Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3337df80-a721-3a71-a21b-9cd4c5ec1046.roa
File:                     3337df80-a721-3a71-a21b-9cd4c5ec1046.roa (raw, json)
Hash identifier:          FbE3ti6y5NMz8/cGasEkxyso8SNkPtR5Jw0clQcxL/0=
Subject key identifier:   FE:10:60:BB:71:44:CF:C5:E5:27:86:C4:C9:C3:2B:64:0A:72:98:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C1DC1A0BE539ABF5C080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3337df80-a721-3a71-a21b-9cd4c5ec1046.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396545
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c1:dc:1a:0b:e5:39:ab:f5:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=ffb15d13-6cec-4af1-8c78-ab3243bbfd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:2e:85:30:19:a4:9e:dc:87:78:32:6e:fa:
                    fd:4f:27:c7:0d:b2:c3:00:ef:c3:92:e1:42:0a:f7:
                    f2:40:47:23:d3:0e:17:56:fe:09:72:47:26:c4:14:
                    2a:b3:bc:6d:23:66:1b:8f:aa:b2:34:f1:7c:05:7f:
                    f0:61:e7:16:77:e3:5c:31:b7:6e:71:0c:a8:ee:b5:
                    13:1d:c9:0a:27:e2:c6:41:ea:74:19:ca:ee:e8:3b:
                    7e:61:4f:52:e0:b0:af:f3:e7:cb:a7:d9:88:7d:61:
                    94:8e:f4:45:93:d5:ab:39:b4:52:12:43:03:18:17:
                    b9:35:6a:51:80:a7:f9:06:09:f4:42:de:60:e9:07:
                    fe:ec:08:cc:14:ff:ae:f9:91:ab:9f:a2:fd:6d:98:
                    cf:36:8e:a0:ab:1d:41:7e:26:a6:28:6f:13:47:d2:
                    27:10:f6:de:b5:8a:16:24:9e:ff:ae:32:ea:08:9f:
                    9e:26:03:2c:4c:bb:c9:32:20:0f:e1:64:1f:d0:02:
                    55:b5:33:17:10:ca:e8:90:2d:48:5d:e6:5f:76:8f:
                    df:23:33:6e:ca:34:aa:27:e2:e3:be:95:cb:d2:80:
                    1a:66:f0:57:d0:84:73:cc:01:94:1d:32:be:14:4d:
                    25:8d:0e:e9:f4:fd:9b:d5:e2:c4:7a:3a:16:5d:17:
                    82:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:10:60:BB:71:44:CF:C5:E5:27:86:C4:C9:C3:2B:64:0A:72:98:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3337df80-a721-3a71-a21b-9cd4c5ec1046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:1e:f0:ff:56:7c:a7:8d:e8:be:b1:9f:ae:85:4f:fb:e7:
         6b:a4:53:d5:c2:52:2b:38:f9:71:9b:21:6f:61:78:18:9f:3d:
         a4:04:57:72:21:6a:e4:82:2a:9a:fe:df:aa:6f:59:8a:50:e1:
         00:cb:50:9a:02:bd:6e:3c:c1:31:bb:81:47:8f:ff:81:ba:34:
         f2:34:2d:f9:e8:e6:f5:7f:cf:fe:fe:8c:f2:34:68:c4:72:6e:
         9e:c5:11:68:3d:1b:57:60:6b:36:9d:2f:79:c8:0e:30:50:6d:
         0f:11:e2:f3:3e:a5:ca:de:8d:55:89:1f:98:68:9a:0e:03:95:
         99:19:1a:f9:73:08:14:08:49:87:e4:0c:a7:6e:92:38:77:04:
         09:a5:44:71:86:13:9c:3e:50:86:61:1f:e8:5c:80:06:a3:08:
         32:99:77:e4:3e:8d:d4:f1:76:89:00:ad:d7:2c:05:df:4b:f0:
         79:88:61:77:8e:51:72:a8:21:ac:79:b0:98:90:e8:c3:6b:67:
         f2:34:20:8f:99:85:11:87:42:8a:ee:07:1f:d8:e1:85:1f:44:
         fb:4d:92:5b:8d:04:22:1d:a8:65:e8:82:68:c0:b2:e0:03:4f:
         a9:6b:cb:b8:e6:e4:a8:24:4e:74:67:9d:37:d5:b8:fb:13:d8:
         9e:a8:2d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:35:34 2025 by rpki-client