Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4adac280-c260-3938-9a5e-126bef2a374c.roa
File:                     4adac280-c260-3938-9a5e-126bef2a374c.roa (raw, json)
Hash identifier:          5IapxhDRwmzYGLTR46OxLAjOYTW3VDX3dZ2zv2tpRLg=
Subject key identifier:   7A:78:A4:03:C3:DC:DA:FC:36:B4:AF:84:79:28:1E:FC:CE:4F:BC:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AFDB7C217A5E66D267E0B780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4adac280-c260-3938-9a5e-126bef2a374c.roa
Signing time:             Tue 29 Apr 2025 12:42:31 +0000
ROA not before:           Tue 29 Apr 2025 12:42:31 +0000
ROA not after:            Mon 28 Jul 2025 12:42:31 +0000
asID:                     36624
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:db:7c:21:7a:5e:66:d2:67:e0:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 12:42:31 2025 GMT
            Not After : Jul 28 12:42:31 2025 GMT
        Subject: CN=d3a5ee44-46f9-40e8-ad57-30b492626c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7b:90:c8:da:90:bb:31:de:b2:55:22:84:b3:
                    7a:27:12:81:e3:c1:e2:da:28:51:f8:51:d2:6d:7f:
                    52:01:7f:d0:8d:bf:ae:59:01:98:e1:f6:c5:4c:40:
                    3d:19:f4:d8:98:2a:53:e2:ac:5e:f3:68:5d:62:3b:
                    42:ce:c5:84:c4:e2:4f:d6:1e:81:12:da:32:02:4c:
                    08:12:c2:54:09:f4:46:e6:a2:e2:33:87:24:e9:37:
                    9d:65:68:8e:fe:a2:53:ea:b0:f0:b5:66:ec:a3:62:
                    d2:46:f4:48:6f:0d:49:06:c4:30:24:7c:85:db:c2:
                    98:bc:47:84:e7:76:db:2d:98:6a:f9:3a:a2:67:64:
                    fa:88:de:69:91:65:4e:b5:a2:59:ff:f4:87:ef:a1:
                    ab:88:17:f8:1f:1f:6c:e8:b2:4d:84:78:d1:d0:2e:
                    f5:9e:62:99:37:b5:67:07:4e:83:6b:52:1a:15:70:
                    8e:f5:72:c2:e6:dd:c1:5a:44:d9:f5:be:09:5d:d6:
                    be:db:63:7e:88:92:fd:0a:92:29:b9:22:31:a5:96:
                    3b:4a:e5:d3:d7:56:81:6a:78:54:79:ea:33:27:1d:
                    08:8c:38:7f:b5:0d:3f:86:e9:ae:8b:5b:b9:01:e5:
                    38:78:88:84:cf:87:d4:6d:2b:fb:50:86:ef:ad:89:
                    c4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:78:A4:03:C3:DC:DA:FC:36:B4:AF:84:79:28:1E:FC:CE:4F:BC:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4adac280-c260-3938-9a5e-126bef2a374c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:bd:92:b5:64:86:df:1e:ca:b6:44:86:b6:e0:48:b9:63:e4:
         9b:56:32:75:86:3a:09:be:f8:31:dd:ad:30:09:a8:bf:eb:79:
         a2:ee:64:b1:15:49:a9:70:37:1b:1a:ff:35:5f:23:51:04:b3:
         eb:ed:47:95:af:5f:ce:43:0a:1d:80:b6:12:ad:ac:18:b4:8c:
         02:8c:ad:d3:ad:a9:4d:25:94:c4:40:33:9c:3c:9f:d6:39:96:
         3e:d8:69:55:9e:b2:7b:a9:24:29:d4:e9:8d:5f:a3:9b:12:d4:
         b6:7e:95:f4:bf:29:6c:36:f5:af:e6:97:1b:a6:ed:f8:59:78:
         59:36:aa:21:bc:c9:5d:7a:3f:b2:1f:a2:7e:3f:1c:f7:cf:7a:
         e8:b4:b2:57:ee:12:7a:8c:b9:1d:52:d3:71:ec:84:71:02:dd:
         dd:77:31:91:0b:e9:2d:1d:e8:4e:05:d3:d1:a6:95:c6:8e:90:
         09:96:5a:39:83:bd:fa:51:64:56:95:65:86:42:e9:e0:15:d9:
         d2:aa:a6:15:05:69:b7:7a:29:4f:6e:94:d2:33:70:89:12:f9:
         50:a0:60:fa:77:58:43:25:06:22:76:92:df:90:50:90:58:cc:
         c8:36:c0:3c:2f:10:fc:40:b0:18:04:c6:d9:ed:de:32:05:fe:
         f4:da:45:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:05:48 2025 by rpki-client