Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f64b122c-3023-3b47-b2b8-b54e27412271.roa
File:                     f64b122c-3023-3b47-b2b8-b54e27412271.roa (raw, json)
Hash identifier:          2JaOzNN4QyiI0bxhbTFAlch23NysiJSFzqQ1iCrYMPo=
Subject key identifier:   F7:93:93:0B:D8:3A:E1:DA:01:2E:C1:F3:6D:72:15:A4:7E:93:A3:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830BEF83EF8D79FC513E100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f64b122c-3023-3b47-b2b8-b54e27412271.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     396573
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:be:f8:3e:f8:d7:9f:c5:13:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=febf84d5-9084-42c9-9d74-ad1146645b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:33:4b:57:db:19:3e:d5:41:10:2e:d0:4f:
                    70:81:c7:99:ce:27:66:35:9b:f8:65:0f:7d:8f:fa:
                    99:70:6e:36:dc:77:4b:76:f2:7a:8a:8c:21:3b:62:
                    9d:05:80:e5:d2:49:48:2b:31:1b:c9:f8:22:02:06:
                    7e:fc:f6:54:27:85:4c:13:e4:a5:08:47:ee:a3:9f:
                    3e:bb:df:a6:ad:7c:39:00:31:bc:eb:42:9c:3a:1b:
                    df:5b:44:65:6c:8f:e3:e1:2d:3b:5b:a3:d5:9c:70:
                    b7:b1:b0:19:a5:70:ad:80:a1:03:20:de:98:dd:e9:
                    ab:1f:9a:4f:96:b8:e0:a3:b7:d6:83:3d:71:72:aa:
                    01:3b:d6:e9:8b:8e:d3:9a:8b:5e:ac:05:c3:e0:f8:
                    f3:30:36:a5:ec:0f:11:ba:a9:3e:c5:b8:d9:32:46:
                    36:0c:af:14:82:ab:19:bb:6a:85:72:d0:53:1b:03:
                    cc:8f:7d:0d:ee:34:bf:4c:5c:c5:f2:6f:de:5a:ca:
                    4a:77:fa:e1:5b:07:b5:a2:fb:b8:6a:c6:32:e5:fb:
                    61:e6:be:81:9b:6f:b5:3a:77:d6:bb:bc:4b:73:4c:
                    bd:a0:fc:00:43:51:52:14:9f:d4:e3:4a:94:e7:12:
                    fb:4d:c8:07:02:9f:de:8f:d6:5f:e3:ed:70:66:c7:
                    0e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:93:93:0B:D8:3A:E1:DA:01:2E:C1:F3:6D:72:15:A4:7E:93:A3:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f64b122c-3023-3b47-b2b8-b54e27412271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f5:6d:45:04:a6:a2:69:5f:11:53:b8:2c:c6:d3:9a:7f:12:
         5f:64:b7:b4:05:f5:c2:f2:48:78:94:5c:45:1b:af:8f:39:c4:
         ed:fe:66:01:0f:3d:d3:89:c8:75:6f:34:a2:4c:b3:19:93:99:
         84:97:31:85:81:f6:31:a1:4b:e2:01:3c:71:63:7c:90:cd:37:
         9d:25:1c:7c:35:b0:46:2d:fe:85:d1:f5:5a:85:b6:60:30:11:
         b8:3a:80:2f:c9:03:6b:82:82:fe:12:a3:3c:43:a4:37:2c:58:
         01:fc:a7:8b:ac:f3:63:03:ea:04:d4:c8:d7:76:fa:2d:d1:9b:
         00:c2:7b:08:d3:2f:8d:59:76:9b:6f:5a:5f:73:f3:68:a0:e0:
         b5:45:6c:6e:fe:39:dc:17:a9:36:24:43:88:fc:d4:1b:66:3e:
         c1:a4:2d:c6:fa:6e:29:7e:a0:f4:10:e0:ab:c5:2e:4e:f5:89:
         fd:5a:b9:ca:11:eb:76:9c:8e:06:94:70:81:16:bd:70:fd:01:
         2b:e0:93:6e:49:8f:03:ac:be:1f:60:45:79:a4:09:8f:ae:6b:
         d5:12:34:dd:fa:16:de:38:8b:02:ca:1c:cc:53:22:fb:71:b6:
         3f:f9:ed:16:f7:32:27:86:39:0a:6d:64:d0:f9:15:8e:73:99:
         14:87:cc:89
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioML74PvjXn8UT4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
ZmViZjg0ZDUtOTA4NC00MmM5LTlkNzQtYWQxMTQ2NjQ1YjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUUzS1fbGT7VQRAu0E9wgceZzidmNZv4ZQ99
j/qZcG423HdLdvJ6iowhO2KdBYDl0klIKzEbyfgiAgZ+/PZUJ4VME+SlCEfuo58+
u9+mrXw5ADG860KcOhvfW0RlbI/j4S07W6PVnHC3sbAZpXCtgKEDIN6Y3emrH5pP
lrjgo7fWgz1xcqoBO9bpi47TmoterAXD4PjzMDal7A8Ruqk+xbjZMkY2DK8UgqsZ
u2qFctBTGwPMj30N7jS/TFzF8m/eWspKd/rhWwe1ovu4asYy5fth5r6Bm2+1OnfW
u7xLc0y9oPwAQ1FSFJ/U40qU5xL7TcgHAp/ej9Zf4+1wZscOPQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPeTkwvYOuHaAS7B821yFaR+k6P1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjY0YjEyMmMtMzAyMy0z
YjQ3LWIyYjgtYjU0ZTI3NDEyMjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAM9W1FBKaiaV8RU7gsxtOafxJfZLe0BfXC8kh4lFxFG6+POcTt/mYB
Dz3Tich1bzSiTLMZk5mElzGFgfYxoUviATxxY3yQzTedJRx8NbBGLf6F0fVahbZg
MBG4OoAvyQNrgoL+EqM8Q6Q3LFgB/KeLrPNjA+oE1MjXdvot0ZsAwnsI0y+NWXab
b1pfc/NooOC1RWxu/jncF6k2JEOI/NQbZj7BpC3G+m4pfqD0EOCrxS5O9Yn9WrnK
Eet2nI4GlHCBFr1w/QEr4JNuSY8DrL4fYEV5pAmPrmvVEjTd+hbeOIsCyhzMUyL7
cbY/+e0W9zInhjkKbWTQ+RWOc5kUh8yJ
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:01:05 2025 by rpki-client