Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2eb9e7-bb5f-32c6-88d2-6789ca44cfc0.roa
File:                     1c2eb9e7-bb5f-32c6-88d2-6789ca44cfc0.roa (raw, json)
Hash identifier:          qc1OUZNM5PQC5QZJPhaWR3lh8/M/5ZXzMqe2XoSBD9I=
Subject key identifier:   64:A6:E5:74:6E:EC:1A:AC:23:56:3D:F0:3D:53:EA:E9:1F:77:26:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830C4A623AA9365660FE600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2eb9e7-bb5f-32c6-88d2-6789ca44cfc0.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     36619
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:c4:a6:23:aa:93:65:66:0f:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=0e727a71-8e37-44e6-b1b0-7633210dc3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bd:cb:80:35:3f:8b:ea:75:40:99:d3:ae:10:
                    b5:03:a6:2a:41:ef:51:0f:d3:ae:c9:27:8e:69:d9:
                    d4:54:3b:e8:e9:f2:68:6e:df:3a:70:24:4a:aa:09:
                    43:fa:e7:f5:33:cd:a1:12:a1:1b:f3:e7:ff:8a:0f:
                    d4:a4:20:13:d6:fb:bd:9a:3e:9b:8f:20:d0:40:94:
                    40:23:5b:f8:bf:bc:2e:7d:72:9f:a9:bd:f7:ea:e4:
                    16:31:43:b6:c9:ec:51:ad:73:78:70:c7:cb:0a:12:
                    6f:98:02:24:fc:1e:7e:36:db:1e:b5:02:d3:00:04:
                    64:c8:c9:85:9c:7d:65:34:d3:05:53:a3:c4:35:1b:
                    9b:cc:c5:ed:b9:f1:c7:c7:64:58:04:e4:d0:e3:f1:
                    92:62:a1:60:7d:ed:e1:16:96:1d:61:70:63:69:e1:
                    94:f2:a7:b0:ff:f2:50:0f:be:79:68:b0:3e:66:81:
                    68:b5:82:30:0d:d5:37:a7:26:83:73:6b:d2:9e:df:
                    8f:86:77:22:f4:a1:45:a5:3f:43:07:20:94:be:8d:
                    34:80:f8:a6:65:6b:d1:79:76:75:bd:ad:cf:5d:3b:
                    2e:41:71:76:1d:3d:11:87:dd:f6:6a:a3:a4:04:93:
                    bc:60:79:46:14:3b:9f:40:c8:56:7d:41:2f:1f:1a:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A6:E5:74:6E:EC:1A:AC:23:56:3D:F0:3D:53:EA:E9:1F:77:26:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2eb9e7-bb5f-32c6-88d2-6789ca44cfc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:69:a7:e9:be:9b:8b:cf:14:1b:2e:65:b4:6c:e8:2b:f7:11:
         53:9b:54:a5:58:a0:c7:51:8e:f9:e8:dd:fe:78:9c:1b:3b:86:
         d7:1d:ed:66:6b:dd:47:6d:61:26:66:b3:d7:ab:47:72:f1:d6:
         12:56:0c:ca:dd:64:3b:ad:a3:28:85:23:d5:9f:7c:cd:bb:49:
         b6:57:b8:99:fc:fe:31:53:79:18:fb:96:96:4b:3d:e5:ab:74:
         35:24:28:f3:9a:32:6e:64:3e:b0:09:58:aa:1c:54:e1:52:b9:
         29:22:dd:e7:91:8b:a0:6f:17:2d:9b:01:15:76:f3:64:2b:8b:
         4e:72:ba:d2:2e:0b:d5:e7:6c:da:1c:91:a9:b1:f8:cf:da:09:
         95:46:3d:6d:4a:73:d5:a9:cf:57:d4:85:4d:55:80:b5:c4:ad:
         91:1c:91:06:33:9f:2d:8e:6c:41:4a:31:26:47:78:51:30:49:
         5b:aa:59:f9:e1:07:76:e0:ae:8a:c2:3d:9f:8f:fd:c8:19:56:
         1d:ec:12:b8:d8:58:3b:1a:ff:ee:dc:43:04:1b:56:f9:6d:7f:
         5f:37:b7:75:f6:ad:2e:ed:f0:58:b3:5e:81:b7:12:b0:5f:85:
         bb:f6:af:91:a7:3d:78:eb:78:d6:30:06:16:eb:35:36:61:83:
         8e:32:19:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:28 2025 by rpki-client