Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7bce4d9-abb9-3032-a2b2-06cd2513a7c2.roa
File:                     d7bce4d9-abb9-3032-a2b2-06cd2513a7c2.roa (raw, json)
Hash identifier:          Lx5XgiUkN+KmbD5tb5IyKV8/1z4j3CMrcKySqbqZo9s=
Subject key identifier:   C9:13:4B:F6:D1:62:36:8E:52:D7:54:B9:17:20:35:AE:EF:57:F8:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830BA17C5A750BF1C5F7800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7bce4d9-abb9-3032-a2b2-06cd2513a7c2.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     396559
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:ba:17:c5:a7:50:bf:1c:5f:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=37d9ab00-c6ed-4589-b768-c137d026ac97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:c4:93:06:3d:78:f6:d5:47:6f:d3:8d:76:
                    17:c7:e2:c2:94:aa:d2:fe:28:be:19:c3:4e:b3:4e:
                    41:4e:90:2f:eb:5a:3f:ec:6b:ca:1b:1d:ac:9e:af:
                    f1:41:58:0b:4c:9a:5a:3a:4c:20:23:1f:f4:c4:b5:
                    da:ee:9b:fc:4b:a9:a1:39:68:81:44:ef:e3:4a:55:
                    b6:58:29:35:48:c6:f8:3e:b5:56:26:41:f8:57:7c:
                    d7:ef:3f:6f:a9:b9:c6:19:5a:9a:53:e9:d1:6e:0c:
                    cf:4a:38:02:b7:fc:2e:bc:20:22:79:4a:78:c3:dc:
                    28:a7:96:60:cf:3a:08:f3:5b:f0:80:3b:dc:23:ec:
                    27:a0:f8:a8:99:ca:39:95:8d:fe:97:7b:06:a5:f6:
                    13:ec:ab:e7:8f:8e:69:ea:95:57:14:a0:b8:32:5a:
                    6a:8c:f6:74:2f:7a:10:e4:ff:ee:56:71:21:0e:fe:
                    9f:94:e5:73:55:17:d0:bd:bb:89:a5:c7:e9:1f:15:
                    f9:96:b1:d0:9a:49:6a:a6:f4:c5:fe:1b:ca:58:d6:
                    3e:9a:74:3f:e7:f9:c0:08:e2:ce:6c:fc:24:db:d1:
                    b7:d3:b4:9e:f7:0f:ce:bf:cd:d3:27:2f:b1:63:2b:
                    f4:6c:77:c2:66:a6:21:58:bd:61:dc:39:fb:4f:21:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:13:4B:F6:D1:62:36:8E:52:D7:54:B9:17:20:35:AE:EF:57:F8:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7bce4d9-abb9-3032-a2b2-06cd2513a7c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:d7:f5:6e:12:b3:e3:e0:dc:98:ee:06:58:0d:bd:a6:8f:44:
         6a:6e:91:51:fc:77:26:46:a2:33:06:3a:f8:01:f8:e7:8d:d7:
         73:e1:d2:f5:4e:de:54:01:b6:75:61:69:32:cc:73:4a:d4:b9:
         87:3e:10:42:31:41:dc:b1:e9:db:48:b3:0b:59:0b:d6:14:76:
         44:e0:02:d1:b2:b8:ba:d8:eb:fc:a0:a7:6e:b5:c7:c1:9d:68:
         8c:22:03:93:b9:94:dd:ec:19:a2:4e:3b:ac:f3:6f:97:b1:94:
         5a:1f:00:3a:9e:26:db:e5:4f:65:54:70:24:9f:bc:37:7c:96:
         0d:db:a3:5a:bb:54:7a:ba:28:5e:e1:b1:8e:ca:33:b0:fa:a4:
         84:22:06:9b:37:cb:46:cc:49:26:30:9b:3d:c5:4a:e0:7d:99:
         61:2d:8c:1f:9e:51:9c:7a:1b:70:f1:2c:45:be:1f:91:07:df:
         f3:d7:f2:9f:66:cf:5c:0d:e6:03:b0:2d:ad:ff:e8:11:15:61:
         4e:70:f3:cc:ee:42:d2:64:99:4e:73:3c:99:25:ab:f1:47:b3:
         e7:e8:ed:42:de:6e:e9:75:d6:b7:e5:fd:d8:c0:b0:84:36:ea:
         95:ae:2e:74:fb:fb:71:a0:10:ab:c9:78:39:bf:d9:65:d5:91:
         6a:8d:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:06 2025 by rpki-client