Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ffdbdcf-1b91-368f-95bb-a0b0156cc8e8.roa
File:                     7ffdbdcf-1b91-368f-95bb-a0b0156cc8e8.roa (raw, json)
Hash identifier:          oNWGBMsNuCTGjltJ4grs3iO76C9kDZkY7qK9WreKA9w=
Subject key identifier:   9E:0D:77:F8:1B:4C:51:F3:70:7F:23:98:25:56:3E:F4:D3:5A:9D:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769CB48FB27C0650B484800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ffdbdcf-1b91-368f-95bb-a0b0156cc8e8.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396594
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:cb:48:fb:27:c0:65:0b:48:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=1ab1de35-7bb0-4edd-9ff9-3194092ca200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:dd:54:16:4e:08:0d:80:59:9d:bf:a6:5b:
                    b3:dc:5d:ba:dd:6c:4c:c5:87:c0:37:da:88:fd:8c:
                    47:5b:02:be:55:a7:c8:99:2f:94:d5:c5:c4:6e:31:
                    23:1b:bc:09:3c:77:91:a1:d5:98:6c:5f:c3:f8:6c:
                    64:d1:76:b9:f2:2e:75:39:b5:f5:c0:2d:a0:fb:45:
                    d3:2a:e3:8c:26:4f:e7:68:ce:9a:2b:6e:63:13:4c:
                    98:4c:e3:7e:83:be:4e:1c:bb:36:5f:2f:9f:c1:19:
                    6b:07:7f:93:2c:1e:e0:56:7d:ff:9e:22:18:f5:81:
                    6a:e4:20:3f:11:e6:26:3b:87:cb:0e:d9:e3:69:52:
                    0e:e1:e8:24:44:b6:39:c3:f9:70:61:6d:0f:74:2f:
                    1d:43:2e:88:57:ab:b5:ba:e9:4b:1b:c3:71:df:b2:
                    d6:0a:8e:8d:5c:39:ab:01:d6:e1:ef:ef:71:4b:0b:
                    a8:58:f2:be:3f:dc:f8:1f:e0:a8:0f:0a:5c:57:86:
                    c2:8f:f7:01:0e:97:44:a7:7e:55:50:e2:ca:30:7d:
                    ad:53:4c:19:57:fb:09:86:2a:63:95:0a:48:02:17:
                    5a:61:fc:3e:10:bf:91:46:63:3d:be:28:a5:3d:56:
                    9c:0c:d9:0e:7e:af:e5:49:37:f1:d2:cf:c6:db:c5:
                    0f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0D:77:F8:1B:4C:51:F3:70:7F:23:98:25:56:3E:F4:D3:5A:9D:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ffdbdcf-1b91-368f-95bb-a0b0156cc8e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:6a:7c:09:35:97:76:32:b6:2d:dc:75:85:bb:c3:69:b6:7a:
         72:d0:a7:ed:5e:ac:bf:22:6d:0f:bd:f0:87:37:64:4d:21:37:
         06:0e:7d:bd:d2:c9:15:a8:88:52:fe:c6:bf:a6:6a:c5:11:75:
         3b:0d:76:f0:74:35:e0:eb:22:6a:fb:e1:64:90:e4:91:6f:8d:
         15:55:fe:bd:6f:c3:f3:59:65:80:3d:cd:82:7b:e8:ef:3b:1d:
         47:29:bb:47:67:26:db:01:f3:0a:f1:ba:71:07:3b:cd:f4:b9:
         76:d2:fb:39:b9:dd:a0:15:38:45:86:be:a6:df:d2:1d:93:55:
         0b:6d:04:b8:77:fd:1c:40:87:d3:dd:b9:77:63:d4:93:6f:6c:
         30:f0:39:d2:7b:36:3e:52:29:4b:66:ff:c8:2d:66:55:88:33:
         05:f6:c2:61:02:09:3e:41:7e:ad:aa:4c:83:cf:00:38:06:e8:
         f4:e3:58:29:eb:4d:e3:97:32:fc:6d:07:2f:bd:ba:e8:3b:4b:
         e0:9d:f6:34:56:47:62:64:fd:63:5a:f5:ae:6b:36:fd:ea:2f:
         ca:0c:96:cf:31:53:83:0e:d5:8b:95:a6:3a:0e:4d:fe:0f:32:
         b1:91:03:6c:57:9c:c3:44:a9:ce:89:a0:dd:28:16:e5:3f:f9:
         8c:d1:ef:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:39:30 2025 by rpki-client