Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc532284-f014-350d-b427-c6adfecb650f.roa
File:                     cc532284-f014-350d-b427-c6adfecb650f.roa (raw, json)
Hash identifier:          PgJsk2DjD5mEaIxkKoGokhYo8vrjIvVbIjT7ASAN0xk=
Subject key identifier:   15:B5:37:E1:DC:39:1E:D5:EE:79:95:D7:E0:22:F7:1A:99:F3:A2:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C1EB4423345F0D2C5F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc532284-f014-350d-b427-c6adfecb650f.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396615
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c1:eb:44:23:34:5f:0d:2c:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=61c9b79c-0210-44b9-9c97-ebe703d53af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:83:9a:5b:b6:30:0c:48:de:68:76:df:2c:c8:
                    0d:e2:89:c1:46:64:ad:fd:ac:01:7b:31:53:63:2c:
                    d3:05:1b:d5:93:00:d8:c5:3b:2e:81:f0:59:d8:ea:
                    2f:72:4c:a7:86:1f:fc:5a:33:f6:1f:da:b3:18:28:
                    4c:56:43:c4:6b:0b:72:97:a6:31:2b:de:46:f0:66:
                    28:b7:a2:e5:10:ef:3f:cc:f9:ff:6b:19:09:42:bd:
                    9f:df:db:78:07:92:ec:c3:c3:ab:4c:13:cb:ef:fe:
                    a3:28:fd:db:04:5e:83:8a:db:5f:18:bb:ab:28:cb:
                    c5:f8:5c:10:7f:ef:03:5e:29:f8:f3:17:2d:f2:6a:
                    9f:69:c8:1b:8d:b4:08:63:78:c1:cd:99:03:3a:5f:
                    84:05:94:21:cd:d0:58:85:67:7d:62:a0:03:4f:e9:
                    1b:72:86:75:22:f2:b1:8a:0e:76:4e:9c:91:33:1a:
                    8b:bf:f2:a9:ae:34:2a:30:26:99:b9:0b:e2:45:b8:
                    68:cb:0b:31:ad:1c:51:2e:ee:cb:6b:d5:a6:f0:04:
                    3d:9b:c5:af:b1:24:af:ae:25:a3:02:2e:a2:53:bf:
                    56:18:4a:64:ab:f8:99:07:07:8f:d8:8b:34:76:8e:
                    ba:0b:71:60:4b:7c:6d:ba:65:84:ad:a9:c9:9d:96:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B5:37:E1:DC:39:1E:D5:EE:79:95:D7:E0:22:F7:1A:99:F3:A2:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc532284-f014-350d-b427-c6adfecb650f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:27:e5:0a:28:d4:60:99:00:5e:0c:0c:f6:36:75:85:ad:06:
         28:d1:5e:de:5a:69:e6:2b:db:5c:18:1b:fc:74:20:ef:17:c2:
         8b:9c:17:bf:78:14:5d:c2:89:f2:fe:90:3e:72:8d:08:10:7d:
         ef:7a:a3:1a:7c:10:ec:a2:e0:08:ac:dd:ce:cb:52:c3:10:ae:
         0e:0b:93:75:7a:76:4f:87:22:51:e9:6d:0d:ee:a9:7c:99:bc:
         c0:bd:a4:a3:12:9c:c7:dc:08:7f:ea:32:84:b4:c1:65:3f:61:
         c5:3c:50:2e:7a:ff:02:8c:ff:47:a0:73:99:06:14:b3:0d:4e:
         d0:1d:91:33:73:1f:9c:4d:3b:40:00:99:f6:00:74:d5:58:57:
         0c:3d:35:fe:12:10:2e:a5:8e:3b:69:a7:69:c0:9d:4b:14:d5:
         ec:d0:61:ef:85:08:ef:e8:a8:76:ed:1e:68:30:1e:8f:9e:f0:
         37:79:e5:02:1e:16:b3:34:00:9a:58:85:c3:a0:9d:ca:00:ee:
         c1:15:93:41:80:2e:6e:1f:17:ae:42:3a:e4:c6:5d:82:31:ad:
         f9:c3:a9:3f:40:b2:a0:b6:c2:29:c7:10:82:70:0e:34:05:00:
         04:eb:6a:aa:ed:c4:cc:ab:90:1d:28:05:50:29:db:ce:44:a0:
         6b:13:1f:e9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacHrRCM0Xw0sX0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
NjFjOWI3OWMtMDIxMC00NGI5LTljOTctZWJlNzAzZDUzYWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIOaW7YwDEjeaHbfLMgN4onBRmSt/awBezFT
YyzTBRvVkwDYxTsugfBZ2Oovckynhh/8WjP2H9qzGChMVkPEawtyl6YxK95G8GYo
t6LlEO8/zPn/axkJQr2f39t4B5Lsw8OrTBPL7/6jKP3bBF6DittfGLurKMvF+FwQ
f+8DXin48xct8mqfacgbjbQIY3jBzZkDOl+EBZQhzdBYhWd9YqADT+kbcoZ1IvKx
ig52TpyRMxqLv/KprjQqMCaZuQviRbhoywsxrRxRLu7La9Wm8AQ9m8WvsSSvriWj
Ai6iU79WGEpkq/iZBweP2Is0do66C3FgS3xtumWEranJnZafnQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBW1N+HcOR7V7nmV1+Ai9xqZ86KoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2M1MzIyODQtZjAxNC0z
NTBkLWI0MjctYzZhZGZlY2I2NTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBWJ+UKKNRgmQBeDAz2NnWFrQYo0V7eWmnmK9tcGBv8dCDvF8KLnBe/
eBRdwony/pA+co0IEH3veqMafBDsouAIrN3Oy1LDEK4OC5N1enZPhyJR6W0N7ql8
mbzAvaSjEpzH3Ah/6jKEtMFlP2HFPFAuev8CjP9HoHOZBhSzDU7QHZEzcx+cTTtA
AJn2AHTVWFcMPTX+EhAupY47aadpwJ1LFNXs0GHvhQjv6Kh27R5oMB6PnvA3eeUC
HhazNACaWIXDoJ3KAO7BFZNBgC5uHxeuQjrkxl2CMa35w6k/QLKgtsIpxxCCcA40
BQAE62qq7cTMq5AdKAVQKdvORKBrEx/p
-----END CERTIFICATE-----
Generated at Mon Apr 28 07:30:58 2025 by rpki-client