Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1df3b3c1-9099-3935-b834-929b0299c97b.roa
File:                     1df3b3c1-9099-3935-b834-929b0299c97b.roa (raw, json)
Hash identifier:          k0fcetQTE+3srCgu1GBtfzojUrqNnwScQxAMeIR8CSE=
Subject key identifier:   E7:89:96:51:15:5F:BA:70:50:E9:9E:C8:55:71:2F:28:65:2C:BE:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F76FB361E323975ED780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1df3b3c1-9099-3935-b834-929b0299c97b.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396606
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f7:6f:b3:61:e3:23:97:5e:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=0ba5d688-20b1-4180-80c8-2c24424fd8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0c:ce:09:94:fb:a9:24:8f:9d:9f:50:16:be:
                    e0:7a:83:0d:18:f4:fc:49:ad:fc:54:22:a1:c9:5d:
                    78:82:40:4b:85:bd:fb:d3:6e:2e:0e:4c:b2:e3:70:
                    b5:f0:6a:d5:81:23:d4:0e:78:97:53:5e:1b:88:8f:
                    b1:1f:2f:0a:1e:6f:56:f2:46:77:66:d3:3c:c8:a0:
                    5d:3c:d0:de:a8:9a:af:b1:b5:8a:56:10:61:c7:df:
                    96:88:8f:b7:d3:fc:41:b7:60:ef:8b:20:97:99:c7:
                    71:e2:91:fe:b7:88:6f:a1:c0:ff:e3:95:82:82:20:
                    c2:0d:ff:7a:de:a2:0b:39:60:a2:11:b1:97:29:92:
                    f8:b6:18:0a:d6:77:f0:b3:ee:c2:c4:2c:02:9a:49:
                    cb:1d:43:34:04:4c:a3:b4:57:db:86:8b:79:56:fa:
                    88:86:83:21:2c:72:16:38:3d:dd:f3:6e:bf:a0:5d:
                    05:83:15:42:6a:ae:e5:82:de:73:40:7c:b6:10:55:
                    72:d8:6c:50:66:f6:85:ae:63:9b:77:1e:e5:c9:9a:
                    09:b4:5f:8c:95:43:5d:1f:8c:89:78:e2:47:0e:04:
                    51:1d:84:91:20:26:5d:e1:12:25:52:18:9a:63:7c:
                    0b:af:40:46:b4:63:4e:bc:92:4c:7d:60:c6:8a:b0:
                    3b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:89:96:51:15:5F:BA:70:50:E9:9E:C8:55:71:2F:28:65:2C:BE:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1df3b3c1-9099-3935-b834-929b0299c97b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:bb:92:c6:f0:47:84:96:4b:03:4c:33:68:52:96:ec:3e:6d:
         f7:34:f0:45:8a:ce:f4:fd:7a:78:b4:b5:91:e8:6b:cd:e9:fd:
         03:65:c6:66:9d:7d:08:47:f0:da:0b:61:d0:1a:53:17:82:53:
         9d:11:6a:a3:2b:b7:9a:3b:d0:3c:d4:d2:9b:a6:b5:92:15:32:
         7a:f4:fa:a5:57:31:49:59:01:2b:bf:c7:6c:c8:47:c6:c2:cb:
         9f:d2:4d:fa:e6:58:29:02:62:3d:30:ff:fc:9f:9c:a6:2f:51:
         38:95:68:7f:af:08:3e:63:b2:73:f4:51:b6:11:75:fb:76:d1:
         3e:6f:01:2e:74:93:3e:34:b6:f3:81:14:ec:ef:19:f1:a9:33:
         1c:7b:74:3d:d4:25:4a:34:2c:11:34:1f:7c:6d:03:6a:85:46:
         99:ad:c8:f5:f4:5d:e3:ce:4a:65:ea:87:83:1b:24:fb:11:85:
         1a:60:56:5d:a0:36:ad:5a:51:ca:08:bf:a2:1a:a0:b9:af:16:
         82:a9:e1:7f:a4:35:60:dc:2a:3a:5d:d6:6a:17:d0:38:af:62:
         5e:7a:13:c0:1d:e4:f7:46:35:40:8c:a5:ae:62:c9:fb:a3:2e:
         d5:5c:4a:e4:a3:cd:71:7a:56:e0:38:14:14:4f:83:be:1c:fa:
         de:3e:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:24 2024 by rpki-client on console-fra.rpki-client.org