Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f521a8db-0599-30fa-9c38-509bcd40a6da.roa
File:                     f521a8db-0599-30fa-9c38-509bcd40a6da.roa (raw, json)
Hash identifier:          v4Bd0YFAGBSJIcTK5/epmssDg9i0ShtXPB0aOsQoMUs=
Subject key identifier:   27:EE:35:0A:67:07:A2:3B:BC:F2:1A:93:66:75:C1:FB:93:93:99:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AFDB7E7BBCF6DFBD37810A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f521a8db-0599-30fa-9c38-509bcd40a6da.roa
Signing time:             Tue 29 Apr 2025 12:42:32 +0000
ROA not before:           Tue 29 Apr 2025 12:42:32 +0000
ROA not after:            Mon 28 Jul 2025 12:42:32 +0000
asID:                     396576
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:db:7e:7b:bc:f6:df:bd:37:81:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 12:42:32 2025 GMT
            Not After : Jul 28 12:42:32 2025 GMT
        Subject: CN=4413fa86-583b-4153-a083-01dc75c72924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:0e:46:a0:f0:9a:6e:04:2e:c4:35:df:07:
                    a5:0d:aa:5c:d6:f3:23:40:41:9f:5c:a3:96:2f:5e:
                    f3:bb:62:a5:2f:f7:a6:9a:d7:8b:67:77:51:1f:45:
                    88:c7:09:9c:e9:4c:e3:8f:73:c4:6a:c9:3f:78:b5:
                    2d:ab:7f:12:85:5e:e5:1d:01:84:86:64:df:5d:51:
                    fa:a4:ac:16:06:09:25:04:cd:71:23:8f:15:e8:fa:
                    c7:c0:ca:68:0b:97:c4:79:24:64:91:d5:c5:ee:ec:
                    d9:c0:f5:f7:ba:13:bc:92:62:81:c0:c2:d1:c6:ae:
                    46:ab:d5:35:93:68:95:4a:3e:bd:1d:34:3c:55:f8:
                    1d:67:ba:7b:5d:64:45:32:18:ef:58:b1:97:ec:5e:
                    03:9c:c3:28:e9:ec:51:b1:fa:2f:60:f3:31:6a:09:
                    0d:7d:f3:27:08:8e:a0:f3:41:73:6d:f9:b2:d1:5e:
                    29:1d:e8:11:32:8b:ce:94:b1:ad:cd:bc:72:6a:bc:
                    d3:29:7a:2b:80:50:5f:a4:77:72:4e:b6:c5:f5:27:
                    0a:e1:51:89:36:63:5a:38:a6:d4:07:71:37:a4:68:
                    8b:84:77:eb:fe:d0:36:4d:8a:b0:90:05:1f:ce:ce:
                    af:a5:29:53:9b:b8:3b:02:9e:ee:51:6c:11:09:f6:
                    3d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EE:35:0A:67:07:A2:3B:BC:F2:1A:93:66:75:C1:FB:93:93:99:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f521a8db-0599-30fa-9c38-509bcd40a6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:bc:97:37:5e:33:ca:00:00:6f:1f:08:bd:db:b2:c8:49:f7:
         cc:74:9e:1a:8a:30:5e:5a:9b:f5:5d:94:53:91:be:36:e4:52:
         25:1a:ea:3e:22:85:a9:ee:f3:1b:1c:76:dc:b4:b5:22:15:8e:
         03:69:08:ad:b3:18:c8:92:aa:02:2e:2c:99:3b:fb:d6:c2:32:
         29:2e:37:2b:8e:78:2b:9f:86:f7:70:58:11:10:58:5f:24:e9:
         e7:76:77:92:8a:64:50:da:76:ae:fd:56:0e:d3:ab:02:e6:2b:
         23:ba:b5:93:13:e1:e9:78:23:a3:43:7e:a7:14:47:a2:fb:9f:
         43:44:d1:d7:d7:cb:e8:0e:79:7a:ca:38:15:16:f5:2a:b3:10:
         fc:77:e2:e3:38:cc:1a:5a:6d:55:12:78:f1:4b:7a:dc:72:83:
         f0:4b:01:ab:8d:c8:7b:42:3e:0d:2c:77:e3:69:ac:b9:00:2b:
         db:fb:43:b1:10:7d:fd:bc:25:58:fc:74:b1:58:61:2e:b2:1e:
         cd:c3:76:52:e5:ef:80:a3:ea:74:c1:a3:48:a4:4e:37:21:a3:
         f0:22:e3:c9:bf:d4:d4:20:3f:1c:ef:2b:6a:a8:a2:6c:fb:ce:
         75:f4:20:0d:16:22:e5:0a:52:06:95:2b:71:fe:95:4e:f3:32:
         36:0d:e7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:21:04 2025 by rpki-client