Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbb6ef0c-7f4b-3121-a668-30aee7473763.roa
File:                     bbb6ef0c-7f4b-3121-a668-30aee7473763.roa (raw, json)
Hash identifier:          9aUq1f64H18UKxoNYjC88WaAMAcu2VgCLEVsgbgBHWE=
Subject key identifier:   32:0C:AB:FA:BF:94:EC:E9:E2:55:77:E9:CD:FA:DD:72:91:6A:B9:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C14675E18595F216CD70
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbb6ef0c-7f4b-3121-a668-30aee7473763.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     397197
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c1:46:75:e1:85:95:f2:16:cd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=268859dc-a6f1-4952-be69-7ee0bbc6063e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:cd:25:85:c7:bb:b5:22:ff:a9:6d:1f:98:
                    e9:63:6a:a0:91:d9:55:fd:03:71:20:03:55:e2:a7:
                    70:5a:c5:a2:c2:09:bc:73:cd:52:ac:0c:2d:82:bb:
                    ff:41:ec:78:82:d8:fc:0d:10:00:33:16:81:41:58:
                    31:35:b0:8d:28:7b:a1:58:77:f0:43:80:db:36:e2:
                    1b:c4:20:3d:09:5b:12:fa:b4:c0:8b:d8:d8:57:93:
                    61:ed:f4:b4:c8:5b:ec:4f:d8:e4:cb:97:12:aa:64:
                    a3:1a:63:3b:bf:49:58:8a:1a:aa:08:d2:b4:b4:9a:
                    56:1f:2d:92:fb:66:15:95:93:2e:9d:32:e5:36:ab:
                    9c:40:51:63:8f:7b:e2:a7:a7:4b:57:49:1d:b6:b9:
                    0e:4d:21:1e:72:af:e3:00:90:2c:b7:d3:74:21:2c:
                    6f:3b:dc:2f:46:fb:bc:fd:3b:3e:f3:e6:b1:04:78:
                    88:58:df:32:ef:58:67:5f:23:e8:7b:d4:a3:0a:2c:
                    d8:64:cc:fd:a2:4e:1e:7b:f8:bb:6f:05:ce:9d:75:
                    8b:d0:62:f2:17:c3:8e:31:d8:2e:19:6f:6f:0b:55:
                    ca:e0:10:f7:c4:bb:4b:f0:9f:25:66:93:5f:7a:cd:
                    2f:fc:c7:42:4f:3a:de:e3:e3:33:77:f4:e1:b9:7a:
                    db:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0C:AB:FA:BF:94:EC:E9:E2:55:77:E9:CD:FA:DD:72:91:6A:B9:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbb6ef0c-7f4b-3121-a668-30aee7473763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:c3:c6:5f:b0:14:60:85:03:43:7c:64:ca:ce:9e:e5:42:3d:
         39:94:77:4e:30:02:72:b8:71:cf:33:6d:39:a6:79:63:71:d1:
         5c:db:ef:12:8c:2e:99:51:a4:88:63:53:4d:4c:c4:cd:3c:9c:
         ef:c0:52:1e:63:8c:b7:24:db:d7:89:ba:ea:b7:a8:b6:85:d0:
         bd:77:ba:05:8e:8a:65:7a:51:e1:0e:8a:92:5e:52:32:c1:60:
         35:98:36:44:a0:55:91:19:9a:15:74:f6:2e:25:b1:fc:4a:9c:
         12:0a:af:1a:0a:8a:ce:83:c9:de:56:f2:0f:51:12:09:9a:b6:
         a7:43:7c:f5:60:20:6c:99:6e:76:39:87:b2:ac:74:63:a7:13:
         ac:3f:ba:3c:9b:eb:70:1c:fb:52:a5:74:f2:38:12:d6:81:72:
         c2:99:f0:d2:e3:4a:65:f2:87:70:c3:1a:96:44:19:54:e3:b4:
         f7:36:b5:b3:f0:54:9b:ed:6a:ac:bf:cf:8d:b9:a4:bc:e0:fd:
         c7:2f:9e:bc:21:94:57:a1:03:63:79:da:48:1e:49:77:02:a0:
         68:63:2c:b2:1c:53:bd:19:f3:3e:04:cf:84:0e:fe:a3:6a:7e:
         f4:fc:79:67:58:06:bb:ba:82:2e:67:4a:9d:88:73:87:95:f9:
         6f:ba:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:34:27 2025 by rpki-client