Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fb60827-3f0f-3620-b846-f7a694343422.roa
File:                     4fb60827-3f0f-3620-b846-f7a694343422.roa (raw, json)
Hash identifier:          CUBnuHjZ+D6RRyal6+Fv9lp+59PTKBrljm/Aq3fG5zs=
Subject key identifier:   67:D3:2D:4F:B0:50:8D:6A:34:89:91:17:6E:C5:69:6D:CE:46:45:8E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C10D01B6229868DD7D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fb60827-3f0f-3620-b846-f7a694343422.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     397209
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c1:0d:01:b6:22:98:68:dd:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=a514a298-8db8-4623-b5ff-580d82d00dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:45:d8:4d:6a:10:05:c6:42:51:8e:e5:dd:
                    b8:7c:29:b1:04:0d:40:9d:d9:e6:57:d8:c4:73:42:
                    32:28:f5:a8:bf:bb:36:14:c9:9c:07:cf:80:6d:0b:
                    aa:52:40:2f:c3:99:69:fd:fd:78:bf:70:46:39:08:
                    f8:27:5f:34:61:65:30:c3:45:96:ee:f7:f8:0f:af:
                    f7:d5:39:13:a9:fa:01:1c:72:ae:bf:30:72:6e:f9:
                    93:96:8c:d5:7d:2a:9b:03:91:4b:ab:64:d2:ab:aa:
                    7b:1d:27:a8:43:54:45:00:d0:9f:df:df:43:63:b8:
                    65:8c:49:33:c5:b2:d4:1b:d3:b5:10:a7:15:e2:fc:
                    ff:a5:15:59:aa:4b:31:77:1a:dc:ec:7f:b4:2f:08:
                    29:73:47:c4:a1:f2:ab:fd:9a:8a:99:30:ec:4f:0f:
                    72:e6:8e:22:c2:19:9b:ea:90:93:34:f4:4b:b7:16:
                    d9:b0:e6:80:20:f4:68:67:c4:68:a8:ad:1f:ef:7d:
                    f8:5e:b7:28:61:26:b3:8e:96:8e:8f:d7:ba:2d:a9:
                    28:47:6a:08:a4:91:86:be:13:db:87:e8:f6:40:ff:
                    b7:15:1a:69:ca:0f:af:dc:82:02:fa:83:e3:6f:af:
                    09:fa:de:36:43:2b:06:23:24:42:1b:c9:c4:c9:e6:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D3:2D:4F:B0:50:8D:6A:34:89:91:17:6E:C5:69:6D:CE:46:45:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fb60827-3f0f-3620-b846-f7a694343422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:42:6e:0c:a7:aa:2d:c3:86:53:64:7e:cf:ab:ee:23:7d:55:
         f4:58:0e:77:74:a3:5b:64:23:31:d9:1f:a1:bf:b5:b2:76:ce:
         eb:0a:0f:88:b6:ac:b2:96:58:30:c3:d9:18:5a:5a:33:c6:b5:
         7c:ef:af:c6:7b:60:34:f1:b8:b8:d1:ef:69:fb:fd:1e:33:61:
         6c:01:9f:03:6c:96:5f:40:ec:51:84:9e:3c:84:7d:29:5e:b4:
         ff:3e:32:d8:a6:3e:37:7a:15:1b:34:49:80:bd:19:20:1b:32:
         84:cf:63:ea:fb:98:79:90:83:76:ea:6f:28:b4:b1:e3:73:24:
         91:c4:0c:ec:91:a6:b1:12:c4:cf:3c:a2:b2:42:26:49:2b:24:
         e6:4b:8d:1b:d9:6a:7e:ff:a0:94:bb:13:30:4e:5d:1c:e1:eb:
         95:05:21:2d:af:b9:b2:57:71:14:84:99:42:83:e0:31:97:50:
         f3:ca:59:a3:ed:80:62:eb:31:5c:d4:fc:22:70:1d:85:26:a4:
         d0:62:ed:8a:b2:de:de:e2:cf:b4:45:ec:f9:cb:c4:c0:a1:ff:
         43:ed:33:5a:68:38:d5:f2:dc:f9:ea:69:1a:29:a7:aa:bd:9d:
         6b:36:8a:87:fd:f5:ed:e6:0c:6a:86:f9:f9:45:a4:32:39:80:
         45:ce:b1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:48:26 2025 by rpki-client