Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa
File:                     bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa (raw, json)
Hash identifier:          YZk+aD2j8TOR10hiSLvB7oe2jVzHrFEhW0a5Lcba1Kw=
Subject key identifier:   9F:3E:6C:87:BD:7B:E3:CC:6E:FD:79:11:99:DA:19:ED:A7:30:ED:06
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C2639E6C13739F4CE640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     36624
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c2:63:9e:6c:13:73:9f:4c:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=cd0f8425-d27c-48e6-8dbb-e4ef2307eb3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:31:eb:25:7f:8e:7e:ca:7a:76:f8:f3:52:47:
                    68:34:90:3a:4c:98:9f:0d:bd:eb:7a:88:76:75:75:
                    82:f1:83:26:5e:b3:dc:c0:5f:9f:60:31:83:f7:70:
                    e6:5a:ae:d5:55:4c:e4:4b:f0:d7:65:ec:48:1c:03:
                    25:51:5e:95:5a:0f:73:c9:26:81:09:91:cb:48:89:
                    c3:4d:ea:29:35:05:7d:38:9b:ba:9a:bf:67:68:b3:
                    1c:3b:8b:a5:e6:f8:9a:81:a8:e1:8f:76:97:05:f8:
                    31:53:ea:87:0c:b8:73:74:ae:1f:a8:d6:f7:f9:26:
                    95:02:eb:a1:a3:f5:c7:71:10:03:72:ad:5c:e0:e1:
                    b6:a8:93:3c:8a:83:3c:b5:d6:8e:08:42:f9:a1:b0:
                    ac:74:16:3f:5f:de:58:c9:91:3a:3f:cf:71:0b:2d:
                    6d:f8:06:ed:9a:49:c9:f5:57:83:ab:65:8d:f2:2e:
                    7d:a5:3a:7a:b2:8d:9c:91:42:17:65:28:c8:4f:13:
                    bd:0b:be:13:97:0a:1f:d7:f4:7e:be:d4:b0:ba:45:
                    32:e4:19:c6:25:4e:7c:ad:13:f3:d5:0b:cd:86:93:
                    68:e2:26:95:11:ed:45:f0:59:22:cd:50:18:f1:de:
                    05:94:a5:bd:60:cc:13:c8:4a:2d:87:8c:5a:f0:5a:
                    0a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3E:6C:87:BD:7B:E3:CC:6E:FD:79:11:99:DA:19:ED:A7:30:ED:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:0a:21:64:d3:b8:63:7b:83:05:d2:2c:73:01:d1:46:c9:ba:
         14:c2:22:34:d2:41:2e:ae:98:02:10:d4:05:09:c6:b1:dc:20:
         c9:a8:ae:c8:74:17:8c:23:0d:5f:7e:8f:d6:3a:df:12:64:00:
         8e:a6:2c:e5:bd:1e:53:34:ed:35:99:bd:84:bb:5c:47:45:9a:
         40:83:12:c1:45:7d:b9:48:a7:43:08:86:67:9f:fa:00:c5:8b:
         4e:88:5a:a5:80:f0:ea:e6:e6:8c:2c:52:fd:d4:6f:be:a4:73:
         e9:f7:0d:bc:bc:e8:79:c0:8a:98:ae:06:5a:84:3e:75:03:81:
         c8:26:aa:db:27:b9:ab:f2:b8:c8:1b:1b:9f:e7:aa:01:32:64:
         c5:f3:ed:d9:c0:0d:83:15:48:0e:e4:94:f8:57:2c:1d:4a:4a:
         f5:08:09:35:8c:ca:55:d1:f3:70:85:19:05:6e:7d:7e:cc:e8:
         a2:80:e6:3f:e4:4c:b2:02:04:16:be:c3:ff:4f:43:99:79:8c:
         41:89:90:7e:ac:66:52:e1:34:d3:20:cd:76:92:d5:6f:29:a9:
         00:25:3d:91:e4:d4:77:08:ff:cd:c5:28:04:9b:aa:24:e3:89:
         1c:9d:b9:81:ba:66:7e:cd:b4:92:b1:64:51:3b:8d:6d:74:05:
         a4:fe:35:8f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacJjnmwTc59M5kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
Y2QwZjg0MjUtZDI3Yy00OGU2LThkYmItZTRlZjIzMDdlYjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDHrJX+Ofsp6dvjzUkdoNJA6TJifDb3reoh2
dXWC8YMmXrPcwF+fYDGD93DmWq7VVUzkS/DXZexIHAMlUV6VWg9zySaBCZHLSInD
TeopNQV9OJu6mr9naLMcO4ul5viagajhj3aXBfgxU+qHDLhzdK4fqNb3+SaVAuuh
o/XHcRADcq1c4OG2qJM8ioM8tdaOCEL5obCsdBY/X95YyZE6P89xCy1t+AbtmknJ
9VeDq2WN8i59pTp6so2ckUIXZSjITxO9C74Tlwof1/R+vtSwukUy5BnGJU58rRPz
1QvNhpNo4iaVEe1F8FkizVAY8d4FlKW9YMwTyEoth4xa8FoKcQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJ8+bIe9e+PMbv15EZnaGe2nMO0GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJkMTBhMTYtN2VkZC0z
OGI2LThjODktZTUwODhiN2E3ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCuCiFk07hje4MF0ixzAdFGyboUwiI00kEurpgCENQFCcax3CDJqK7I
dBeMIw1ffo/WOt8SZACOpizlvR5TNO01mb2Eu1xHRZpAgxLBRX25SKdDCIZnn/oA
xYtOiFqlgPDq5uaMLFL91G++pHPp9w28vOh5wIqYrgZahD51A4HIJqrbJ7mr8rjI
Gxuf56oBMmTF8+3ZwA2DFUgO5JT4VywdSkr1CAk1jMpV0fNwhRkFbn1+zOiigOY/
5EyyAgQWvsP/T0OZeYxBiZB+rGZS4TTTIM12ktVvKakAJT2R5NR3CP/NxSgEm6ok
44kcnbmBumZ+zbSSsWRRO41tdAWk/jWP
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:22:54 2025 by rpki-client