Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd71fd7-f9ce-371f-a1fb-5bfbfd26e896.roa
File:                     6cd71fd7-f9ce-371f-a1fb-5bfbfd26e896.roa (raw, json)
Hash identifier:          +lQGo/Go+19L15i73KG7WUiJ3oGhj+5X+DJ7SnRBwOo=
Subject key identifier:   2C:77:28:8D:EC:62:DC:0F:E5:AA:D1:A4:B4:30:FD:A5:A2:A6:0D:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C3CD39A6FF54E5C98600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd71fd7-f9ce-371f-a1fb-5bfbfd26e896.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     397206
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c3:cd:39:a6:ff:54:e5:c9:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=62b63eda-2ef7-4d14-95e4-aa8d2d9e9efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:f8:2a:5d:a9:f4:3e:7e:f0:a3:89:4f:3e:
                    59:77:4a:46:93:b6:9f:d4:17:6b:c8:ce:62:b4:da:
                    15:46:fe:3f:27:4a:7f:e0:ac:c8:c3:49:6f:1d:74:
                    fc:a7:d6:e7:14:3d:82:66:65:65:b1:01:6e:b4:2b:
                    9f:0a:f3:80:92:3c:b8:c3:2f:85:d2:9f:6a:7f:95:
                    64:43:d1:99:04:92:f9:81:50:62:f5:97:da:41:2a:
                    23:c0:05:9c:05:24:4a:b7:31:9f:3e:e0:30:48:6a:
                    51:bf:e6:f4:01:39:ae:83:ec:2c:79:ad:cd:a4:fd:
                    b8:f5:69:8e:e0:9b:6d:0c:97:65:dd:50:0f:43:f5:
                    ac:e1:4b:03:78:b9:57:19:15:fe:c5:69:f3:3f:af:
                    8b:9a:c0:1d:89:02:cd:2e:12:07:4c:f7:9a:c4:57:
                    6a:70:77:c1:b7:09:04:1d:2f:dd:2b:a8:0e:bc:86:
                    13:47:9b:5c:13:d2:e9:60:be:b7:86:29:d5:8c:d0:
                    69:c9:3a:32:47:06:8e:1e:69:19:18:ea:fe:69:35:
                    38:1b:53:fb:fe:00:da:39:77:04:00:59:73:c8:01:
                    a9:94:f3:34:c3:5e:03:b7:40:77:2b:35:0f:59:0c:
                    38:70:88:3b:08:bf:0c:15:56:ec:df:74:9d:a2:89:
                    39:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:77:28:8D:EC:62:DC:0F:E5:AA:D1:A4:B4:30:FD:A5:A2:A6:0D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd71fd7-f9ce-371f-a1fb-5bfbfd26e896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:3d:52:cd:14:6d:7b:81:dd:21:21:01:81:89:60:c2:d5:55:
         e0:1e:00:e3:67:98:5c:5f:2c:ee:42:50:7b:62:b9:c7:8b:7c:
         50:20:db:9c:69:66:a6:91:86:d2:c4:6b:fc:2d:28:0a:2d:47:
         af:07:b1:6a:35:b8:ad:fc:12:a9:0e:c2:1b:0a:33:84:d4:81:
         c3:04:ba:2d:89:65:a5:9e:1d:b9:d7:3b:09:49:b6:b7:45:5c:
         ae:3a:17:a2:4d:20:49:51:a8:d3:7f:05:f1:0b:6d:3b:38:17:
         90:86:51:bb:81:10:96:a5:33:57:f0:85:fb:f3:4a:a0:ae:33:
         8d:02:58:26:c2:68:f8:e8:90:0a:ff:dc:ac:7a:a6:e3:d2:f8:
         cb:c3:3b:dd:23:d3:0f:a6:6e:76:dd:a2:f5:f3:0f:57:7d:01:
         5f:1d:3b:88:60:93:e8:98:99:6d:41:27:c3:5b:c7:b6:ba:c4:
         42:7d:ca:b4:15:72:69:87:0f:e2:bc:e3:ab:ab:d5:7e:e2:69:
         ed:4a:79:3f:b3:9b:ea:c4:28:77:82:3c:3f:47:3a:34:52:65:
         95:9e:1d:c1:f7:5f:d6:33:12:29:fa:a3:1f:a9:6f:cd:f5:70:
         cd:20:0a:9e:2d:b7:07:54:d9:c0:36:79:7a:90:d5:59:5d:73:
         d0:36:67:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:05:09 2025 by rpki-client