Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1db0510e-fa9f-3f0d-8c01-9a70f44b7005.roa
File:                     1db0510e-fa9f-3f0d-8c01-9a70f44b7005.roa (raw, json)
Hash identifier:          OB9ydbzDDeg8SUvoCTlKC639DfWqlpsikyuqCUSCpH8=
Subject key identifier:   AA:73:0A:FD:72:BD:F3:21:80:4B:43:94:EB:00:B1:C3:98:9B:B7:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769CC3D7AE72CF0AE26D7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1db0510e-fa9f-3f0d-8c01-9a70f44b7005.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396594
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:cc:3d:7a:e7:2c:f0:ae:26:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=c992c7e7-74ba-4afa-b1d6-aac11c1bbd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:07:54:05:38:57:22:51:58:3b:88:d2:0b:03:
                    2e:9e:61:e2:56:50:3b:80:a0:b9:7b:af:8d:b8:dc:
                    6e:80:e3:68:3b:0e:58:c9:63:24:db:1b:05:23:a0:
                    2c:56:cb:c8:96:58:aa:e1:a8:88:85:1c:d4:49:cc:
                    76:71:a8:1a:0d:30:b4:c4:f5:e7:d9:41:0c:e6:73:
                    d4:d2:c0:6a:a4:83:9d:e0:87:98:e5:44:2c:50:f2:
                    57:a9:bd:36:fc:a7:49:21:2b:09:4c:2e:f7:c4:64:
                    3e:57:38:44:80:0c:bd:78:f4:21:79:2c:3f:a8:0e:
                    9b:b0:4e:4d:c3:e5:a1:3b:66:16:ce:98:be:60:16:
                    ac:54:99:9a:bb:81:8a:1b:80:ba:b1:66:55:c0:1b:
                    24:35:c9:7f:79:3c:31:ee:e3:a3:38:5b:60:da:a8:
                    4d:41:5b:d7:71:9f:9f:33:91:6b:b8:09:51:8a:8b:
                    90:e0:33:05:9d:ae:fd:11:e0:db:39:a0:42:13:e4:
                    70:fe:9e:09:f4:1d:99:a7:76:80:ac:8b:d1:0d:f0:
                    d0:17:2b:67:fd:88:b5:77:56:fb:93:b9:7b:bc:fb:
                    7c:fd:62:c9:d7:3e:9b:f9:5d:fb:13:fb:51:ce:4a:
                    6c:34:c0:5b:94:7c:93:2c:9b:8c:f4:74:57:36:2a:
                    bf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:73:0A:FD:72:BD:F3:21:80:4B:43:94:EB:00:B1:C3:98:9B:B7:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1db0510e-fa9f-3f0d-8c01-9a70f44b7005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:56:19:8a:c5:fb:48:97:d0:90:7b:85:31:34:dd:2c:03:22:
         a1:d7:5d:f0:a8:45:0a:4e:3a:a9:40:4e:ac:62:b2:c4:0a:b8:
         44:2e:22:1b:65:41:00:a8:df:0a:4d:88:23:e5:a8:ce:e0:2b:
         2d:c2:59:30:9c:48:ea:c4:c6:89:f9:37:47:d3:39:05:38:be:
         b0:40:ae:ee:e7:c7:12:96:6c:8b:5c:40:ee:46:03:f0:52:11:
         da:54:25:13:70:64:bc:ec:cb:58:ec:dd:56:a1:f2:fc:65:5e:
         1a:7d:39:01:f7:b0:3f:df:2d:b1:29:db:75:d0:df:2c:2f:01:
         5d:36:7e:83:e7:09:8b:3f:62:2e:24:0e:4e:6d:d0:fa:42:24:
         9f:9a:74:30:88:08:75:c1:71:64:c6:b9:9e:8b:bc:89:ae:1b:
         62:14:58:0c:90:da:6c:01:80:46:aa:05:8b:35:eb:54:b7:6a:
         de:b3:75:f4:07:c3:90:f3:25:18:c9:94:92:94:99:12:37:e0:
         be:3b:95:98:06:10:1c:03:1f:6c:ef:89:a0:70:02:6c:f7:1e:
         26:bb:23:49:16:59:29:2b:6b:1c:47:25:91:23:78:78:fd:89:
         44:89:67:75:85:b8:52:3d:b6:ae:96:3b:b6:9f:b0:4e:a1:7e:
         23:25:82:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:25:52 2025 by rpki-client