Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9676fd5-305e-3317-bd0d-99ca96cb0836.roa
File:                     f9676fd5-305e-3317-bd0d-99ca96cb0836.roa (raw, json)
Hash identifier:          olvtQZG/KB1hbMx/D7VJ05kUGDb3bBVt16oQM0oUorY=
Subject key identifier:   6B:17:30:D2:E8:16:29:56:3E:BA:9C:63:8B:D7:69:56:D0:EE:EF:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498769C74158D8954D5936BA5A
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9676fd5-305e-3317-bd0d-99ca96cb0836.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     36628
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:c7:41:58:d8:95:4d:59:36:ba:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=2ea5efce-38c8-40e0-b21f-cd36be3a00e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:8a:fa:31:fe:c8:68:f9:3a:0a:96:70:b9:
                    c2:9e:95:0b:ac:d5:51:ce:2b:e8:38:3a:49:bd:6f:
                    1e:c6:69:1a:db:e1:d2:72:9d:49:d2:64:62:4c:88:
                    67:15:0f:1e:bc:bc:b7:79:22:16:eb:56:86:fd:b7:
                    ea:96:c1:2a:cf:34:a2:99:e1:2b:3a:02:0c:b3:8b:
                    2c:ca:ae:ca:38:c3:69:1f:1f:5b:96:39:68:94:08:
                    77:39:07:05:60:b2:36:41:f1:0b:03:50:e8:e9:61:
                    7d:b8:c2:c1:dc:1f:20:42:ef:36:10:ed:c0:0c:9f:
                    8f:ed:7d:5d:21:af:98:f6:d6:19:3e:e1:99:13:80:
                    bb:17:f5:a2:97:b5:6b:36:4e:08:84:07:bf:75:00:
                    bf:1a:14:fb:b5:17:ed:1d:83:63:24:e8:58:c0:ef:
                    57:a4:fd:0a:fd:f2:b0:d0:ef:62:7e:a7:14:27:56:
                    22:b5:b8:34:e3:91:8b:eb:c0:06:75:2d:09:3b:76:
                    ee:cd:66:48:dd:c8:a4:d5:45:35:43:bc:67:7a:ca:
                    b3:ff:eb:dc:65:35:8e:e8:f1:f5:34:85:1e:b8:c8:
                    86:96:3e:c2:b9:9d:e4:6a:cf:8e:3c:88:0a:4a:91:
                    83:a0:24:bd:78:6f:4d:f1:ec:cd:a6:a3:f4:d7:a2:
                    75:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:17:30:D2:E8:16:29:56:3E:BA:9C:63:8B:D7:69:56:D0:EE:EF:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9676fd5-305e-3317-bd0d-99ca96cb0836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:48:fa:7d:4e:a4:ea:d1:15:4d:5b:36:83:b4:31:ea:b4:c7:
         7a:eb:3d:a6:36:4e:53:23:5a:f3:78:2e:40:63:70:4e:97:35:
         e7:7c:69:bf:4e:8b:80:fb:03:6c:b9:23:4f:5e:76:e6:16:ad:
         9f:92:34:50:cc:37:15:85:82:97:30:ba:67:55:f5:6e:9d:1f:
         23:0b:29:02:4c:32:15:91:17:fe:95:a2:1d:bc:e8:67:02:47:
         85:25:7f:a4:3a:7c:66:11:a8:57:c5:ca:b8:1b:9f:26:d8:dd:
         a9:7f:b0:9e:4e:a2:a1:ca:fa:2b:7a:ee:52:49:25:75:0c:17:
         d4:1c:7c:db:54:08:1a:66:64:59:b9:d4:8f:17:6d:f5:82:d2:
         3a:99:fa:3e:e9:9b:bc:05:b8:49:cf:cc:c1:f0:3f:e3:03:c4:
         bf:86:04:f5:d5:3a:2b:f5:60:08:45:70:b5:b6:1b:0b:e4:7a:
         3b:f2:51:a6:91:8b:da:e8:43:07:41:5d:f1:5d:63:89:45:f5:
         eb:5b:4f:94:12:56:cd:46:1c:ef:ae:fb:bd:82:d4:d5:28:9b:
         d9:cb:f6:28:94:c7:30:a2:cd:2b:a4:5d:20:45:9e:70:16:47:
         44:16:38:91:7e:0e:3a:31:6e:ff:b1:0b:b3:8c:d7:6d:a3:c0:
         02:d1:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:53:00 2025 by rpki-client