Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31773f59-dfd2-3d61-9027-00c27a6b4b23.roa
File:                     31773f59-dfd2-3d61-9027-00c27a6b4b23.roa (raw, json)
Hash identifier:          jv8coiKCJGMBTvksYNzCKTnVUOdMFCibLg0qNyezEx8=
Subject key identifier:   AA:73:9D:F1:03:40:D0:C6:36:51:35:D3:47:7B:95:B2:A2:91:5E:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AFDB7FB1CC3E73BFCA8B0C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31773f59-dfd2-3d61-9027-00c27a6b4b23.roa
Signing time:             Tue 29 Apr 2025 12:42:33 +0000
ROA not before:           Tue 29 Apr 2025 12:42:33 +0000
ROA not after:            Mon 28 Jul 2025 12:42:33 +0000
asID:                     396568
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:db:7f:b1:cc:3e:73:bf:ca:8b:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 12:42:33 2025 GMT
            Not After : Jul 28 12:42:33 2025 GMT
        Subject: CN=c70d179a-4952-4c21-a262-912d2a8ebff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3f:e5:10:85:98:86:87:69:16:dd:81:1d:7d:
                    c5:ed:14:50:6f:0c:bb:dd:a0:88:92:d7:9d:c2:37:
                    b0:4b:78:08:76:e0:8d:b7:3e:d1:03:eb:61:90:24:
                    e1:3b:45:cb:5d:f8:1a:e7:a1:54:42:2c:67:7b:12:
                    fa:b9:2a:f2:6b:8c:a7:31:13:09:c7:f7:d8:64:cd:
                    c6:92:9d:31:d1:64:fa:25:95:46:4c:06:50:da:e8:
                    f5:62:36:d3:8e:31:5c:ce:2c:32:4c:88:e9:91:05:
                    e3:c0:53:4d:a0:67:ae:f4:9b:ec:cf:ae:71:1b:b6:
                    cc:18:ab:5b:4b:83:5a:5b:06:39:0f:8c:b6:45:43:
                    1a:e7:c3:55:2b:d9:fa:a2:b8:b2:f2:65:bd:4e:e0:
                    43:3e:5e:07:81:f1:86:3d:3b:9a:5b:95:19:4f:17:
                    3b:7b:f8:ef:d1:00:6b:e6:bd:27:e9:ef:fb:64:ce:
                    91:76:e5:ab:42:b5:7c:ba:1f:5c:f9:60:c3:21:c4:
                    8f:84:45:e8:e4:2b:75:3a:ab:16:40:83:44:69:e1:
                    8f:a7:1e:d0:83:0c:b6:02:24:de:88:1e:98:49:88:
                    cf:76:57:cb:34:fb:e6:cb:5a:02:2c:53:c8:53:59:
                    55:9c:a8:ca:1a:45:d0:71:63:f9:83:c1:ec:e6:e6:
                    d0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:73:9D:F1:03:40:D0:C6:36:51:35:D3:47:7B:95:B2:A2:91:5E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31773f59-dfd2-3d61-9027-00c27a6b4b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:51:06:40:b3:45:75:c4:4d:b8:a8:96:d7:40:ba:19:0e:d0:
         f5:b7:39:ae:06:27:04:3c:8f:0e:07:4f:06:f9:61:96:c1:17:
         c5:67:7d:a8:f6:d0:be:4a:39:c2:6b:5f:5a:b9:1a:6e:09:3e:
         90:de:1d:6e:95:29:53:54:bc:32:97:d3:7b:a6:43:7a:9e:84:
         9f:e5:44:25:3e:68:23:a6:3c:8e:b7:94:08:76:0e:d6:09:0a:
         63:e1:38:dd:1e:95:e1:d1:91:a0:ad:ac:92:72:15:44:54:35:
         ab:4e:04:82:e8:47:92:4b:89:3a:93:d8:28:b3:4c:91:98:ab:
         cd:bd:ff:67:b0:98:13:b5:50:f2:fb:5f:05:a3:14:bc:a9:00:
         6b:6a:81:53:38:66:eb:99:ee:8f:1f:ab:d1:a6:86:38:6b:63:
         47:0f:f6:b8:4c:89:a3:a4:cd:77:c3:87:0e:8b:e1:57:c2:8c:
         48:69:b4:b8:02:9a:07:ff:3d:0a:d3:5b:72:fc:3f:f6:22:13:
         8e:5d:2e:0b:37:20:04:58:aa:b6:1b:e8:6d:d1:6f:61:5e:61:
         dd:c2:52:12:84:82:08:f5:47:a1:b4:f9:3a:fd:41:e9:43:16:
         cb:5f:4b:b7:a9:ce:e6:d5:ca:0f:65:8e:c4:90:5e:fa:f2:fc:
         01:97:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:34:23 2025 by rpki-client