Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69f85116-bcb2-3693-b977-8f5cad8c5a86.roa
File:                     69f85116-bcb2-3693-b977-8f5cad8c5a86.roa (raw, json)
Hash identifier:          Koa4mATDBjh2/p9RjmrQo8veLHZlX16fWEZh2hjL2Ss=
Subject key identifier:   A6:96:27:2A:04:42:A3:64:D4:63:99:FA:F2:A7:36:40:E5:3E:28:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C34A8F254F8B994683C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69f85116-bcb2-3693-b977-8f5cad8c5a86.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396568
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c3:4a:8f:25:4f:8b:99:46:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=b42fbad7-9422-4736-8634-07075b0ab18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:79:32:fc:83:3f:d7:58:59:34:77:f6:4a:
                    60:43:15:6e:a6:73:97:3c:0b:c8:f6:9d:16:ff:db:
                    d7:f4:f7:18:2e:69:41:1e:02:ab:8a:f2:c8:dc:11:
                    0e:fb:90:46:b5:cb:5c:b5:b0:50:b3:38:a3:f9:84:
                    9e:0f:a9:25:77:77:1a:c6:bd:2c:0f:86:cf:10:14:
                    05:c9:35:42:20:b9:90:18:ab:3a:2d:9a:61:09:b6:
                    de:15:df:ca:6d:f5:72:1c:37:6b:be:ed:0d:e5:2b:
                    0f:86:3f:fc:a5:c9:be:34:6e:93:af:69:00:12:83:
                    12:53:39:1d:bb:3a:fd:b3:21:73:78:af:dc:ea:02:
                    bd:0d:de:2d:b9:49:a9:37:4d:8d:ad:2a:e9:24:25:
                    90:5e:1a:10:42:07:c8:f8:fc:58:c6:e1:be:7a:cb:
                    9a:ec:3e:66:df:b6:95:06:c8:14:24:dd:18:fb:00:
                    04:b5:f3:9b:06:d3:e0:64:ef:1f:e3:b3:1f:5e:dc:
                    cc:36:14:39:9f:85:b0:3c:9e:71:ab:25:39:0c:97:
                    2c:73:82:d6:b8:a3:5e:a7:1f:95:28:4d:4f:41:b9:
                    06:f0:1d:f2:70:a7:e1:b9:82:b9:de:18:5c:1d:5d:
                    59:93:82:d8:32:65:f7:aa:99:45:73:24:fb:15:e4:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:96:27:2A:04:42:A3:64:D4:63:99:FA:F2:A7:36:40:E5:3E:28:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69f85116-bcb2-3693-b977-8f5cad8c5a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:bf:6f:38:13:2f:72:22:e7:87:11:2e:87:22:90:73:69:f1:
         b7:fe:28:83:e6:48:8e:94:53:91:03:60:be:a0:a7:45:56:37:
         fd:2d:6d:48:c8:52:13:3c:b3:6e:fc:ae:e7:a1:34:ad:1a:01:
         bb:c2:c7:18:c4:a0:b7:4c:01:58:b1:21:95:34:2c:20:d4:69:
         bc:15:74:10:43:51:75:12:78:01:21:da:cf:fb:b9:01:f8:97:
         9b:ca:e5:95:c0:5c:c2:91:42:6a:29:fa:bf:20:0e:71:12:00:
         db:57:45:d4:8e:3d:29:d9:84:5b:fe:20:5e:52:6c:70:31:2a:
         0f:fc:38:0e:e5:a6:46:bd:1d:1a:90:80:c9:e9:f9:33:09:f8:
         86:a1:54:ad:c9:37:67:0d:8d:cc:75:07:d9:7b:d3:96:af:a5:
         98:e7:0f:16:a4:5f:43:55:54:a9:a7:c1:f9:1e:93:e1:3a:d3:
         f8:e1:f3:b2:65:c0:11:ec:32:d3:5f:32:13:2e:69:ae:bf:07:
         2c:1e:f3:a0:10:d0:bb:be:19:10:b4:50:1b:71:14:96:95:82:
         d4:ce:20:e0:c0:5c:1d:35:82:54:85:38:07:8e:e3:ad:35:68:
         bb:95:17:e7:b6:77:4d:76:f9:71:80:57:72:4d:c6:1f:33:18:
         7b:84:00:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:45:01 2025 by rpki-client