Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf2ea11-4acc-3241-9293-e3e075c3dc18.roa
File:                     1cf2ea11-4acc-3241-9293-e3e075c3dc18.roa (raw, json)
Hash identifier:          UtvvxiKYhMLiTULqvlO1XieIgXO7rMpde0doIDyMUzY=
Subject key identifier:   9B:D2:8C:32:33:91:7B:FA:40:F5:FB:CA:1D:F5:9D:D7:DB:89:8D:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F633A656CA051CD6C0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf2ea11-4acc-3241-9293-e3e075c3dc18.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     397196
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f6:33:a6:56:ca:05:1c:d6:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=ad45dd3b-3af4-4487-9ede-3abb3c584967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:28:8a:51:1e:f8:a9:e1:3e:39:68:29:a5:23:
                    e3:0f:60:90:c1:71:07:38:ee:10:45:cd:b2:64:2d:
                    8c:3a:1c:3e:74:83:5b:a4:ed:f4:c1:0c:8c:7c:1e:
                    4c:be:ed:34:63:16:4e:59:31:e3:97:4b:6c:11:55:
                    6f:46:04:73:79:78:7e:b0:04:5b:74:60:4d:b0:46:
                    f7:10:14:e1:8e:ad:f9:36:b8:95:6d:79:d7:09:21:
                    7e:86:45:60:d6:87:d5:e7:9a:ed:19:53:cb:83:70:
                    2a:f6:d2:dc:00:f5:55:49:e5:29:32:ed:06:9c:a5:
                    4a:33:20:89:4f:3f:ac:47:87:81:63:21:b7:85:da:
                    68:1b:3f:e8:17:bf:bc:85:ec:31:59:a8:bc:8b:fa:
                    15:57:7d:1d:25:a1:59:69:ca:1d:33:0b:7a:fc:ce:
                    92:9f:7b:72:34:e8:12:41:1f:33:02:ce:7d:02:aa:
                    35:55:86:7a:a0:2a:42:9b:9c:75:0f:9d:30:08:78:
                    01:38:5a:c9:7e:fe:64:09:a0:f9:84:94:05:b6:ee:
                    9c:19:26:a1:ac:b7:af:01:99:da:2e:f8:59:03:ed:
                    c0:06:80:c4:56:4d:59:04:16:56:31:26:4c:c9:ba:
                    3f:d6:d7:2b:45:36:12:c2:c8:55:1d:41:de:ef:6f:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D2:8C:32:33:91:7B:FA:40:F5:FB:CA:1D:F5:9D:D7:DB:89:8D:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf2ea11-4acc-3241-9293-e3e075c3dc18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:53:58:fe:b3:6f:0b:14:26:6f:54:37:a2:0c:e7:67:5e:74:
         76:79:f2:2e:7e:b7:8e:fa:e2:6f:7d:05:2a:3c:3e:1a:55:63:
         58:be:02:ff:9b:22:cb:ac:13:c7:3f:7a:78:75:1e:65:10:5a:
         3d:7c:16:9d:b2:64:79:02:3c:d3:87:40:42:bb:5f:ce:01:cf:
         3d:eb:55:dc:d7:31:5e:ff:5e:99:61:e3:37:8f:17:a7:85:3e:
         07:f4:fd:82:8a:2e:80:bc:4d:b4:71:69:78:42:c5:b6:99:5e:
         b8:62:dd:84:35:5f:e7:b6:79:12:83:7b:a1:49:61:3f:e4:00:
         b8:4a:79:61:db:4c:c0:22:49:79:b6:ab:01:67:7a:c7:46:48:
         0a:66:07:28:34:14:4c:c1:6a:64:07:15:38:c2:a9:b6:73:bf:
         60:7e:bd:45:c8:86:42:9f:b8:c6:f6:64:e7:49:e9:40:8b:52:
         9a:d9:ac:17:ef:15:2d:f8:b6:fd:df:82:75:11:5e:0a:f4:97:
         a3:36:30:61:43:ac:13:42:70:2b:64:73:f3:d8:bf:d7:a0:d4:
         90:68:8d:46:c4:55:79:89:19:49:3b:5f:e4:c6:82:b2:4c:d4:
         4a:bc:85:a5:b4:34:94:54:12:03:ea:63:23:74:86:d6:70:04:
         b3:d5:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:58 2024 by rpki-client on console-ams.rpki-client.org