Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab2068ba-0208-3a28-a273-05b4af1c5ebc.roa
File:                     ab2068ba-0208-3a28-a273-05b4af1c5ebc.roa (raw, json)
Hash identifier:          2qUxrbepA97SYHHKayp6VEC36Qen3aVivaTqaTOU+dA=
Subject key identifier:   51:0F:2C:B6:6B:78:D3:41:2E:65:BC:B4:8A:8F:49:27:DA:03:1E:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769CE418FA3C71CA63D9800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab2068ba-0208-3a28-a273-05b4af1c5ebc.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396567
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:ce:41:8f:a3:c7:1c:a6:3d:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=d5b3b117-cec2-4275-8374-722c2b7bea2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:17:a9:3e:6a:17:6c:96:68:a8:fc:f8:2d:6e:
                    5d:e4:ca:86:9e:fc:fe:5f:33:db:3b:44:01:d0:49:
                    f5:1f:32:ec:98:bd:5a:c9:51:b7:14:6b:5a:6e:59:
                    d6:65:89:e9:51:08:cd:5b:2b:86:c0:e2:9c:0b:5f:
                    6d:0c:a0:80:0c:22:ad:39:73:a2:41:5a:f8:4c:65:
                    9c:27:73:4d:ee:26:b9:b3:54:b4:1f:36:50:60:c6:
                    68:d5:f5:b7:0e:87:95:22:7d:84:89:d6:08:8d:19:
                    52:62:a3:30:f9:a3:07:7b:73:19:8f:23:0d:44:07:
                    a1:03:df:84:25:40:db:5d:c9:e8:00:40:b8:cb:d5:
                    38:af:49:8c:af:37:0f:51:f2:12:01:98:a0:c7:c7:
                    38:85:fb:70:80:26:b2:8e:d3:c0:9e:ab:ac:6b:b1:
                    6a:98:50:33:0e:25:67:76:5e:dd:75:73:4c:50:c2:
                    bc:38:f5:6c:8f:ac:89:f5:e9:8e:9b:c4:7b:e8:e4:
                    7d:c8:74:8f:c5:16:22:f6:18:24:bd:5b:a6:e9:dd:
                    ad:96:08:1d:66:28:ae:e5:d3:97:b9:be:4f:90:80:
                    f3:ff:72:52:a8:2e:cb:ef:83:6e:d4:2d:b3:50:20:
                    f8:c3:1b:57:33:e9:73:0e:c7:d5:f6:4f:9b:b4:98:
                    b5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0F:2C:B6:6B:78:D3:41:2E:65:BC:B4:8A:8F:49:27:DA:03:1E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab2068ba-0208-3a28-a273-05b4af1c5ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:eb:34:50:b3:49:48:36:ec:58:85:c6:95:bc:df:4a:a8:63:
         61:5d:fa:ff:52:7a:0f:47:54:57:b3:b0:f3:33:d6:4e:64:bd:
         5c:3d:4c:39:4e:1b:16:32:7e:7c:da:96:83:8c:fd:d0:d1:aa:
         45:ca:b4:0d:9c:2f:13:b0:99:01:20:04:14:78:ed:55:40:98:
         b0:d7:5e:24:8d:54:c6:bc:a7:e4:d5:96:64:73:38:da:fa:c5:
         d9:ab:a3:a8:d5:04:0a:b6:99:d8:dc:43:a5:b7:72:25:ce:31:
         cf:0e:f4:ae:3f:70:aa:42:80:c1:70:9a:53:bf:21:41:7c:e0:
         80:a1:8c:0b:ee:4e:99:b9:cf:b1:bb:7d:e5:07:a2:35:a3:8e:
         5b:59:3f:e1:4b:e7:cd:a3:f6:c0:83:6e:fe:61:a4:96:d7:39:
         92:0f:40:7e:da:b2:cb:fe:ba:42:f2:e0:ce:52:b1:dd:96:05:
         dd:8b:1d:20:51:e7:6f:b5:bb:5c:1f:65:3c:90:6e:dd:0d:a2:
         58:95:7a:38:2b:9e:92:1f:ca:77:48:1b:b2:5a:1d:f0:48:5f:
         8a:21:3b:10:0d:90:25:1e:ea:aa:3f:d9:c2:b7:06:dc:e6:34:
         1b:2a:1b:4f:fe:39:cc:ef:80:21:d7:61:c2:b2:8d:bd:21:b9:
         20:64:ec:87
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHac5Bj6PHHKY9mAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZDViM2IxMTctY2VjMi00Mjc1LTgzNzQtNzIyYzJiN2JlYTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhepPmoXbJZoqPz4LW5d5MqGnvz+XzPbO0QB
0En1HzLsmL1ayVG3FGtablnWZYnpUQjNWyuGwOKcC19tDKCADCKtOXOiQVr4TGWc
J3NN7ia5s1S0HzZQYMZo1fW3DoeVIn2EidYIjRlSYqMw+aMHe3MZjyMNRAehA9+E
JUDbXcnoAEC4y9U4r0mMrzcPUfISAZigx8c4hftwgCayjtPAnqusa7FqmFAzDiVn
dl7ddXNMUMK8OPVsj6yJ9emOm8R76OR9yHSPxRYi9hgkvVum6d2tlggdZiiu5dOX
ub5PkIDz/3JSqC7L74Nu1C2zUCD4wxtXM+lzDsfV9k+btJi1NQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFEPLLZreNNBLmW8tIqPSSfaAx5RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWIyMDY4YmEtMDIwOC0z
YTI4LWEyNzMtMDViNGFmMWM1ZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA36zRQs0lINuxYhcaVvN9KqGNhXfr/UnoPR1RXs7DzM9ZOZL1cPUw5
ThsWMn582paDjP3Q0apFyrQNnC8TsJkBIAQUeO1VQJiw114kjVTGvKfk1ZZkczja
+sXZq6Oo1QQKtpnY3EOlt3IlzjHPDvSuP3CqQoDBcJpTvyFBfOCAoYwL7k6Zuc+x
u33lB6I1o45bWT/hS+fNo/bAg27+YaSW1zmSD0B+2rLL/rpC8uDOUrHdlgXdix0g
UedvtbtcH2U8kG7dDaJYlXo4K56SH8p3SBuyWh3wSF+KITsQDZAlHuqqP9nCtwbc
5jQbKhtP/jnM74Ah12HCso29IbkgZOyH
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:43:15 2025 by rpki-client