Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e8b71ee-ab98-314c-bd02-b5e92eeb9d26.roa
File:                     8e8b71ee-ab98-314c-bd02-b5e92eeb9d26.roa (raw, json)
Hash identifier:          3BLolsnjboY2nhZVPXGzVBSpGwnxuj0g8sS1egJmZWc=
Subject key identifier:   B4:65:3B:10:78:67:88:B5:10:1C:7C:64:62:5C:44:B1:78:5A:9D:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AFDB7DD4336C1C2CE2600800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e8b71ee-ab98-314c-bd02-b5e92eeb9d26.roa
Signing time:             Tue 29 Apr 2025 12:42:32 +0000
ROA not before:           Tue 29 Apr 2025 12:42:32 +0000
ROA not after:            Mon 28 Jul 2025 12:42:32 +0000
asID:                     396614
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:db:7d:d4:33:6c:1c:2c:e2:60:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 12:42:32 2025 GMT
            Not After : Jul 28 12:42:32 2025 GMT
        Subject: CN=b2637c3c-beb4-4251-8ebb-d4bb8a23c51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:75:de:aa:1c:56:bc:15:1e:b4:8b:c9:81:
                    af:b9:2c:a4:f3:4f:f8:22:84:51:76:a5:f9:8f:e3:
                    04:3a:b8:28:fc:25:a2:b6:59:08:79:ed:f7:dd:b9:
                    ce:a0:61:20:f1:28:ea:a1:cb:ba:8c:21:9e:5d:44:
                    d5:3c:20:d6:92:0d:dd:f7:b5:39:f9:5f:5b:9b:56:
                    39:9b:ff:98:2d:51:7d:a5:12:2e:ca:1e:01:72:90:
                    23:91:ea:82:46:08:66:8b:7c:f3:f7:21:16:66:c2:
                    99:9f:bf:ad:c0:aa:f2:f1:01:46:d0:cd:e2:85:53:
                    e8:0d:16:b4:b5:31:c5:76:86:25:5c:f8:c3:67:1e:
                    f6:36:df:9f:45:ab:92:2e:99:8a:1d:24:74:25:c3:
                    67:1b:c3:95:cc:bd:86:af:e8:93:f8:c0:ac:23:af:
                    e7:58:e8:53:c9:88:09:f9:28:71:1b:a7:18:3f:26:
                    2b:f7:68:d1:e7:a5:22:1d:13:b3:0c:87:a3:e0:21:
                    c7:b4:78:b4:3a:b5:c4:da:7a:ea:8b:5e:e3:1b:2f:
                    f9:44:22:19:86:48:62:28:b0:e6:25:f2:45:b5:07:
                    bb:b7:62:c7:8b:db:cd:d3:b0:d0:7f:b6:64:67:84:
                    c4:a8:c1:f4:4e:0b:1b:68:68:1f:dc:85:2c:61:c0:
                    17:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:65:3B:10:78:67:88:B5:10:1C:7C:64:62:5C:44:B1:78:5A:9D:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e8b71ee-ab98-314c-bd02-b5e92eeb9d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:75:8f:30:c7:f6:2f:e9:18:7c:d4:47:bc:17:0b:45:0e:ce:
         10:5f:96:e0:a0:e3:22:3e:f1:2e:80:cd:f0:18:db:16:9b:da:
         80:72:6c:60:e2:57:de:3a:fc:11:2b:92:b1:14:6d:22:7b:e0:
         e7:4e:4b:d3:f5:7e:91:af:33:c9:39:c1:5c:97:07:6e:18:11:
         2c:fd:9c:a5:20:56:0e:77:c5:b5:ab:f5:13:42:b2:94:af:a7:
         3b:5e:24:c1:24:c8:98:f0:e7:0d:a6:2e:cc:3d:aa:13:f9:c2:
         5d:84:ae:d0:9c:b1:c8:78:15:ad:a5:4e:0d:2d:47:23:4e:45:
         9b:92:32:44:65:01:1f:ab:f6:4f:c5:bc:2f:a9:32:d5:8b:7b:
         c2:6e:65:75:e5:88:97:88:a5:d2:a4:31:4a:78:f9:78:54:57:
         bf:55:ea:3e:a3:a2:f0:da:59:d2:bf:68:43:ae:69:fd:01:09:
         a7:a5:06:d4:8f:7f:13:8c:f2:ad:fd:0b:cf:d3:a2:61:83:68:
         62:21:1c:c9:fd:c0:48:28:88:da:b6:81:ae:02:89:11:47:71:
         15:19:f5:96:13:55:ec:4a:1e:a2:e3:e0:d7:1e:27:20:a0:c4:
         a9:6a:7e:26:0c:d8:b4:47:ae:0d:46:6a:53:36:f8:10:b6:47:
         82:3e:1a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:11:52 2025 by rpki-client