Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0fe07d8-4590-3615-8417-4cf86cba976f.roa
File:                     c0fe07d8-4590-3615-8417-4cf86cba976f.roa (raw, json)
Hash identifier:          xiMX8UCB2UOw+hsERh3pXKF+xVsViSEP1wcGIT+NdtQ=
Subject key identifier:   CB:AE:37:56:27:48:08:7C:43:4A:F1:6E:8D:1C:64:FC:92:7C:79:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830C65977C7B3137054EF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0fe07d8-4590-3615-8417-4cf86cba976f.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     397207
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:c6:59:77:c7:b3:13:70:54:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=bf8cfd9d-147a-42aa-b8a4-9bd4ba571173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ae:b0:01:84:f0:93:3e:e6:ff:36:72:72:c6:
                    93:47:f9:70:86:6d:46:80:3e:a3:e2:6b:99:6d:8e:
                    4f:fe:99:aa:35:8d:09:96:6e:fe:44:f1:44:27:b3:
                    60:e6:61:7b:6b:a3:95:0d:fd:d0:21:4f:20:e5:d7:
                    33:aa:60:30:bd:87:2a:ed:a9:3e:2b:85:5d:cc:ec:
                    57:2a:b6:ff:53:ef:8c:1b:e5:3b:6a:78:ab:b4:03:
                    84:53:be:6f:1f:dc:cd:ee:dc:bc:06:60:9e:51:1b:
                    c3:9c:23:2a:f1:29:47:3e:0f:30:1e:9b:93:a9:ef:
                    17:14:09:7f:0f:d2:50:1d:9b:b5:59:5d:9d:1c:87:
                    e4:f1:84:92:41:b0:45:c8:f6:59:9e:8b:af:e2:fc:
                    d7:e8:e4:fb:1f:5e:b5:f1:4d:b3:91:78:33:3f:63:
                    91:86:f3:c2:33:da:12:03:c8:3b:4b:83:27:e4:49:
                    3e:91:c0:e4:0e:c2:27:19:a8:3b:de:c2:da:47:39:
                    87:f2:25:14:56:d6:90:52:cc:53:f3:00:fd:29:7c:
                    28:db:1b:32:70:37:9e:6f:27:3b:60:19:a3:8b:83:
                    c9:7a:76:91:d2:73:39:f3:81:ca:e3:ed:a1:a0:2f:
                    f9:2f:67:81:44:a0:e5:80:ac:f8:3f:61:bf:5b:9c:
                    19:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AE:37:56:27:48:08:7C:43:4A:F1:6E:8D:1C:64:FC:92:7C:79:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0fe07d8-4590-3615-8417-4cf86cba976f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:82:30:e7:a7:26:28:78:32:26:4c:3d:ab:be:5b:4e:da:33:
         82:b2:39:f5:72:43:d2:09:9b:37:12:50:12:0c:8a:76:59:c5:
         71:de:73:94:1e:93:3e:6e:23:c1:1d:f9:19:2c:f2:97:7d:9c:
         43:f2:95:b7:ee:cf:18:aa:58:70:36:6e:a6:0b:03:9f:1f:de:
         72:95:76:0a:47:2b:21:d9:5e:f0:9f:a5:6b:c9:ff:d2:f2:56:
         92:9c:bb:dc:1a:10:3b:a8:8d:ef:70:c5:74:51:e3:0e:46:e6:
         6e:3f:7a:34:0b:06:fb:0d:e3:fe:ac:bf:2f:e0:a1:fc:2b:77:
         18:bd:98:83:3c:ba:d3:45:66:2b:e3:9f:29:08:35:5b:84:08:
         c4:e9:50:48:2f:e2:05:5d:ca:3a:36:97:f1:36:2f:d7:d5:ce:
         c6:3c:98:6f:8e:30:06:ee:46:69:28:7f:99:e4:51:09:3e:e4:
         cd:fc:53:83:91:6f:a1:81:37:6a:c9:58:9b:2b:4c:2f:85:c0:
         5f:c5:61:e9:7a:f5:77:4c:f6:2a:b0:83:8b:bf:0a:46:5c:2c:
         e4:f5:08:a6:0f:18:b8:e3:16:a0:25:ba:e4:9e:4a:68:a0:6d:
         1c:b1:22:88:3d:59:3c:df:76:2d:72:f8:54:34:d9:42:0d:31:
         de:87:b1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:37 2025 by rpki-client