Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70e98abe-00e3-3c6a-a2ef-f38c089bfce9.roa
File:                     70e98abe-00e3-3c6a-a2ef-f38c089bfce9.roa (raw, json)
Hash identifier:          3KfY/0MDJyao3gcMguaXPxzMz4yRXdLiFARdPQruLoY=
Subject key identifier:   67:A4:8F:84:26:71:B0:B7:F1:1E:13:97:29:EC:43:EA:1D:AB:FC:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AFDB7FC0FB1B227F37BC4CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70e98abe-00e3-3c6a-a2ef-f38c089bfce9.roa
Signing time:             Tue 29 Apr 2025 12:42:33 +0000
ROA not before:           Tue 29 Apr 2025 12:42:33 +0000
ROA not after:            Mon 28 Jul 2025 12:42:33 +0000
asID:                     396565
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:db:7f:c0:fb:1b:22:7f:37:bc:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 12:42:33 2025 GMT
            Not After : Jul 28 12:42:33 2025 GMT
        Subject: CN=954599bc-d1aa-4113-9fb2-3fc73cad9c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:97:b6:ff:bf:98:11:c0:12:1a:65:d2:e6:
                    79:3b:eb:ad:7f:55:3d:c9:c0:33:46:3b:aa:de:a3:
                    68:c4:44:86:09:8c:9a:2c:75:f9:32:ea:e5:52:24:
                    b5:cb:9b:8f:8f:eb:57:57:fb:53:af:33:88:c4:cf:
                    57:77:d3:97:9b:87:ef:7d:95:fa:46:f8:99:3a:b1:
                    98:a4:95:c9:80:a7:e6:a0:f4:90:8d:18:86:1e:f2:
                    11:8b:41:2f:a3:8b:29:38:fe:84:a0:9f:8b:5c:ec:
                    2f:c5:87:11:bc:8e:84:a4:22:27:7d:f1:cf:fc:aa:
                    a2:09:0d:58:27:ea:81:e9:b1:6b:b5:93:5d:f5:88:
                    f4:a0:05:5c:ef:bb:85:36:c0:d8:3e:ac:bf:a7:4e:
                    92:64:55:81:93:c6:61:7e:98:bb:b0:96:bc:60:25:
                    a2:11:a1:61:4b:14:d7:ed:b6:b3:5f:ac:f7:9d:01:
                    af:ec:69:2c:75:5c:7d:37:cd:df:69:64:ab:fd:66:
                    a6:a9:7c:f2:48:f5:0c:58:77:65:c4:e4:1e:4b:12:
                    d4:1d:de:2c:83:fe:27:d1:12:66:43:a5:d9:69:e7:
                    6f:27:7a:e9:b4:fb:93:98:71:19:47:c7:1e:33:78:
                    b0:72:d6:fc:5e:93:19:7e:1c:f0:d5:be:9d:75:91:
                    0a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A4:8F:84:26:71:B0:B7:F1:1E:13:97:29:EC:43:EA:1D:AB:FC:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70e98abe-00e3-3c6a-a2ef-f38c089bfce9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3a:83:6d:06:5a:cc:d5:92:fd:cb:4c:af:a7:90:2b:2f:37:
         61:6a:ad:89:10:f1:3b:d1:1a:61:68:12:71:1a:5a:d8:f0:54:
         6c:dd:8c:e9:cc:a4:c7:48:2d:c1:ea:c6:8b:d5:7d:e4:73:c1:
         60:db:be:ba:a7:ff:ae:85:b5:8d:f5:50:7b:ff:f6:c8:9f:6f:
         ae:19:6d:3e:70:fe:c8:6c:83:b6:09:6c:7f:c5:58:25:4a:c7:
         6e:d0:70:11:38:c1:6e:7b:69:7a:97:59:da:fc:b5:99:bf:73:
         5f:5f:56:d2:86:65:dc:df:9b:ed:23:52:b9:21:ab:83:73:7b:
         af:11:9a:ca:a4:d4:fa:40:61:0b:1c:f3:1c:26:32:86:b7:cc:
         1b:05:bd:9a:97:a3:e5:89:31:6f:f8:7c:c0:96:af:48:fb:ba:
         86:34:5f:f3:8a:68:be:65:74:41:e9:0a:9e:fd:9a:1a:ad:64:
         b9:03:c9:df:bc:aa:d8:c1:8c:51:c6:54:30:7d:89:16:ee:d7:
         9e:94:df:92:cd:cc:7b:25:16:a4:98:50:dd:9a:35:89:b4:40:
         98:f4:30:e9:06:40:0e:0b:ef:b2:5d:ae:a7:68:c9:57:82:25:
         11:60:bc:67:7e:35:e1:e6:e3:61:6b:23:56:61:04:30:27:48:
         ad:d3:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:20:44 2025 by rpki-client