Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afcd9b55-66b8-3950-9d7d-1ebdff728f50.roa
File:                     afcd9b55-66b8-3950-9d7d-1ebdff728f50.roa (raw, json)
Hash identifier:          mz0OeKT4zjk0qdNaLV/RIGZngJZbQwmaJRCheCoyJsg=
Subject key identifier:   0B:30:C5:50:B5:7F:4C:B7:08:8A:C5:36:D8:E4:A9:7E:64:75:4D:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830C29027AC291F94FB0E38
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afcd9b55-66b8-3950-9d7d-1ebdff728f50.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     396602
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:c2:90:27:ac:29:1f:94:fb:0e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=0e9b32dd-73c4-4d8c-8f92-7760f0fcdd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:05:46:fa:39:0f:63:99:a3:e7:07:47:cd:bf:
                    98:bb:be:24:63:53:87:c5:51:62:39:b7:5a:f8:a7:
                    70:c4:2e:38:00:59:23:4b:ce:45:79:e1:ae:fd:ad:
                    39:70:8d:68:20:69:2d:43:74:65:94:d6:01:66:e9:
                    f2:47:49:1a:9a:a6:21:6a:e3:18:f3:f7:42:f8:c5:
                    4e:25:2a:c8:19:ca:99:b6:5b:ed:47:64:cf:34:ef:
                    43:74:b9:ab:c8:4d:ac:da:63:3e:10:22:d7:3f:f5:
                    fe:be:4f:46:54:3d:47:91:0a:8a:69:a2:6e:83:e2:
                    fc:ea:4b:75:ca:c7:ca:9b:c7:35:20:29:e5:9d:91:
                    67:47:ff:41:71:15:fd:0a:39:67:4b:1a:44:6f:2e:
                    ed:4b:b0:63:78:52:f3:2b:2d:ea:4d:2a:2d:69:6d:
                    49:eb:81:af:ff:f6:c9:58:89:a0:68:ac:ef:ad:31:
                    26:4a:25:12:2d:74:b7:5d:37:7c:2c:8d:0e:9b:a7:
                    34:c5:e0:3f:82:ad:9f:97:bf:12:fa:86:ad:14:06:
                    10:d2:9b:21:aa:4b:8a:bb:1a:a3:45:e7:62:d9:0d:
                    ca:c8:5c:08:af:58:89:ee:0c:3d:02:b9:0c:a8:0d:
                    1c:bf:c4:57:e6:41:7f:e7:8d:3d:db:04:1f:17:2c:
                    32:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:30:C5:50:B5:7F:4C:B7:08:8A:C5:36:D8:E4:A9:7E:64:75:4D:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afcd9b55-66b8-3950-9d7d-1ebdff728f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:4d:70:0f:36:dd:fd:5f:fc:65:aa:8f:85:f4:73:b0:7b:58:
         6b:30:5d:78:fd:2b:8d:ea:45:5a:47:78:44:76:7e:96:23:a9:
         9c:cf:e3:99:fd:aa:63:79:e8:f4:62:f5:fe:fc:97:5e:39:e3:
         f7:bb:ed:05:54:d8:72:08:80:74:f7:f1:f4:02:e9:54:64:1f:
         a4:61:2c:c4:e6:ea:c8:28:39:9a:be:57:69:82:4f:22:7f:59:
         8d:94:6a:04:36:d2:b3:3e:75:6c:ad:cc:9d:a0:cd:1f:c4:e9:
         b3:d3:bc:3c:d7:97:f4:c7:90:99:ff:92:3f:41:cc:5b:aa:8e:
         44:a0:81:d5:fc:37:bd:c1:96:2b:9f:16:0a:47:3a:0e:bd:ca:
         52:dc:28:ea:ca:05:c1:ff:55:12:93:c7:85:47:57:fc:95:8d:
         20:40:f2:57:45:06:54:a5:12:52:ec:d0:18:af:4b:24:f6:89:
         5a:80:00:b9:cc:be:0d:04:91:44:7f:57:9c:06:d4:2b:fd:e6:
         72:1e:f1:09:24:86:cb:22:b2:91:a3:a7:2d:11:c2:ef:6c:9e:
         47:46:6d:e8:71:87:4b:4f:72:90:f9:19:da:86:f1:50:2a:03:
         c4:b8:18:1b:b0:ec:3f:2e:ff:50:65:8e:a7:0e:b1:98:00:73:
         23:70:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:55 2025 by rpki-client