Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f63c419f-416c-3d2a-a678-76594a3beea2.roa
File:                     f63c419f-416c-3d2a-a678-76594a3beea2.roa (raw, json)
Hash identifier:          Sy5HKqeTf4Z0Eur7L8W4gjfucXl+YtKZvvHQojrY9Fk=
Subject key identifier:   47:AD:CB:D2:4D:20:53:31:E4:92:61:F1:B4:DA:2C:48:69:85:A6:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830BE4D7701ECA715F7A500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f63c419f-416c-3d2a-a678-76594a3beea2.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     396571
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:be:4d:77:01:ec:a7:15:f7:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=cce3ed31-a654-4f6d-a3aa-fdfb377dc64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:e5:06:0e:40:9b:98:4d:1a:17:3e:ef:26:
                    b6:33:d4:80:e9:7d:1b:d7:52:5a:cd:bc:0d:a6:13:
                    d3:51:f9:a2:92:80:77:37:14:19:53:b5:1f:b2:46:
                    28:01:b2:e2:4e:31:57:00:2a:22:10:bd:9b:3f:2c:
                    93:b6:5f:a6:15:83:46:bf:76:bd:33:bb:01:20:d2:
                    b8:8a:df:99:dc:47:a1:ca:dc:4f:24:e9:d1:cc:ae:
                    c8:f8:d3:92:c9:85:2c:e4:2f:fb:53:25:d9:dc:e1:
                    63:c8:d3:a0:96:c7:6f:12:a2:d1:0b:5d:f2:fa:83:
                    2d:02:08:93:fa:5a:33:0a:53:81:44:35:a9:61:5e:
                    5a:31:ca:2d:a0:67:4f:1f:2e:4f:e3:87:35:10:b9:
                    dd:22:c7:0f:49:5c:14:f6:5b:20:7b:ee:aa:22:89:
                    52:df:d2:2b:5d:db:d1:cb:e9:d3:77:95:4a:4f:73:
                    60:89:ca:aa:d3:fe:7c:bf:1b:df:9b:af:cb:9c:5d:
                    1d:35:15:8d:83:71:6e:37:04:1b:1f:4c:99:d1:44:
                    58:ec:5d:45:43:6e:70:34:12:52:04:68:51:b3:b4:
                    ed:83:b9:0f:0a:99:a7:2e:e2:ea:ff:f4:31:9e:d8:
                    35:d5:c3:f4:6c:b1:75:10:0c:0b:96:ae:57:3e:31:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AD:CB:D2:4D:20:53:31:E4:92:61:F1:B4:DA:2C:48:69:85:A6:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f63c419f-416c-3d2a-a678-76594a3beea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:44:d2:d4:4b:96:be:be:06:fb:db:a7:e7:ca:69:b9:70:4c:
         3d:ce:64:4a:ef:f9:d1:90:3c:c7:84:9b:8a:28:e0:eb:7d:9a:
         46:e7:3f:d0:c9:96:7d:25:39:e0:66:68:29:a3:f4:a8:c3:79:
         73:54:bc:ce:db:b1:a4:b4:7f:6b:e6:1e:6a:0a:93:01:66:f0:
         d2:a8:e9:2b:5e:a8:8b:27:48:81:6b:72:77:81:dc:8e:67:67:
         a5:2f:a6:1b:0f:82:a4:f6:a6:59:33:45:d9:21:2d:9a:3e:65:
         ee:fc:b1:54:e3:3d:f1:68:55:ae:54:c8:22:f2:5c:72:ad:76:
         d9:8e:a7:7d:d5:8d:e0:16:5a:27:be:cb:38:c4:93:67:38:5c:
         13:b0:7d:af:cc:49:d6:7f:0e:89:d5:c9:d9:01:e0:f5:68:81:
         66:51:54:81:d4:97:f1:a3:67:e9:4f:38:dd:a0:95:ed:33:39:
         0d:fa:5f:d9:f0:5b:3f:ff:5c:f7:3e:42:70:75:d9:db:11:9a:
         3a:9c:21:45:68:6b:ca:00:12:62:7d:5c:da:86:3f:29:4f:b7:
         81:8b:cd:65:e8:d1:eb:99:d3:70:6f:94:1f:9c:c5:fb:dc:e9:
         d0:8a:82:0f:0d:af:32:b8:a3:f6:4c:30:3b:ae:80:be:f9:04:
         a2:c7:a1:34
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioML5NdwHspxX3pQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
Y2NlM2VkMzEtYTY1NC00ZjZkLWEzYWEtZmRmYjM3N2RjNjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOrlBg5Am5hNGhc+7ya2M9SA6X0b11JazbwN
phPTUfmikoB3NxQZU7UfskYoAbLiTjFXACoiEL2bPyyTtl+mFYNGv3a9M7sBINK4
it+Z3EehytxPJOnRzK7I+NOSyYUs5C/7UyXZ3OFjyNOglsdvEqLRC13y+oMtAgiT
+lozClOBRDWpYV5aMcotoGdPHy5P44c1ELndIscPSVwU9lsge+6qIolS39IrXdvR
y+nTd5VKT3Ngicqq0/58vxvfm6/LnF0dNRWNg3FuNwQbH0yZ0URY7F1FQ25wNBJS
BGhRs7Ttg7kPCpmnLuLq//Qxntg11cP0bLF1EAwLlq5XPjFiWQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEety9JNIFMx5JJh8bTaLEhphaYSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjYzYzQxOWYtNDE2Yy0z
ZDJhLWE2NzgtNzY1OTRhM2JlZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB0RNLUS5a+vgb726fnymm5cEw9zmRK7/nRkDzHhJuKKODrfZpG5z/Q
yZZ9JTngZmgpo/Sow3lzVLzO27GktH9r5h5qCpMBZvDSqOkrXqiLJ0iBa3J3gdyO
Z2elL6YbD4Kk9qZZM0XZIS2aPmXu/LFU4z3xaFWuVMgi8lxyrXbZjqd91Y3gFlon
vss4xJNnOFwTsH2vzEnWfw6J1cnZAeD1aIFmUVSB1Jfxo2fpTzjdoJXtMzkN+l/Z
8Fs//1z3PkJwddnbEZo6nCFFaGvKABJifVzahj8pT7eBi81l6NHrmdNwb5QfnMX7
3OnQioIPDa8yuKP2TDA7roC++QSix6E0
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:48:39 2025 by rpki-client