Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/191c032f-8421-3aa0-8ceb-b112ce74c82e.roa
File:                     191c032f-8421-3aa0-8ceb-b112ce74c82e.roa (raw, json)
Hash identifier:          sGH6uwgJ5kXMr/6V+oQTklsa2NzvhP8E3/nYvXkRwPg=
Subject key identifier:   78:ED:F2:75:12:66:2D:12:2D:CD:6D:A0:F9:31:40:67:FF:D9:D7:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F5BCF2D51DA51352FDC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/191c032f-8421-3aa0-8ceb-b112ce74c82e.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396827
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f5:bc:f2:d5:1d:a5:13:52:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=eaaf3a83-857b-43e2-82b1-ac440c82ae6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:75:c2:da:29:b6:18:67:5f:af:a0:d9:4b:79:
                    ff:20:8a:b3:4c:80:a7:0f:cc:f5:49:5c:cc:c3:9d:
                    63:bb:70:b1:1d:4c:de:37:d1:7b:1e:dd:e6:94:71:
                    e3:0a:45:c4:92:90:6d:85:98:37:bf:fc:d3:d9:6d:
                    30:75:b6:e1:d0:8f:fd:33:a1:cf:99:a7:11:e1:4e:
                    f3:16:0d:34:20:13:ae:54:9d:d1:68:1b:dd:00:6b:
                    a6:93:7b:74:8b:5d:ce:52:82:8b:19:8c:bc:9a:ce:
                    3d:a1:2f:03:92:75:70:0f:ee:d6:f9:d9:eb:0c:e7:
                    ae:85:29:78:e5:89:b0:36:9b:8e:99:46:73:b3:1a:
                    71:ac:7d:5a:af:3e:8b:78:01:20:ac:37:32:74:9e:
                    c4:6e:65:e0:67:e9:3a:4a:9f:50:68:7f:25:56:b0:
                    be:61:30:4e:8b:ca:90:62:d5:d1:a9:b6:bc:dd:c5:
                    17:e0:ea:05:05:9f:4a:eb:dd:04:0c:5e:e5:6c:05:
                    32:be:6d:16:01:58:38:fb:d3:81:68:93:31:38:0f:
                    31:8d:d8:48:1a:cd:b7:0d:78:f9:a5:6a:18:e5:ed:
                    7c:9b:bc:37:4d:7c:e0:3b:7f:56:25:ac:ee:43:2e:
                    ce:01:a9:d9:90:a4:48:22:f1:42:73:cf:ec:89:d3:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:ED:F2:75:12:66:2D:12:2D:CD:6D:A0:F9:31:40:67:FF:D9:D7:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/191c032f-8421-3aa0-8ceb-b112ce74c82e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:37:54:ec:b6:c9:3e:96:d7:ab:df:0f:4c:21:d3:50:3d:4c:
         f3:8a:19:dc:1e:54:db:6b:5b:a8:c9:90:9f:12:98:df:24:92:
         00:0b:c2:1f:e8:8f:24:fc:25:55:d0:fc:17:53:a4:db:5a:03:
         1f:f9:d6:6a:ca:02:ae:15:bf:5d:84:bd:07:bf:c4:08:ad:b3:
         ed:a9:15:22:17:c7:64:e4:3c:c3:8c:83:e7:e1:0b:94:56:b8:
         c6:6a:93:2c:06:0b:22:53:98:ac:35:6e:e8:d2:92:77:f0:b1:
         b3:f7:5f:22:ff:a0:70:14:32:94:ac:00:3f:5e:2c:33:ee:18:
         e9:c3:b7:c1:a2:df:1a:33:6b:ac:b8:6b:b2:b1:41:61:8c:09:
         bb:4e:78:a2:8a:de:c3:4c:bd:84:75:70:99:40:33:bf:31:c0:
         15:e3:43:a5:51:53:3d:0e:54:96:93:6b:6d:62:53:31:74:88:
         39:0e:1a:4b:17:cb:10:76:80:99:77:7c:c2:fc:64:92:b7:61:
         a7:4f:c4:6c:e3:8b:55:82:5c:e1:82:16:2d:bb:0f:e2:95:80:
         94:d5:85:0d:63:26:7c:e3:13:ad:69:26:c0:e3:de:17:0d:dd:
         28:8c:96:53:28:2a:9b:2a:d1:b2:97:eb:6c:76:47:3c:b8:96:
         f2:c6:f0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:24 2024 by rpki-client on console-fra.rpki-client.org