Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee910d51-32a3-33b5-8c34-544fd8d8730b.roa
File:                     ee910d51-32a3-33b5-8c34-544fd8d8730b.roa (raw, json)
Hash identifier:          QAGD5uiirIGPaAL4vI6QjpyGG7wP6SOx4ymBenMpANk=
Subject key identifier:   09:6B:1B:C6:C2:EE:B1:00:DF:C2:84:D6:E3:5C:6B:D9:A5:E8:D6:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AFDB81EDB662DA819DA94D60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee910d51-32a3-33b5-8c34-544fd8d8730b.roa
Signing time:             Tue 29 Apr 2025 12:42:34 +0000
ROA not before:           Tue 29 Apr 2025 12:42:34 +0000
ROA not after:            Mon 28 Jul 2025 12:42:34 +0000
asID:                     396544
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:db:81:ed:b6:62:da:81:9d:a9:4d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 12:42:34 2025 GMT
            Not After : Jul 28 12:42:34 2025 GMT
        Subject: CN=01a1e637-918e-4146-9319-c17f30e11d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ae:99:b8:78:fe:8b:bf:bb:8b:87:c5:89:86:
                    2e:d2:10:2d:5c:5d:e7:9f:29:53:63:de:ae:4f:02:
                    70:bd:b9:e0:63:b9:8f:c8:e2:9b:cf:9c:7d:12:69:
                    f2:da:a9:10:e1:97:34:98:b9:86:ae:8d:53:35:14:
                    89:13:06:b1:1a:cd:a2:84:89:da:d1:3f:6b:c9:61:
                    65:5c:1b:49:e1:f7:06:36:56:41:b1:1b:9f:09:b1:
                    b6:e2:22:9a:56:54:7b:61:ae:b6:3a:5e:3f:f8:c0:
                    0f:73:b3:c1:62:c2:53:3c:23:fa:23:40:35:f9:8f:
                    f6:7f:35:f0:80:7f:92:c6:a2:14:45:06:5a:f7:c5:
                    c8:1b:6f:79:32:0f:79:a2:fb:d8:d8:49:75:83:12:
                    39:7c:af:8c:67:6e:db:64:26:c3:4e:64:de:40:1f:
                    a7:5e:54:e2:98:36:e9:17:27:dc:f9:2c:e7:88:fc:
                    13:09:53:20:15:ea:44:23:4f:7b:66:e8:48:5c:60:
                    1d:81:a2:7a:0d:3e:b2:fb:0d:dd:a9:6c:15:37:4a:
                    91:0c:03:4f:1a:f4:a8:df:48:a8:9e:3c:15:cd:d8:
                    cf:0d:8b:3e:cb:96:57:5c:3e:c8:8f:be:88:05:6d:
                    d5:d8:40:5c:0a:97:89:3f:81:95:d3:d9:ca:e4:46:
                    77:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6B:1B:C6:C2:EE:B1:00:DF:C2:84:D6:E3:5C:6B:D9:A5:E8:D6:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee910d51-32a3-33b5-8c34-544fd8d8730b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:25:5e:71:0a:1a:02:1f:b7:52:c2:46:0d:b2:58:ec:8f:df:
         d3:9e:b9:e7:40:ad:04:b7:e6:22:75:a0:d5:7c:0c:d8:24:1e:
         38:76:3a:89:4a:12:e5:45:f3:15:ac:4d:e4:9c:51:29:46:57:
         26:2d:ac:a8:46:14:ea:ba:d5:db:d5:31:8c:a4:5e:b8:a2:c8:
         6d:42:27:ac:0a:6e:55:ab:b9:1e:2e:4b:a0:41:a8:29:4e:7b:
         24:0b:c7:44:07:a5:69:6b:3a:b3:ca:25:7c:74:73:68:a8:5b:
         ac:f7:4d:40:d9:d2:02:2d:bc:8f:be:d6:28:3e:d6:29:84:3d:
         f2:be:9c:b9:f5:0b:ef:56:6a:6a:ee:97:75:e9:7b:90:dd:ef:
         db:ff:64:5e:68:23:1a:a4:90:5f:57:fb:2e:e4:9d:6b:d8:1c:
         0a:81:54:fd:07:5e:28:ca:44:cb:47:8d:63:d4:1a:89:ee:0b:
         b4:d4:b7:2b:40:7d:8c:98:94:8a:70:b6:ea:83:1c:57:9c:0f:
         15:61:55:b6:ab:74:0d:f6:66:53:a1:08:e2:18:31:40:b9:2a:
         5c:83:fb:ea:1a:64:fa:96:41:33:e1:70:e3:78:15:aa:cb:6c:
         28:4d:21:96:9e:4e:79:e5:c1:03:80:c8:55:9c:2e:62:25:70:
         a3:3f:62:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv24HttmLagZ2pTWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQyOTEyNDIzNFoXDTI1MDcyODEyNDIzNFowLzEtMCsGA1UEAxMk
MDFhMWU2MzctOTE4ZS00MTQ2LTkzMTktYzE3ZjMwZTExZDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq6ZuHj+i7+7i4fFiYYu0hAtXF3nnylTY96u
TwJwvbngY7mPyOKbz5x9Emny2qkQ4Zc0mLmGro1TNRSJEwaxGs2ihIna0T9ryWFl
XBtJ4fcGNlZBsRufCbG24iKaVlR7Ya62Ol4/+MAPc7PBYsJTPCP6I0A1+Y/2fzXw
gH+SxqIURQZa98XIG295Mg95ovvY2El1gxI5fK+MZ27bZCbDTmTeQB+nXlTimDbp
Fyfc+SzniPwTCVMgFepEI097ZuhIXGAdgaJ6DT6y+w3dqWwVN0qRDANPGvSo30io
njwVzdjPDYs+y5ZXXD7Ij76IBW3V2EBcCpeJP4GV09nK5EZ3uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAlrG8bC7rEA38KE1uNca9ml6NYgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWU5MTBkNTEtMzJhMy0z
M2I1LThjMzQtNTQ0ZmQ4ZDg3MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKglXnEKGgIft1LCRg2yWOyP39OeuedArQS35iJ1oNV8DNgkHjh2OolK
EuVF8xWsTeScUSlGVyYtrKhGFOq61dvVMYykXriiyG1CJ6wKblWruR4uS6BBqClO
eyQLx0QHpWlrOrPKJXx0c2ioW6z3TUDZ0gItvI++1ig+1imEPfK+nLn1C+9Wamru
l3Xpe5Dd79v/ZF5oIxqkkF9X+y7knWvYHAqBVP0HXijKRMtHjWPUGonuC7TUtytA
fYyYlIpwtuqDHFecDxVhVbardA32ZlOhCOIYMUC5KlyD++oaZPqWQTPhcON4FarL
bChNIZaeTnnlwQOAyFWcLmIlcKM/YlQ=
-----END CERTIFICATE-----
Generated at Sun May 11 00:57:32 2025 by rpki-client