Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05f9cab7-ed3c-315f-92ab-366594526730.roa
File:                     05f9cab7-ed3c-315f-92ab-366594526730.roa (raw, json)
Hash identifier:          1xrfgcRgKVC7xNwAsBmDfMKGc7+EzLeFU/XAfj2rqig=
Subject key identifier:   21:30:ED:6D:5B:C0:2F:AA:62:3E:3F:C3:B3:F1:FF:69:F2:63:62:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F84E86EBA572F883C700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05f9cab7-ed3c-315f-92ab-366594526730.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396591
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f8:4e:86:eb:a5:72:f8:83:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=dd9fc92a-9692-400c-ad53-bdba3dff67ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:58:93:8a:c7:3c:de:14:d1:a2:4c:cf:8b:
                    03:cb:4e:8b:64:0a:66:21:b1:ac:4e:b5:fe:63:b8:
                    6e:18:da:a6:3d:ee:08:ba:f8:b6:20:82:ff:92:60:
                    92:ff:d3:46:cf:f2:21:c8:37:fa:70:bb:59:17:e7:
                    c7:24:2b:ff:cd:fb:95:3b:c8:3c:5a:54:3c:f2:e0:
                    3e:aa:c7:9a:c9:5d:c4:0f:06:21:e6:65:e5:b1:e4:
                    9e:3a:31:62:b6:62:f9:f5:59:c8:7b:4a:41:a5:4f:
                    bc:ad:9b:49:19:aa:cf:29:d5:aa:ed:9f:7d:56:8b:
                    f5:a4:93:f4:fb:68:4c:9e:85:63:47:12:e0:17:1d:
                    b8:07:19:d3:9a:5e:54:26:8e:2e:1d:23:8c:9c:f1:
                    34:cc:b0:00:7f:2d:3f:74:58:76:fc:c8:46:f7:14:
                    02:6d:b1:88:1f:c2:8a:f3:a3:c2:6f:30:c6:20:3f:
                    f2:b0:b9:24:ca:39:f3:2d:1e:ac:d3:8f:df:a1:b5:
                    f8:18:ff:3b:15:4a:e2:28:54:ef:42:11:00:5a:f5:
                    f0:a7:83:55:a4:28:09:5b:35:05:3b:97:8b:41:44:
                    2d:c9:85:7b:a3:61:f9:de:2b:17:f5:60:69:e4:a4:
                    c6:7c:de:eb:48:7b:9f:b3:42:0b:0e:20:53:d8:e5:
                    a5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:30:ED:6D:5B:C0:2F:AA:62:3E:3F:C3:B3:F1:FF:69:F2:63:62:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05f9cab7-ed3c-315f-92ab-366594526730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:69:6c:63:1a:a9:9b:9d:05:ce:37:64:e8:2f:56:48:30:0f:
         82:28:34:82:e5:01:bc:ca:68:27:3b:9c:8f:0b:69:e4:46:5c:
         3c:bd:bc:e6:dd:05:2e:ff:1b:e6:88:50:4e:99:39:bd:d0:b7:
         e0:e9:51:70:21:da:0f:e8:ac:1d:13:f7:e1:da:72:82:88:42:
         5a:ab:26:be:ed:90:ea:fe:88:0e:0d:20:e5:f4:a2:6d:6a:48:
         6c:7c:87:c6:78:80:a2:48:e4:56:1a:49:1a:a0:a2:54:d7:19:
         00:65:b9:18:c9:71:ac:be:30:12:e0:3c:c0:bb:57:00:ad:35:
         d7:9f:1d:d5:0c:a0:f2:ed:95:18:71:95:e8:3a:49:ae:cd:ee:
         ac:11:a9:4c:ef:a0:61:d9:d2:41:0d:29:12:62:bb:2e:14:6b:
         74:61:98:28:22:b6:46:0c:de:26:a4:a0:51:f7:a1:16:5a:f4:
         e1:05:32:64:2a:a8:70:3b:f2:af:93:6e:0c:b0:ef:5f:86:43:
         ef:e1:f5:33:d0:00:00:d0:01:e5:3b:b6:2a:b9:ba:e6:e0:57:
         8d:10:a8:3e:ac:cc:35:eb:50:a9:98:2f:19:db:1e:d1:56:43:
         d1:ec:d9:6a:cd:18:c1:fd:48:ae:15:8a:a0:74:25:43:99:86:
         ed:da:e0:b4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfI2fhOhuulcviDxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk
ZGQ5ZmM5MmEtOTY5Mi00MDBjLWFkNTMtYmRiYTNkZmY2N2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfFYk4rHPN4U0aJMz4sDy06LZApmIbGsTrX+
Y7huGNqmPe4Iuvi2IIL/kmCS/9NGz/IhyDf6cLtZF+fHJCv/zfuVO8g8WlQ88uA+
qseayV3EDwYh5mXlseSeOjFitmL59VnIe0pBpU+8rZtJGarPKdWq7Z99Vov1pJP0
+2hMnoVjRxLgFx24BxnTml5UJo4uHSOMnPE0zLAAfy0/dFh2/MhG9xQCbbGIH8KK
86PCbzDGID/ysLkkyjnzLR6s04/fobX4GP87FUriKFTvQhEAWvXwp4NVpCgJWzUF
O5eLQUQtyYV7o2H53isX9WBp5KTGfN7rSHufs0ILDiBT2OWltwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCEw7W1bwC+qYj4/w7Px/2nyY2K2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDVmOWNhYjctZWQzYy0z
MTVmLTkyYWItMzY2NTk0NTI2NzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCoaWxjGqmbnQXON2ToL1ZIMA+CKDSC5QG8ymgnO5yPC2nkRlw8vbzm
3QUu/xvmiFBOmTm90Lfg6VFwIdoP6KwdE/fh2nKCiEJaqya+7ZDq/ogODSDl9KJt
akhsfIfGeICiSORWGkkaoKJU1xkAZbkYyXGsvjAS4DzAu1cArTXXnx3VDKDy7ZUY
cZXoOkmuze6sEalM76Bh2dJBDSkSYrsuFGt0YZgoIrZGDN4mpKBR96EWWvThBTJk
KqhwO/Kvk24MsO9fhkPv4fUz0AAA0AHlO7Yqubrm4FeNEKg+rMw161CpmC8Z2x7R
VkPR7NlqzRjB/UiuFYqgdCVDmYbt2uC0
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:56 2024 by rpki-client on console-ams.rpki-client.org