Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4337596f-63ab-3a53-9a74-b4b8dcbf4c9c.roa
File:                     4337596f-63ab-3a53-9a74-b4b8dcbf4c9c.roa (raw, json)
Hash identifier:          DO4skO2Y1S92OC2OhHV1viy2Gf3JmFUvtqMpTzwo6UQ=
Subject key identifier:   BD:89:09:44:4D:A1:F0:DC:58:75:DE:9C:02:C2:2C:C6:85:16:3E:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769CDDA8F788109306B3640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4337596f-63ab-3a53-9a74-b4b8dcbf4c9c.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     36624
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:cd:da:8f:78:81:09:30:6b:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=3688304f-ede9-4260-b39e-77e2fe0b1929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8f:45:54:ac:18:80:bf:e3:74:56:d1:38:d2:
                    b5:2b:de:25:31:b9:fb:57:67:1b:c0:3b:21:b5:52:
                    bd:d1:45:dd:a9:1b:7f:f4:0f:f9:b9:cb:c1:2b:1c:
                    5f:0a:2f:02:46:3b:78:41:3b:b8:ed:22:72:d6:81:
                    9a:8d:53:35:2a:56:7f:53:49:2f:bc:bd:cc:3b:9c:
                    f4:63:09:5d:d3:a2:cc:92:3f:d4:dc:85:95:43:de:
                    0c:18:06:2d:5b:3b:2f:90:e0:8a:63:a5:5e:c1:bb:
                    43:a4:c9:a6:43:b9:4e:e1:a1:3c:e5:96:ce:f9:fb:
                    06:0b:67:3d:47:36:d8:6f:ca:e7:f1:bd:b3:7e:b7:
                    03:90:fa:a7:c4:4e:58:49:ee:5b:8e:7c:31:25:54:
                    6c:05:1d:b1:af:ac:26:e4:2e:1a:7b:12:3e:b4:16:
                    9c:56:2b:a3:8d:76:5c:e9:8a:fc:dc:3b:a5:b0:b5:
                    d9:a5:5e:6a:1d:09:c0:8c:37:b8:4d:b4:b8:29:93:
                    5d:94:a8:13:2f:8a:d8:5a:83:4c:8a:67:e9:3d:d8:
                    d8:aa:ce:76:bf:71:f3:b6:ef:43:48:9f:22:c8:cd:
                    fa:3d:f7:fd:fb:45:da:73:99:b6:b5:91:0a:81:7f:
                    8d:6f:9f:01:51:ab:11:ae:c5:7d:f3:0e:b7:85:1e:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:89:09:44:4D:A1:F0:DC:58:75:DE:9C:02:C2:2C:C6:85:16:3E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4337596f-63ab-3a53-9a74-b4b8dcbf4c9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:25:2f:6a:a6:3a:80:80:f0:ea:0f:98:d9:0c:96:8d:72:6a:
         73:3b:76:c5:50:68:65:f0:b9:94:9f:8e:f1:ba:50:72:b6:b2:
         6f:a7:fd:51:27:33:85:55:d3:da:ff:c4:20:ae:8f:b3:00:d6:
         ac:91:be:8a:ee:43:77:65:06:6e:01:49:ae:33:fc:71:42:0c:
         59:a1:a0:43:e8:76:91:5f:56:01:5d:35:39:e7:bc:e0:48:6c:
         d7:7c:cd:64:ca:38:0a:6c:ca:46:91:42:e7:b1:d6:97:29:e6:
         0e:72:4e:a3:b9:b1:1a:1e:e9:7d:f0:6b:fa:98:b3:d6:1a:58:
         65:99:2d:eb:3c:6b:d5:92:b9:24:69:00:2b:29:3a:f7:e2:30:
         29:9e:bc:bd:ee:1a:79:e4:b7:4e:d5:3e:0e:79:cf:3a:41:b4:
         7b:7e:f1:ad:b8:b7:8c:60:38:02:0b:2a:e5:91:fb:cd:a9:95:
         b8:71:62:94:c8:f9:14:fa:b6:33:7f:28:01:b2:72:30:11:29:
         9b:59:dc:97:0f:ee:e6:57:29:27:6e:52:7f:c8:2e:a2:d3:b3:
         48:5c:36:c3:a6:24:00:8c:ba:f3:70:7a:7b:19:ed:b4:af:26:
         91:d4:ad:d4:be:6f:10:1b:9e:e1:94:f4:0a:14:94:8a:67:65:
         60:68:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:31:24 2025 by rpki-client