Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4bb4df8c-7ab3-3b83-bd76-d73e1c41e16b.roa
File:                     4bb4df8c-7ab3-3b83-bd76-d73e1c41e16b.roa (raw, json)
Hash identifier:          73oS0Nd68WW7/W4/XsAdQOld+Q/gLyNH0JbPHQ7FYEM=
Subject key identifier:   A2:4F:8F:E2:1B:52:C1:14:FD:24:9B:4C:0C:7F:E9:F5:55:36:FD:F9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830C44C2348FF6AF42F9690
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4bb4df8c-7ab3-3b83-bd76-d73e1c41e16b.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     396608
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:c4:4c:23:48:ff:6a:f4:2f:96:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=4c7f9109-3073-4c47-8da8-fcbe22671f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:4c:f6:d9:ed:b0:95:29:d2:7e:6f:4b:ce:
                    9d:73:23:1b:90:98:47:8f:b8:2d:7d:75:9c:67:cd:
                    51:61:87:5e:d3:d6:fe:45:c4:3f:77:12:01:a4:69:
                    2d:5c:95:c3:15:87:1e:de:d5:56:27:6c:54:c3:96:
                    97:06:d6:09:73:9b:4c:b7:60:3c:24:3f:b8:db:12:
                    d0:ab:40:5a:81:db:1e:ab:cc:60:8a:d1:d4:fd:63:
                    0c:4a:c0:b9:60:ed:dd:58:62:e9:c2:e2:96:c7:65:
                    8a:6a:ef:3e:70:44:cb:a9:e0:83:57:9a:ea:be:b7:
                    7c:65:3b:cc:73:24:38:ed:1e:44:33:21:a9:69:7c:
                    a4:d5:dd:33:07:a0:bc:a6:f8:c3:9f:50:41:99:c5:
                    e0:e9:a4:b2:b4:d8:6e:41:25:0f:2d:78:f7:52:65:
                    0c:ea:2d:fc:c7:b7:6c:35:ed:a7:d0:0e:2a:00:23:
                    9f:9c:74:56:dc:bd:2d:e4:93:1f:ce:1f:80:7b:16:
                    b6:11:05:be:84:62:ec:df:e5:35:f2:80:92:7a:0d:
                    16:e1:39:ac:14:2d:ab:93:5a:bb:73:5c:9c:3f:05:
                    b6:96:33:71:ed:05:f0:4d:a8:78:99:8d:ed:57:2b:
                    22:72:59:f0:4a:91:30:00:12:ed:3b:b2:f1:09:44:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4F:8F:E2:1B:52:C1:14:FD:24:9B:4C:0C:7F:E9:F5:55:36:FD:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4bb4df8c-7ab3-3b83-bd76-d73e1c41e16b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:41:ba:a0:76:b0:b3:30:d4:10:cc:50:9d:c6:35:ef:d7:ea:
         6d:3c:48:27:01:f3:1c:77:da:2e:53:34:60:41:8e:89:5f:ec:
         5a:8d:c9:86:21:4f:a2:1c:75:87:45:7c:d6:60:d7:35:ca:69:
         ff:0b:6f:38:74:7e:17:13:78:71:18:a6:9a:71:fe:aa:1b:11:
         8c:4b:5f:7f:5d:f7:c8:53:1e:06:82:9f:ca:59:dd:84:20:6d:
         de:7b:c1:f7:12:a0:1b:50:ec:dd:ed:3c:88:f3:3a:34:b5:0e:
         9a:c3:33:f1:54:7d:0e:01:69:ca:87:00:6e:2e:47:4c:61:89:
         95:45:7f:dc:c8:d0:39:3b:8e:29:33:92:b6:6c:1f:cd:df:ae:
         af:b3:e5:ca:45:11:64:ec:37:8f:33:85:6d:7b:76:de:85:27:
         cc:df:56:dc:6a:01:4c:86:ae:ed:e3:c1:e9:b2:ce:e2:22:72:
         d6:7f:3f:b9:5a:80:32:81:88:bd:c2:2d:b2:36:de:eb:55:27:
         ef:ca:20:01:72:e0:63:15:52:42:40:74:40:e5:48:f1:e5:4e:
         84:22:85:67:3c:9f:b9:ca:89:3f:58:0b:d2:73:d8:f8:e9:0a:
         51:63:9f:93:c3:42:ff:46:80:bf:0f:a8:bf:38:58:94:c0:14:
         b0:a7:75:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:54:07 2025 by rpki-client