Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0155dabb-0619-3d86-ad7a-d48e2314a1f0.roa
File:                     0155dabb-0619-3d86-ad7a-d48e2314a1f0.roa (raw, json)
Hash identifier:          HCzTl/8kOHxFQSUn7PJRkJBDAGPuX9LPTqkt+7K6VPQ=
Subject key identifier:   7A:C1:CA:0E:40:BD:61:62:03:EE:BD:AF:DD:6C:E1:7E:6F:4D:85:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9FB2E24D60079B9EFEA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0155dabb-0619-3d86-ad7a-d48e2314a1f0.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396567
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:fb:2e:24:d6:00:79:b9:ef:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=d81f7e05-20fd-4840-9b96-625120d6a1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:4e:2e:60:34:ba:94:3c:b3:60:89:65:5a:
                    f8:d6:e7:c6:14:73:8d:60:aa:39:97:3c:36:7b:f2:
                    3e:34:62:14:b8:f9:f1:a0:8a:c2:15:98:5e:60:2f:
                    5d:f3:e2:9c:fa:fc:d0:a1:33:a7:f4:66:20:fa:b5:
                    e3:9b:ed:ca:e9:31:e5:2b:94:fa:f8:82:6b:ad:20:
                    b2:c6:02:f1:ac:78:d3:1e:48:38:db:a7:cb:1a:50:
                    ad:00:7f:4a:78:ba:5a:df:53:59:5b:ed:2b:b7:a7:
                    d2:96:c2:a5:c6:cb:53:f0:bb:df:2f:c2:20:a4:99:
                    d9:d0:44:19:87:4d:55:c8:26:a0:93:e7:dc:ab:df:
                    3c:82:57:c6:fd:93:da:6c:26:85:b1:f3:0a:28:65:
                    d5:d9:df:7b:d6:7b:1d:40:ee:8e:b0:4a:7b:62:33:
                    2e:66:5f:95:c7:87:1b:d2:4a:38:5b:5e:61:a1:e7:
                    07:5f:3a:e8:60:8e:fd:94:61:9f:c7:e5:2e:4f:b5:
                    31:6e:d9:e2:b4:fb:52:a0:28:ff:1a:96:4a:e6:76:
                    90:2a:58:a0:59:78:62:fa:f9:9a:1d:85:69:8d:2f:
                    e4:dc:55:20:a7:35:db:36:4f:6b:1d:96:26:8f:97:
                    0b:0c:a7:bc:7f:90:73:c3:1a:5d:ae:db:77:80:37:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C1:CA:0E:40:BD:61:62:03:EE:BD:AF:DD:6C:E1:7E:6F:4D:85:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0155dabb-0619-3d86-ad7a-d48e2314a1f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:5e:35:ea:2d:5d:30:fb:64:9b:a8:ab:ec:10:1f:e5:4e:7d:
         01:93:c7:f1:ab:8e:df:e5:36:fe:1f:15:e7:bd:ae:67:b1:d4:
         2c:f9:6d:0a:67:17:ab:41:e0:b4:c0:0d:92:e3:57:3e:e4:00:
         77:7e:93:63:74:87:a5:a6:59:ad:57:04:f1:9f:74:8d:12:11:
         13:2c:76:56:90:ee:d9:6a:cc:ce:fe:5a:d2:af:35:3f:17:45:
         31:6f:59:6e:49:38:a8:50:36:d3:6c:e3:f6:f0:fc:f7:98:12:
         9e:2a:fa:e1:6a:02:31:7e:3a:dc:af:05:e6:e9:e0:34:6d:72:
         a8:ed:39:f9:4c:ae:fe:e8:8b:da:af:7d:c8:f4:4f:c3:9b:d4:
         8b:ab:84:d1:cf:c0:a5:a8:c6:d7:ec:ce:b2:3b:0f:51:b7:f8:
         57:39:d1:b9:78:16:8c:cb:96:9d:90:5e:74:08:47:14:6f:44:
         dd:8e:61:e8:a2:a8:b7:ac:d1:bf:a9:44:d5:2d:8e:fa:e8:de:
         33:70:16:55:b2:f9:00:8b:ff:ba:8e:1e:cd:1a:dd:7c:8f:95:
         cb:b3:f9:5e:c7:d9:66:25:55:db:db:03:ac:cc:0f:8c:96:b3:
         b7:2f:4d:7f:7e:07:58:c7:34:5d:6a:25:8e:a1:5b:b5:80:e4:
         a5:c9:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:56 2024 by rpki-client on console-ams.rpki-client.org