Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6255b096-7676-31ea-a0ac-d12f2ca0b664.roa
File:                     6255b096-7676-31ea-a0ac-d12f2ca0b664.roa (raw, json)
Hash identifier:          j2VU8vRdJImD9P/MKRiPiQez8GcbhtM+Fwkd19BQIlQ=
Subject key identifier:   AD:92:99:FD:33:FB:88:96:E5:74:17:8A:D2:9B:DD:C0:5C:A1:F6:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769CB5AE0EA9BB376B651C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6255b096-7676-31ea-a0ac-d12f2ca0b664.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396552
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:cb:5a:e0:ea:9b:b3:76:b6:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=d52e872a-0e64-46ee-9a1f-902dc1caf0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:58:08:ac:ed:8b:a0:9a:ec:59:55:cf:93:53:
                    8f:d8:42:3d:7a:6d:90:ac:54:db:03:87:47:ba:ed:
                    f0:16:a6:05:cb:bf:18:8e:13:88:e9:4e:9c:42:0e:
                    37:b5:53:ba:aa:14:d8:d5:c7:9f:8c:7b:52:bf:44:
                    c8:1f:3e:db:d9:92:d0:1a:da:1d:09:80:68:54:99:
                    bc:2d:b7:2d:55:98:60:1e:4d:06:06:ad:4d:e6:95:
                    82:e9:87:45:e2:a1:1b:c3:85:6b:29:5b:2b:0b:85:
                    2b:40:3a:9b:b5:e7:2e:e2:3d:ed:c2:33:12:f0:91:
                    1f:0b:54:48:c7:88:d3:48:6a:49:22:e0:25:ff:e6:
                    ff:19:50:20:2a:6d:ff:6b:39:6f:1b:49:8a:2d:78:
                    95:3a:42:81:25:1e:5e:a2:28:61:d7:b8:3f:88:4d:
                    d8:1b:e2:a0:2b:7e:d1:0e:01:a9:59:74:70:87:f7:
                    d6:a0:48:a7:c7:11:56:0d:38:de:a9:c5:ae:44:9a:
                    43:a8:11:ea:b4:04:b4:16:5c:42:8e:9c:11:12:2a:
                    fb:e1:62:01:55:17:b3:5a:22:70:20:e3:a8:49:1d:
                    e5:8f:9c:33:5e:09:f9:25:1d:95:bd:a1:c4:ca:2b:
                    9f:4a:63:ea:64:44:50:d5:e1:f4:57:2f:4f:c6:27:
                    2b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:92:99:FD:33:FB:88:96:E5:74:17:8A:D2:9B:DD:C0:5C:A1:F6:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6255b096-7676-31ea-a0ac-d12f2ca0b664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c3:da:f9:40:52:e5:f6:c7:03:ef:1a:9c:5a:1d:8b:cf:fd:
         dd:91:5c:ba:75:c9:ae:ff:1c:de:9d:3d:c3:c2:e8:9a:82:fa:
         18:e0:f8:e4:cb:34:f4:3a:29:40:08:60:3d:8f:63:1a:d0:06:
         60:95:ef:6d:15:f6:5b:91:8a:9b:5b:b3:95:56:44:ce:89:a0:
         83:16:fd:56:30:bd:73:1f:b8:1b:5a:09:77:0e:94:0a:a2:a8:
         6b:0e:7c:40:51:7f:a6:2b:ba:a4:2e:5e:36:41:44:b2:dd:5b:
         66:7d:91:77:bd:b9:5b:8d:8a:7b:b9:3e:a5:2f:48:37:cf:6b:
         bb:db:cb:c0:9a:d0:26:e6:6b:d7:5e:96:e3:36:d8:c8:10:bd:
         a6:48:4b:07:39:9b:61:c5:43:e2:0f:1f:d6:c8:73:3b:f5:da:
         8d:f2:a2:ab:91:1a:c2:02:08:24:fb:c5:1d:4b:26:18:31:26:
         e7:9a:96:da:67:8f:fd:03:f4:e3:a7:b8:f7:57:96:96:b6:a8:
         25:49:cf:c6:a3:60:75:7f:23:a4:3e:8c:93:19:f2:40:65:e8:
         f2:ff:bb:b7:05:5e:cf:bc:a1:d9:21:54:6d:91:3c:bf:83:cd:
         61:3a:68:93:ec:51:5a:29:f4:2a:92:09:0f:90:af:41:97:91:
         ae:db:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:06:15 2025 by rpki-client