Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c72c18fa-2d16-3b1b-9ca1-8811c411d150.roa
File:                     c72c18fa-2d16-3b1b-9ca1-8811c411d150.roa (raw, json)
Hash identifier:          7++N9UrpZ/Csnqoivqu89obdurUq9Xlh5g77AtVfrE0=
Subject key identifier:   39:80:5E:40:A6:1A:65:0C:29:C1:3B:54:F9:1A:D4:90:3A:13:C3:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C43ABB5195877EDC6A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c72c18fa-2d16-3b1b-9ca1-8811c411d150.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     27544
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c4:3a:bb:51:95:87:7e:dc:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=f3915c39-9477-4e9b-ac8a-aca66a4ea05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:1e:21:f9:57:04:d3:35:5e:6a:1d:b7:f0:
                    16:0a:25:dc:c8:7e:c6:01:03:3e:04:a7:6c:bd:50:
                    45:5f:96:fc:99:9a:a4:26:a4:6b:19:d9:31:ff:62:
                    d7:f8:81:30:26:93:ff:e5:2a:29:a6:92:57:a3:b7:
                    57:82:d0:cc:d1:39:eb:45:1e:8f:1f:f8:c2:8b:d4:
                    3f:58:19:dc:4e:8c:c1:63:0b:2e:fb:f8:e2:2a:20:
                    df:2f:26:6e:52:66:6d:c7:ef:49:f0:d9:f9:5e:e6:
                    b6:e7:a4:04:9f:cb:57:c3:4a:a1:01:de:05:a2:e4:
                    b2:1f:63:d0:32:ab:93:b6:be:8c:aa:8f:c8:6e:4a:
                    24:bf:4a:ff:1c:d9:9a:1b:b0:70:bb:09:94:9d:c1:
                    16:53:2e:8f:8a:ba:cf:cc:6d:2f:60:0e:f2:31:2c:
                    29:77:ec:61:e2:b9:df:d4:e6:a4:f1:10:d1:84:14:
                    b3:30:d0:cf:94:88:9d:bb:98:03:11:66:67:31:eb:
                    af:02:a7:1a:60:85:e7:a6:cd:42:dd:5a:81:22:48:
                    13:ab:d5:cd:bc:d4:b6:a0:14:b3:b6:58:8f:c4:72:
                    42:53:16:14:16:56:13:04:39:f5:da:43:4b:89:78:
                    c1:e4:a5:74:13:ae:0d:92:9b:7c:fc:f7:9a:4d:bd:
                    a4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:80:5E:40:A6:1A:65:0C:29:C1:3B:54:F9:1A:D4:90:3A:13:C3:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c72c18fa-2d16-3b1b-9ca1-8811c411d150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:bd:d7:03:b0:03:74:fe:0b:88:f5:34:2b:29:95:1e:46:ff:
         c4:61:02:b7:e1:81:3d:9a:e1:40:67:80:60:33:12:c0:6e:c6:
         a7:ff:30:d7:42:86:2b:7a:87:25:a3:6b:ba:1f:04:e1:74:8b:
         3e:bc:9e:ac:cb:85:f8:68:2d:6b:7e:01:fd:5e:4d:0d:4d:10:
         49:e7:73:d9:1a:41:08:33:f0:6d:12:62:1d:1d:1d:ec:fa:2d:
         b2:17:38:aa:33:8f:7c:70:c1:fb:f5:00:7d:5b:56:f8:11:9e:
         60:47:5c:fc:42:51:73:fd:5b:16:e5:98:6c:16:32:da:3a:dd:
         33:e1:20:3e:36:9b:d2:bb:d0:97:a6:92:07:aa:dc:67:3b:a8:
         bb:8a:e2:72:ed:7c:d3:d3:d2:77:c9:69:a8:09:5f:4f:cb:ff:
         32:33:1d:23:62:42:1b:76:c9:dd:87:98:a1:dc:ab:74:1e:17:
         92:09:4f:2d:20:46:28:b2:d0:05:49:b9:7d:9b:04:df:52:c7:
         36:a4:f0:ba:9a:be:b6:cf:97:06:3f:43:8a:18:4f:22:fb:09:
         ae:6c:09:c8:6c:36:27:03:4c:21:c3:3c:7d:b1:69:28:98:7d:
         3c:e7:fa:7b:23:22:a1:d2:be:83:5e:e4:9e:d2:aa:2a:09:ee:
         d0:aa:96:5e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacQ6u1GVh37caoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZjM5MTVjMzktOTQ3Ny00ZTliLWFjOGEtYWNhNjZhNGVhMDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7QeIflXBNM1Xmodt/AWCiXcyH7GAQM+BKds
vVBFX5b8mZqkJqRrGdkx/2LX+IEwJpP/5SopppJXo7dXgtDM0TnrRR6PH/jCi9Q/
WBncTozBYwsu+/jiKiDfLyZuUmZtx+9J8Nn5Xua256QEn8tXw0qhAd4FouSyH2PQ
MquTtr6Mqo/Ibkokv0r/HNmaG7BwuwmUncEWUy6PirrPzG0vYA7yMSwpd+xh4rnf
1Oak8RDRhBSzMNDPlIidu5gDEWZnMeuvAqcaYIXnps1C3VqBIkgTq9XNvNS2oBSz
tliPxHJCUxYUFlYTBDn12kNLiXjB5KV0E64Nkpt8/PeaTb2kTwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDmAXkCmGmUMKcE7VPka1JA6E8NbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzcyYzE4ZmEtMmQxNi0z
YjFiLTljYTEtODgxMWM0MTFkMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAXvdcDsAN0/guI9TQrKZUeRv/EYQK34YE9muFAZ4BgMxLAbsan/zDX
QoYreoclo2u6HwThdIs+vJ6sy4X4aC1rfgH9Xk0NTRBJ53PZGkEIM/BtEmIdHR3s
+i2yFziqM498cMH79QB9W1b4EZ5gR1z8QlFz/VsW5ZhsFjLaOt0z4SA+NpvSu9CX
ppIHqtxnO6i7iuJy7XzT09J3yWmoCV9Py/8yMx0jYkIbdsndh5ih3Kt0HheSCU8t
IEYostAFSbl9mwTfUsc2pPC6mr62z5cGP0OKGE8i+wmubAnIbDYnA0whwzx9sWko
mH085/p7IyKh0r6DXuSe0qoqCe7QqpZe
-----END CERTIFICATE-----
Generated at Sat May 10 23:27:47 2025 by rpki-client