Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83ed7d87-daf9-34c9-a6d9-8b9622bd58b8.roa
File:                     83ed7d87-daf9-34c9-a6d9-8b9622bd58b8.roa (raw, json)
Hash identifier:          ZQdBGLJU5f0Hmmjnm4KvJa4PudwV33SLdk9FIuhaQlk=
Subject key identifier:   EE:10:2E:4B:51:0B:1B:31:15:2E:DA:84:7E:30:21:F8:DD:85:1C:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769CCDB39D548C53B8FE800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83ed7d87-daf9-34c9-a6d9-8b9622bd58b8.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396557
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:cc:db:39:d5:48:c5:3b:8f:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=b035c5c5-7eee-40b0-b145-7e160a77e7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:bc:4f:17:b9:26:9d:89:2b:32:36:14:6c:
                    93:6f:dc:0a:65:db:9d:de:b7:dd:25:a3:2f:7a:67:
                    ec:a2:11:e8:5b:11:f6:d3:63:db:b6:36:37:93:e2:
                    48:5b:b6:ed:02:12:1e:aa:f8:f4:b4:d5:13:0e:b4:
                    2a:7d:79:b7:ad:85:e0:22:75:85:e4:d7:ca:69:58:
                    5f:0f:96:73:d0:f8:44:6f:39:6e:20:31:bc:08:b8:
                    4c:b4:e7:f8:26:e0:ea:09:54:0b:4e:83:77:ab:e5:
                    ed:cd:42:8d:ae:74:80:3d:45:55:4d:f4:dc:b7:8e:
                    58:d7:4c:fd:93:df:f0:1d:12:56:a9:3f:73:41:39:
                    8c:e0:21:b7:97:0d:89:e8:a9:ed:82:17:7a:85:20:
                    27:f8:a8:59:bf:2a:18:50:b7:a3:7c:86:96:71:f3:
                    8e:06:ef:8c:5c:95:1f:3f:7c:e1:f0:58:1e:df:3a:
                    93:69:ab:c4:4a:73:3d:56:62:df:04:1b:6e:f2:20:
                    13:7a:7b:ee:c5:85:3c:a6:31:30:81:88:c7:c2:d3:
                    e8:a2:22:10:e0:aa:8f:0a:bf:10:87:db:bc:92:88:
                    9b:db:70:88:21:e8:01:cd:02:7e:7a:a8:38:87:79:
                    ef:af:4f:43:90:15:8e:12:f5:22:62:3c:e2:8c:f8:
                    e4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:10:2E:4B:51:0B:1B:31:15:2E:DA:84:7E:30:21:F8:DD:85:1C:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83ed7d87-daf9-34c9-a6d9-8b9622bd58b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:75:bd:3c:67:49:c1:1b:69:5d:da:bd:75:5c:c6:bd:dd:2e:
         ed:4b:e2:35:29:44:23:ca:2e:6b:92:78:d5:df:d8:3b:71:7e:
         33:dc:24:70:de:10:ce:7d:8e:07:e2:75:38:4c:12:54:3b:f2:
         06:4e:06:b6:c7:78:ea:92:8d:cb:49:9a:ac:b2:ff:36:f4:11:
         47:dd:30:91:3e:8c:5c:a6:de:c8:da:07:be:38:e6:0e:4b:ea:
         99:3e:ed:c8:5d:4e:24:90:4a:f0:e9:16:f4:b1:2e:24:b9:85:
         18:e5:38:8d:13:a4:fa:48:c3:9c:72:4f:9c:25:76:b2:c7:93:
         aa:62:5d:73:7f:b5:18:48:bd:cc:54:82:bb:71:17:b3:1f:2b:
         69:a2:0f:b0:61:6b:ba:b5:a5:39:49:e7:31:d9:77:8b:ea:d3:
         1f:53:02:b1:ab:ea:0b:cf:01:36:40:6c:22:31:ea:ec:cb:f5:
         de:77:42:6f:29:30:25:0f:58:45:2f:3f:7d:7f:5c:f2:9b:06:
         b0:f4:4e:55:52:70:53:d6:3d:6d:8e:9c:d8:1d:bf:33:55:10:
         4b:d7:fc:27:b8:d8:88:e7:68:f6:61:0d:6b:63:e7:fe:d5:17:
         52:30:b9:f1:bb:ca:2e:e3:1a:6c:22:ec:f1:35:d0:36:e4:04:
         0f:a9:d2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:52 2025 by rpki-client