dmEOuJkFvEvjZzLdYKMsDiYGS/Zkx+SJ/jKj1nVEVs=
Subject key identifier:   2A:A9:90:A2:00:11:D4:9D:8F:50:89:D3:53:27:2F:26:EF:0C:30:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C9C70233694D89E3B980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/357b506c-bd3e-3199-9608-eb9621697a3b.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396545
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c9:c7:02:33:69:4d:89:e3:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=2e1ad9b8-a0af-468f-bcec-bfc45a76cea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:22:28:e3:ae:f5:86:2a:12:74:ce:65:ed:
                    19:4e:a8:13:7a:02:d7:8b:4c:e7:38:92:0d:a1:8b:
                    4d:4c:76:a9:93:a7:dd:18:05:50:9d:3b:c4:75:0b:
                    8a:17:ad:a1:ee:8a:19:09:67:55:fa:e5:41:f3:f6:
                    36:4f:6e:4f:58:aa:e7:1b:b8:4a:d3:8d:12:f4:43:
                    8c:76:50:ec:e9:2c:4e:d1:29:5e:62:64:5d:15:a8:
                    2d:48:6b:92:6c:1f:d8:47:27:aa:f9:93:e3:81:7a:
                    47:2e:32:97:51:3b:a7:57:dd:b9:9d:ef:fc:a3:6c:
                    b2:73:b4:06:80:8b:2d:2d:bd:ac:90:34:f1:4c:2e:
                    16:5e:34:35:52:97:7f:16:44:7e:99:f9:ce:5f:ee:
                    65:a1:15:09:9c:2a:07:c0:e4:1b:1a:c9:23:ed:a9:
                    78:37:45:b6:55:ca:9e:0b:23:67:67:6b:77:e8:6d:
                    ce:5b:b5:8e:4c:82:d8:59:75:7a:f4:48:11:c9:38:
                    3b:99:81:0d:7f:76:aa:e4:14:a1:6d:5d:2f:3e:ab:
                    98:df:03:cf:6a:23:c6:7c:3b:c0:f5:f6:39:f2:fc:
                    0d:41:71:62:6f:47:b0:29:b6:8e:1e:44:80:e8:1f:
                    54:46:e7:10:78:ea:8d:89:b9:0d:a5:a4:7c:3d:bf:
                    56:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A9:90:A2:00:11:D4:9D:8F:50:89:D3:53:27:2F:26:EF:0C:30:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/357b506c-bd3e-3199-9608-eb9621697a3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f4:2d:80:04:33:da:c2:12:2d:60:31:53:cc:30:9e:23:4a:
         71:1a:f1:f3:34:8a:16:c5:48:47:95:38:f4:9e:ab:66:47:8b:
         66:47:f7:a7:67:2e:e7:bf:62:b1:3a:1e:24:cb:4c:52:67:6c:
         38:c7:14:e5:84:1e:94:39:c8:84:5b:ad:16:e8:f2:2c:c1:67:
         b9:15:c9:26:1e:96:a8:e2:26:50:1b:6a:de:62:0c:0a:6e:f3:
         46:e3:53:1c:8d:da:af:0f:45:fc:fb:3c:49:e2:d1:83:88:3f:
         07:0e:c6:f4:27:26:4b:ec:2a:2d:0f:27:43:12:46:c9:37:12:
         d2:47:b5:6c:7a:b7:09:e2:99:62:4d:1c:2b:dc:4a:0c:5c:b1:
         7d:cc:44:50:f9:3c:56:e1:4c:e0:20:16:05:b7:ec:2c:d9:98:
         88:68:bb:98:b6:f0:32:2c:bc:03:73:85:60:d2:e1:c9:5b:4c:
         2f:a9:2d:92:78:41:de:89:fb:48:d6:8a:49:dd:8e:cd:f0:f5:
         97:c3:7b:be:40:24:35:a6:e4:72:4f:78:3b:ff:27:ef:98:84:
         45:0d:18:0e:cc:6f:18:1a:2f:2d:6c:84:74:db:ce:41:83:4b:
         37:dd:91:88:59:fe:4b:ac:41:a5:17:03:78:40:8a:f0:ed:4e:
         14:69:bc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:15 2025 by rpki-client