Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d9658ca-41a7-3b9f-ab97-790bc7e2698c.roa
File:                     2d9658ca-41a7-3b9f-ab97-790bc7e2698c.roa (raw, json)
Hash identifier:          WZ+LRZBvTLQIBvnKQVexCVo1Bu1cS8xi/9/GeDCvlg8=
Subject key identifier:   35:05:F6:14:AC:91:26:D8:10:B6:40:96:AE:30:3B:70:D1:09:C4:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830C78A183316538D57D350
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d9658ca-41a7-3b9f-ab97-790bc7e2698c.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     20431
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:c7:8a:18:33:16:53:8d:57:d3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=024ade3f-10cd-49b3-a1a9-564c11b55327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:50:23:be:f3:39:b9:1f:f2:b6:90:a5:8c:
                    de:a6:d8:bf:e0:01:9f:b0:d6:55:29:67:4d:60:f2:
                    94:3e:fd:a0:68:c6:19:f2:02:d1:6a:39:73:bf:50:
                    5d:70:62:e6:01:39:41:08:f5:bb:7f:4b:82:cc:61:
                    d0:ee:da:d4:95:02:4d:87:7d:82:a6:10:8d:81:64:
                    16:2d:14:04:46:c8:2a:11:55:99:39:64:e4:49:70:
                    77:9d:47:de:36:cb:2d:de:c2:10:4f:ee:e6:72:b8:
                    24:92:03:d0:0d:55:f7:35:bd:6a:96:80:13:6c:bc:
                    09:a0:55:ec:c3:0a:cd:9b:f1:14:65:bb:29:54:39:
                    1c:2e:c4:98:e6:13:0f:0d:31:fe:db:01:ef:48:e0:
                    a2:0a:3c:1d:16:a4:ba:a8:16:71:7c:18:c0:0f:71:
                    e5:87:f4:f6:d3:9f:f8:fc:59:98:af:3b:3c:6d:4e:
                    f9:17:b6:58:8a:bc:1d:07:c2:4b:e7:7a:74:7a:83:
                    b7:6c:dc:3d:81:80:79:ea:d0:b1:b7:47:74:51:31:
                    be:ec:17:94:09:9e:68:97:b2:33:52:67:6d:cb:68:
                    60:88:de:52:ed:43:d2:26:25:d6:86:d8:3f:fa:8b:
                    41:39:47:33:b8:46:89:f3:08:93:24:11:3b:fa:46:
                    16:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:05:F6:14:AC:91:26:D8:10:B6:40:96:AE:30:3B:70:D1:09:C4:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d9658ca-41a7-3b9f-ab97-790bc7e2698c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:42:8e:ef:d6:39:21:81:bf:0d:11:72:49:ef:26:bf:19:83:
         93:55:ce:98:34:f8:c2:4f:f1:38:80:f5:95:56:a5:3d:88:d1:
         73:79:01:fb:50:27:5e:8d:87:85:0d:4d:fe:a0:e9:a2:98:c1:
         da:58:a3:b5:60:8c:e2:7b:69:5d:05:a4:4d:3f:0d:5a:5f:68:
         4a:9b:18:57:83:76:3e:3e:c1:17:46:3a:de:29:0d:ec:d7:ec:
         fe:0d:bf:01:78:1a:9b:51:d5:23:ee:03:67:a0:ed:b4:31:1c:
         93:e5:c0:63:dd:73:1d:d8:6e:14:51:41:58:50:64:5b:47:1c:
         23:8d:59:a3:1b:6b:e2:f3:ef:f7:f9:ea:96:68:94:80:b6:76:
         92:21:23:d3:62:7b:02:1d:a8:ad:e7:f7:9c:a4:ed:66:2d:cd:
         3a:84:ee:78:75:a9:05:1e:a3:32:68:9a:b4:d7:ad:29:74:19:
         30:50:26:a3:55:c6:c9:39:a7:94:fd:21:c2:8f:ef:be:58:ad:
         17:e0:0f:02:64:d4:9a:f1:be:ac:0d:0c:1c:dd:b1:28:ec:c0:
         be:df:ec:4e:01:9e:9a:57:a1:f7:66:69:20:e1:a1:5e:af:03:
         ba:fd:6e:ec:04:5b:c8:f2:05:c3:4a:33:a6:e0:b0:d3:ca:f0:
         ba:7b:ee:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:34 2025 by rpki-client