Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5941fed-11dd-3fcc-b87a-f6edfbbcc4b3.roa
File:                     d5941fed-11dd-3fcc-b87a-f6edfbbcc4b3.roa (raw, json)
Hash identifier:          L8kU9+JReuu9JjghMWriv6JACQVAJqhDE/mEBZUdDxI=
Subject key identifier:   A0:E3:7D:40:60:23:14:3D:87:56:1C:34:5E:24:8D:31:7D:A4:E8:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769CBAEEEEAA4C065A39E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5941fed-11dd-3fcc-b87a-f6edfbbcc4b3.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396557
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:cb:ae:ee:ea:a4:c0:65:a3:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=d8306fea-f403-4be5-ab62-5fb3c7baa9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:fd:56:dc:0d:01:fd:0c:9f:5e:1f:92:1c:
                    11:42:fe:9b:31:8f:39:1d:a8:cc:f7:7d:4b:ce:fb:
                    51:7c:27:a7:94:30:d3:ac:4d:7d:43:5f:a7:65:18:
                    3e:c7:34:7e:3b:39:ec:c9:64:e1:55:ae:e6:78:0c:
                    51:65:9b:7f:73:49:0f:83:02:16:ad:72:93:6a:77:
                    f0:7e:60:c1:dc:5b:79:43:5f:5f:ea:02:38:55:0b:
                    e9:9f:2b:06:15:d9:4e:fd:b1:4c:1d:b7:42:7c:e8:
                    b0:16:18:1d:60:b1:2e:93:d4:80:98:e4:d6:bf:35:
                    d2:b5:42:fe:3f:ed:83:19:5d:fe:d5:42:12:93:1e:
                    c5:00:71:e9:07:9b:e0:5a:15:35:cb:c7:55:c0:41:
                    3e:7d:49:19:ff:3e:43:49:ae:68:48:a2:3f:64:bb:
                    0a:43:8c:db:37:2b:f7:60:3c:7a:da:a3:d0:95:52:
                    17:e5:75:93:f3:7e:9d:d4:69:ca:a3:7a:2a:83:45:
                    15:c2:5a:72:9d:fa:75:b8:ed:22:c3:e3:e6:58:8f:
                    e8:ed:37:bf:6c:44:14:29:86:47:3f:6e:e0:b8:c7:
                    f5:83:8d:26:a1:a4:97:05:c6:18:6d:ba:77:f0:62:
                    b3:2b:53:e1:e8:36:2c:80:fc:fa:0c:42:48:76:7f:
                    d8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E3:7D:40:60:23:14:3D:87:56:1C:34:5E:24:8D:31:7D:A4:E8:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5941fed-11dd-3fcc-b87a-f6edfbbcc4b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:19:ea:cf:fd:c5:5d:99:71:63:27:a7:61:fe:e1:1f:ff:2d:
         0e:f8:e4:44:25:4b:5f:d9:61:e4:4c:34:b0:5d:51:00:6d:b7:
         5c:b6:8c:38:18:d6:8d:b8:23:be:d6:b7:cd:3b:62:4c:74:d1:
         d8:a1:66:69:ee:66:10:2b:b3:3f:0f:3f:ab:c1:10:92:e0:48:
         53:40:e0:07:85:1e:03:c8:7a:cb:9a:4f:52:c2:35:48:9d:8d:
         48:af:de:53:87:76:5a:43:f8:a6:ed:9a:41:44:95:39:96:e7:
         c4:30:35:9f:ef:ca:30:6a:fa:b1:8a:8e:e6:84:98:11:da:c1:
         ca:ce:fd:a1:a6:11:43:c9:2d:02:79:c9:48:b5:f8:36:37:ac:
         e7:38:90:62:07:8d:ff:85:64:8c:c3:12:23:db:1b:94:61:fb:
         bd:cf:0c:5f:38:74:6b:31:5c:9c:d7:5b:d5:d4:95:ae:5d:86:
         32:81:a1:79:06:20:b3:35:d3:77:d1:8b:3f:11:cb:42:91:20:
         25:fd:c0:87:c2:d8:6d:cc:45:94:83:64:b4:40:2b:25:16:c8:
         d5:bc:b9:bc:a1:68:50:69:5a:2f:8e:e8:4e:10:dc:27:d3:67:
         af:04:f2:eb:09:8f:60:fc:a6:e4:8c:5d:53:d9:5a:81:60:eb:
         82:28:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:19:54 2025 by rpki-client