Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/020d640e-c2ce-3470-913a-172ec1cdce20.roa
File:                     020d640e-c2ce-3470-913a-172ec1cdce20.roa (raw, json)
Hash identifier:          k4UIr69dmwJkGmtrBw555SQwk0X2k5+EzQn5TyHeK1w=
Subject key identifier:   3E:4B:F5:B9:D9:D7:35:C6:E3:B0:09:35:80:0C:42:7C:85:1B:E3:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830BE83201EB601F5D26DA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/020d640e-c2ce-3470-913a-172ec1cdce20.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     397210
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:be:83:20:1e:b6:01:f5:d2:6d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=f3d600e4-261f-4c02-a6cd-99841a0296ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:e9:51:62:7a:75:b1:79:ea:28:e1:a9:a2:
                    b0:8d:39:c2:8a:fe:79:31:2a:be:cf:7f:b7:b6:55:
                    46:ed:ab:9c:bc:d7:d5:2f:67:1c:28:be:44:ec:eb:
                    c3:e5:d9:eb:a6:fb:7b:5c:82:f2:f8:02:31:9d:59:
                    17:58:ec:2b:70:15:d1:99:6e:da:cd:e0:8f:ba:2e:
                    71:a1:90:7e:9b:52:1f:7b:ea:de:fe:e8:b3:9f:c0:
                    a6:39:0e:6f:67:72:ad:46:4f:8e:b7:16:73:ff:bd:
                    e5:cf:95:1f:68:07:2c:54:cb:41:ff:eb:b9:bf:75:
                    20:4b:55:c4:eb:9a:7f:f4:1e:e7:8b:80:e7:ed:1d:
                    5e:93:44:2c:86:55:49:31:fa:bd:c4:35:1d:bb:c6:
                    54:92:80:61:7b:f9:92:00:f5:70:26:06:5b:15:d3:
                    5d:7e:a5:2b:c4:74:70:d4:64:13:46:83:ee:a8:c5:
                    44:70:75:a9:fe:e9:cf:24:cf:73:42:83:d1:0c:02:
                    16:99:90:03:a1:3f:c9:51:25:71:c1:04:0c:94:1a:
                    4c:d4:a8:24:fb:04:89:7e:33:77:04:c5:73:90:e7:
                    7d:d8:be:35:cc:fe:a2:d3:ae:a1:f2:ae:42:4d:39:
                    e0:9d:1d:d0:3d:a1:c0:b3:b0:da:9a:2b:8b:9a:54:
                    79:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4B:F5:B9:D9:D7:35:C6:E3:B0:09:35:80:0C:42:7C:85:1B:E3:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/020d640e-c2ce-3470-913a-172ec1cdce20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ba:6a:8b:c6:6f:1e:4f:41:47:66:68:8e:76:ee:67:b1:76:
         8d:9e:fc:16:d6:06:fe:6b:b3:20:51:0e:d7:f9:44:e8:df:e9:
         ca:2f:b4:67:ae:25:69:2d:59:27:0f:f6:36:34:ef:c6:51:cb:
         6b:f7:21:4d:93:ef:d7:0e:72:d2:dc:ca:75:82:14:4c:5e:46:
         31:e0:08:80:f4:b9:58:52:57:ee:9c:cf:0b:1e:7d:69:5d:7a:
         d5:b8:09:5f:66:b1:0d:1b:31:3b:81:18:3d:6b:c7:0a:e9:ec:
         49:ff:d7:1f:5c:ae:f3:67:4f:00:ff:4d:ed:20:dd:d5:17:13:
         54:8c:81:9c:e0:14:0e:f4:89:db:3f:52:03:e7:57:40:89:59:
         7c:e9:22:6d:8a:ac:a3:85:ca:7d:db:b2:35:24:5b:db:36:a1:
         03:3e:49:69:76:2a:5b:d7:5e:6e:7d:03:9e:41:cc:74:81:ea:
         a4:5d:bc:d6:8d:13:a4:4b:ab:4f:b7:4b:17:02:2d:d8:51:48:
         aa:d5:3a:da:cd:c5:85:79:2a:22:91:f3:83:f0:52:27:ef:29:
         67:a4:56:66:77:71:99:ac:b2:8c:6c:3e:c8:cc:16:2f:f2:a6:
         2e:ed:ea:4d:6c:a3:74:fe:fa:69:83:fc:0f:a5:7e:fa:e9:84:
         3b:65:86:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:33 2025 by rpki-client