Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79760ca4-4265-3041-936a-1d8cdf1d926a.roa
File:                     79760ca4-4265-3041-936a-1d8cdf1d926a.roa (raw, json)
Hash identifier:          i1XtmP4ybJPfI77EVdAJ+fU0eWzv/WSE5k4WkYIXGIk=
Subject key identifier:   C7:11:22:FF:86:DD:6F:E2:8C:0C:87:55:16:9D:57:93:55:A2:18:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AFDB7E5CD70C944F69B20680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79760ca4-4265-3041-936a-1d8cdf1d926a.roa
Signing time:             Tue 29 Apr 2025 12:42:32 +0000
ROA not before:           Tue 29 Apr 2025 12:42:32 +0000
ROA not after:            Mon 28 Jul 2025 12:42:32 +0000
asID:                     396593
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:db:7e:5c:d7:0c:94:4f:69:b2:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 12:42:32 2025 GMT
            Not After : Jul 28 12:42:32 2025 GMT
        Subject: CN=5ed89a6b-972a-4c00-b76c-442ebfc71f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7d:dd:46:61:0a:54:b8:b2:ad:70:cd:72:ff:
                    f3:88:3a:96:09:85:8f:17:91:f8:fb:f0:58:9b:4b:
                    90:89:88:f1:7d:c4:97:52:11:a9:52:8d:0d:03:9b:
                    eb:cd:9b:02:1e:c0:06:1c:c1:4e:1f:e8:0b:0f:29:
                    3f:02:2d:07:f3:29:17:d2:f5:e3:cc:1c:de:6c:77:
                    4b:4a:7b:fa:27:38:e0:28:e2:1d:b1:27:c9:19:5a:
                    cd:12:c9:ea:4f:1e:1f:1c:56:1d:b8:73:47:26:a9:
                    f6:0a:b5:19:fd:d9:fa:42:f8:d6:19:db:1e:bd:2a:
                    0a:99:40:72:3e:6a:30:6b:45:d7:16:d9:4c:85:00:
                    86:52:8f:46:8c:62:7d:38:1c:22:89:9f:5a:b9:82:
                    ca:70:65:a9:91:d1:83:c8:5e:bc:0f:2f:7c:34:6c:
                    f5:ba:cf:20:2b:03:b4:1c:82:9f:15:60:94:7e:42:
                    85:4d:03:4e:03:1c:34:0d:3b:b4:bb:1c:09:7b:06:
                    62:ed:f6:b7:0c:a1:89:db:c0:45:78:e5:b1:ce:ba:
                    45:8c:4f:5a:ee:85:4d:90:6e:f6:21:d2:bf:94:d1:
                    01:e8:8c:6d:7b:16:e0:75:f8:e4:58:76:f6:86:38:
                    b8:f5:58:e0:6f:f1:53:a0:70:0c:86:b9:40:2b:3f:
                    18:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:11:22:FF:86:DD:6F:E2:8C:0C:87:55:16:9D:57:93:55:A2:18:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79760ca4-4265-3041-936a-1d8cdf1d926a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2a:dd:48:b3:5d:c4:f6:e2:d8:0c:f9:23:ba:e4:55:f8:1d:
         9b:a4:61:0f:16:44:8e:ce:03:40:40:95:00:11:09:84:92:df:
         d9:aa:01:f2:c3:43:20:ee:35:da:e5:28:95:6b:92:96:d0:f1:
         7e:7a:4f:2a:d0:87:06:9b:60:41:d2:6c:dc:36:f4:22:42:73:
         8e:c5:5b:85:38:a1:09:33:46:57:f8:58:37:7e:9f:58:36:cf:
         93:e1:2a:62:be:45:f3:cc:e5:7a:8b:ef:54:c0:c6:b4:a7:57:
         18:4e:c7:31:ae:81:58:3c:45:a2:b6:e1:6c:06:1d:a5:30:09:
         78:35:c0:eb:9b:dc:38:4d:cb:45:4e:05:48:2d:dd:2e:53:e9:
         83:c3:22:ba:14:41:e8:fd:8a:9c:4f:78:8c:a4:c0:3a:ea:82:
         42:35:4e:99:0b:a9:11:29:5f:76:cb:0a:ff:f4:cf:31:ba:fe:
         1b:df:ed:39:db:24:5c:19:30:4b:8c:2e:f9:10:ae:66:2f:49:
         2d:00:ec:28:bc:4a:d1:d9:5a:b1:e0:4a:d2:29:c7:c6:45:7f:
         4b:9d:96:78:0c:ec:b2:95:49:28:b5:c3:2d:0c:0e:47:28:85:
         ea:0f:4a:cb:8a:a0:d3:32:86:4c:66:3b:fb:4c:9c:ce:5f:7a:
         3d:b9:ba:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv235c1wyUT2myBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQyOTEyNDIzMloXDTI1MDcyODEyNDIzMlowLzEtMCsGA1UEAxMk
NWVkODlhNmItOTcyYS00YzAwLWI3NmMtNDQyZWJmYzcxZjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH3dRmEKVLiyrXDNcv/ziDqWCYWPF5H4+/BY
m0uQiYjxfcSXUhGpUo0NA5vrzZsCHsAGHMFOH+gLDyk/Ai0H8ykX0vXjzBzebHdL
Snv6JzjgKOIdsSfJGVrNEsnqTx4fHFYduHNHJqn2CrUZ/dn6QvjWGdsevSoKmUBy
Pmowa0XXFtlMhQCGUo9GjGJ9OBwiiZ9auYLKcGWpkdGDyF68Dy98NGz1us8gKwO0
HIKfFWCUfkKFTQNOAxw0DTu0uxwJewZi7fa3DKGJ28BFeOWxzrpFjE9a7oVNkG72
IdK/lNEB6IxtexbgdfjkWHb2hji49Vjgb/FToHAMhrlAKz8Y9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMcRIv+G3W/ijAyHVRadV5NVohh+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzk3NjBjYTQtNDI2NS0z
MDQxLTkzNmEtMWQ4Y2RmMWQ5MjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIq3UizXcT24tgM+SO65FX4HZukYQ8WRI7OA0BAlQARCYSS39mqAfLD
QyDuNdrlKJVrkpbQ8X56TyrQhwabYEHSbNw29CJCc47FW4U4oQkzRlf4WDd+n1g2
z5PhKmK+RfPM5XqL71TAxrSnVxhOxzGugVg8RaK24WwGHaUwCXg1wOub3DhNy0VO
BUgt3S5T6YPDIroUQej9ipxPeIykwDrqgkI1TpkLqREpX3bLCv/0zzG6/hvf7Tnb
JFwZMEuMLvkQrmYvSS0A7Ci8StHZWrHgStIpx8ZFf0udlngM7LKVSSi1wy0MDkco
heoPSsuKoNMyhkxmO/tMnM5fej25ut0=
-----END CERTIFICATE-----
Generated at Sun May 11 00:22:20 2025 by rpki-client