Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dcf371b-68f9-3fa8-930a-aec4474a89a1.roa
File:                     0dcf371b-68f9-3fa8-930a-aec4474a89a1.roa (raw, json)
Hash identifier:          iW3Rsv2bRbUrMYSIRc3iaRQ8yUJMX0EZDP6BTgrvzc8=
Subject key identifier:   93:3C:1C:C0:18:9B:97:D1:E3:6A:36:04:FB:E8:65:66:86:2B:EA:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F5D9B03724F23B30C900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dcf371b-68f9-3fa8-930a-aec4474a89a1.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396554
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f5:d9:b0:37:24:f2:3b:30:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=bf69cb8f-5618-4831-8fa4-352506834fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:18:41:d9:70:6a:80:47:a5:1a:09:a5:99:
                    3b:2d:a8:43:79:fc:56:43:40:ab:78:92:e3:f7:23:
                    71:76:ef:86:b5:f9:79:db:35:a3:42:45:4c:6c:a0:
                    9d:ea:c2:16:3d:97:6f:4f:a5:58:bd:a8:4b:9f:41:
                    fb:58:63:3b:bf:f2:42:3d:fc:ec:d9:1a:33:4e:50:
                    b2:a0:45:12:9f:f4:8c:34:ac:56:f7:7a:ef:3f:3c:
                    54:0f:53:93:81:08:cf:ef:7d:ad:24:c4:e7:64:22:
                    f9:8f:9e:f1:ac:af:31:65:5f:c3:4f:41:75:92:ea:
                    40:98:72:e4:a0:9e:37:3e:a2:07:30:27:2e:7e:4b:
                    82:67:cd:ea:89:35:c9:ed:6b:1e:53:09:2e:af:98:
                    bf:59:02:2b:d6:1e:79:4e:e6:a7:fc:cf:3e:30:7e:
                    56:81:ee:81:fe:8a:b4:58:1e:16:4d:3a:c6:20:d4:
                    43:25:c2:4c:85:8a:7a:dd:cd:b8:78:54:d0:46:5b:
                    18:68:9d:c6:7a:eb:bf:0c:f5:f9:54:66:de:6f:3b:
                    f4:fd:8c:9a:06:cc:28:ea:cf:b4:4b:45:f6:6d:c4:
                    68:ed:ca:94:40:62:f5:17:06:d1:bb:6e:01:01:89:
                    aa:93:e7:fb:7b:4a:e8:4b:93:e7:61:26:e2:e8:88:
                    16:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3C:1C:C0:18:9B:97:D1:E3:6A:36:04:FB:E8:65:66:86:2B:EA:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dcf371b-68f9-3fa8-930a-aec4474a89a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:72:85:69:20:1e:9f:41:c9:b5:af:f8:d8:f1:8a:2f:e6:16:
         b7:f5:95:91:cf:d9:8f:ae:81:77:94:85:b8:28:53:11:5f:2b:
         d1:79:59:4d:93:f1:7d:f4:16:20:ec:1b:fd:74:db:ba:55:87:
         34:f0:49:2b:b4:6f:d1:4b:4e:9a:92:e1:d1:dd:25:40:ae:ae:
         01:3a:fa:a9:ee:23:94:b5:b9:c9:e2:37:8c:6a:b8:8f:3a:74:
         e5:29:b5:53:cc:42:ed:e3:f2:5e:b4:07:62:11:79:e0:6f:42:
         33:8f:d0:63:8f:f9:8c:89:76:8f:7b:f1:f0:66:64:43:44:54:
         1c:94:c1:3d:5c:3a:32:6a:36:e3:17:ff:9d:e1:4e:6e:3f:c4:
         31:76:fc:ec:54:57:e5:0e:17:02:74:88:5c:9a:4b:3d:05:64:
         a1:ae:91:9f:65:87:fa:40:a5:fd:f5:37:9b:ab:53:3b:2d:b2:
         78:af:09:71:22:e2:e3:5f:73:77:78:2a:56:7d:09:5c:df:4f:
         00:62:28:82:39:5a:7e:62:fa:16:27:8f:a4:70:76:27:a0:de:
         37:45:ef:52:83:ec:2a:fa:c2:4b:0c:d1:e7:31:a1:b9:21:7c:
         52:33:44:f5:26:c2:8b:a6:87:48:65:aa:7a:c5:a5:62:c3:4b:
         05:e9:11:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:57 2024 by rpki-client on console-ams.rpki-client.org