Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc329294-50c6-3039-ba7b-c7a3754c007e.roa
File:                     cc329294-50c6-3039-ba7b-c7a3754c007e.roa (raw, json)
Hash identifier:          q5AxTi207lD4exvltdVAfFyrmHcmUZ/2XtEz3A9qFOQ=
Subject key identifier:   5F:CD:68:4F:30:03:A0:A5:A0:42:01:3C:19:5C:D0:5C:D6:1F:FB:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C835D9D6A77AA5C38780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc329294-50c6-3039-ba7b-c7a3754c007e.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396578
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c8:35:d9:d6:a7:7a:a5:c3:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=aa835612-a3a1-4930-a241-a13007629196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:ca:bc:f3:96:cf:f6:17:90:5e:d0:7f:43:
                    41:3c:49:54:95:3b:b3:a0:79:d4:78:2d:16:76:be:
                    9f:05:2d:aa:2c:06:54:f3:3c:e7:22:b6:2d:08:d2:
                    02:a3:6e:dc:d7:a6:0a:aa:7f:b2:4d:cc:73:9c:22:
                    7e:a4:70:11:0b:f7:c8:aa:29:7e:6a:d4:f9:8d:59:
                    e2:19:d4:39:68:f6:ae:f6:2c:ed:d8:14:fd:68:21:
                    05:8d:a6:60:8e:ca:ed:d0:32:5f:a3:04:c2:69:a6:
                    42:19:fa:59:70:5d:10:c7:dd:a7:9b:51:3c:cf:66:
                    ce:ac:97:3d:8a:90:8b:65:d2:d7:1b:a9:e8:e1:b8:
                    9e:ce:cc:2a:63:f5:63:9b:0a:df:3c:d7:bc:0f:7d:
                    1e:02:52:9b:ba:64:35:4a:de:10:b1:0b:7e:67:b0:
                    07:0f:51:6d:6a:9e:9f:aa:17:00:6d:b1:e4:fb:00:
                    2f:ca:a2:a3:0b:57:4c:f9:cb:9c:8e:56:14:37:58:
                    9a:31:2d:fc:f8:7f:c4:07:38:c7:d6:68:b5:86:a4:
                    d7:64:8e:ca:ea:b2:52:1f:27:01:88:07:74:48:b3:
                    b1:81:03:77:90:57:e8:b2:ae:0f:71:f3:0c:fc:84:
                    c8:f1:91:9b:39:5e:08:22:a5:b5:bf:11:0e:0e:5c:
                    08:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CD:68:4F:30:03:A0:A5:A0:42:01:3C:19:5C:D0:5C:D6:1F:FB:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc329294-50c6-3039-ba7b-c7a3754c007e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:40:4c:cb:d1:35:53:2c:f5:28:8b:65:65:40:41:65:57:70:
         b9:8f:c0:ae:49:2a:0d:f0:f5:27:d0:cb:aa:eb:47:43:ee:52:
         c2:05:a3:bb:d0:99:3d:44:95:75:ab:fc:5c:57:df:f7:3c:de:
         e4:85:d0:75:7e:77:99:43:20:5b:a5:6d:9d:a6:c5:06:b2:e0:
         a7:c2:c5:27:68:96:de:bb:87:5a:75:51:cf:54:e4:bf:31:27:
         d7:43:2f:3d:10:8d:7c:23:f5:02:2c:e1:91:3c:d3:18:c5:0f:
         57:fc:4b:be:af:f3:fa:eb:95:04:99:0f:5d:da:cf:b2:7d:a8:
         ee:86:d6:03:2e:ae:9e:64:23:2d:f2:fe:b9:9d:9f:01:5e:22:
         7f:c0:72:38:f2:c2:6f:8c:61:25:c4:ff:e1:65:00:c4:80:4c:
         b5:9c:95:3d:a0:8d:3c:44:42:d4:33:5c:77:21:9d:6c:2f:02:
         b0:a0:7a:35:da:00:41:97:87:69:04:68:01:fb:bc:bd:4c:55:
         22:a8:e9:02:bc:4b:38:95:67:52:7e:96:86:dc:3e:69:87:fc:
         fe:d3:e4:1e:74:c0:95:c7:fc:d7:48:d9:df:c0:3d:07:2c:df:
         c7:26:a6:23:d0:63:f3:8d:e6:bf:c0:a3:5d:41:e9:a4:cf:3a:
         01:21:ef:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:24:37 2025 by rpki-client