Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3e54935-87ab-3337-b0a3-815b6773e535.roa
File:                     f3e54935-87ab-3337-b0a3-815b6773e535.roa (raw, json)
Hash identifier:          TCUIvGE6WDVxN5x+6OoaFSNcF8Z/DnDt+XlJMoDRvao=
Subject key identifier:   78:08:E7:6C:3E:2C:15:46:72:D9:97:97:2D:61:83:4A:79:98:E0:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C9BA9298D7BD2FFDFA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3e54935-87ab-3337-b0a3-815b6773e535.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396611
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c9:ba:92:98:d7:bd:2f:fd:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=f4c49472-e850-49a2-95c7-14217866bbf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:54:31:d6:fa:73:7c:51:3f:31:79:fb:a9:65:
                    47:81:a6:83:60:a3:32:1e:4f:08:13:13:52:0b:84:
                    97:70:7c:d3:e7:31:83:c6:fb:43:a5:7d:00:26:7e:
                    6f:91:ac:d1:d4:ab:66:a0:ae:cf:a5:89:c6:e6:6a:
                    cd:f8:17:b4:71:8a:76:90:9a:fe:c3:74:61:de:ca:
                    e6:55:3c:64:e8:9e:c2:77:7c:c5:1b:53:cb:5d:12:
                    83:80:07:3a:ad:52:28:4e:c2:29:01:63:7a:1f:c3:
                    20:4a:d0:e7:14:25:59:59:0b:96:45:7d:c8:12:46:
                    e8:fc:56:97:4c:95:84:84:e8:23:c2:da:f3:cc:1c:
                    cc:cb:a5:61:ba:0b:f0:8e:81:71:2c:2a:dd:1d:ed:
                    02:79:7e:ba:d3:9e:67:e1:40:5a:a1:d5:ac:da:c8:
                    da:42:ee:cb:16:1b:34:24:cc:c9:41:c3:d1:41:94:
                    58:87:92:a0:49:60:f7:ee:f8:81:70:bd:10:10:d6:
                    91:fa:ae:3d:00:d8:c7:98:35:d8:11:87:f4:90:2d:
                    cf:cf:6c:1d:93:a1:9b:1c:9c:d9:54:1f:fd:9c:c9:
                    47:a0:c4:3e:01:38:f8:aa:3c:8f:dd:cd:cf:15:bc:
                    6e:62:a2:9f:fb:2e:3d:cd:6e:c5:a4:29:74:fe:14:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:08:E7:6C:3E:2C:15:46:72:D9:97:97:2D:61:83:4A:79:98:E0:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3e54935-87ab-3337-b0a3-815b6773e535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f9:75:6e:11:c5:e5:ec:b6:94:9b:92:90:1f:7d:0d:55:93:
         33:55:4a:5b:62:90:02:41:b0:a1:85:a2:8a:9e:2b:f6:88:c6:
         7a:d6:6b:53:79:e0:4b:a2:98:10:71:f8:3e:a9:01:94:a6:fa:
         eb:4e:57:2a:0e:40:1b:2e:93:6f:c7:eb:f8:b6:7c:5e:ce:09:
         03:87:50:37:67:36:16:1d:7c:2e:1c:d9:0c:5e:7f:b7:ba:cc:
         37:bb:12:ee:3b:04:42:c6:57:31:58:53:54:47:d2:30:6c:54:
         41:66:1d:da:7c:ee:29:6f:fb:6f:42:72:1d:2d:fc:86:10:9d:
         ba:2d:b2:89:2e:8b:6b:36:e0:91:46:7b:c6:e2:09:11:d6:fe:
         e9:8b:65:2f:49:be:e7:e0:c5:52:43:69:25:23:91:c8:73:5c:
         9f:82:a8:54:11:5c:34:ed:92:96:7d:40:d8:f7:f7:10:50:29:
         0f:0e:4f:5a:94:75:fc:54:ef:b9:3d:79:7c:97:b4:e2:6a:ad:
         55:a0:a0:b9:80:e8:56:c9:f1:21:0d:fb:90:9e:c2:3e:95:ff:
         f7:54:16:60:b4:95:89:59:a2:d3:56:ee:c8:5f:af:45:c4:32:
         fe:d8:d8:0d:30:75:85:8e:ac:8b:b6:9f:8f:d1:65:ea:c2:7e:
         3a:8b:d7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:07:22 2025 by rpki-client