Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa
File:                     2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa (raw, json)
Hash identifier:          s+GvZgQJskfhv5Y2kx4xq3jFagAenrEV3ktO/ol1uko=
Subject key identifier:   2F:F8:C4:EC:AF:EB:E7:60:7E:D6:AA:2D:57:35:D2:79:6A:60:88:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584754E0F02D510B52BD5416C280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     7342
IP address blocks:        192.68.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:f0:2d:51:0b:52:bd:54:16:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=a1192346-cb2a-4065-bd7e-eca3f4daf5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0c:80:e0:11:e3:a9:af:8a:64:53:8e:94:df:
                    e1:be:c7:98:77:60:f9:e4:25:9d:57:73:fc:27:02:
                    be:ad:4f:49:95:ae:9b:e0:d6:70:bf:06:7c:3c:2f:
                    83:1f:14:6f:f9:9b:d2:22:a7:29:ae:d7:13:0c:cb:
                    53:1e:7b:5b:06:79:34:f6:e7:f4:52:57:87:06:fd:
                    ef:84:8a:2d:6b:92:6d:e3:d1:e0:45:57:cc:4a:7f:
                    c2:0c:50:b2:37:e9:f2:82:60:38:99:3b:ac:cb:65:
                    40:28:32:a5:65:1e:ed:8a:0d:27:f0:68:65:a0:27:
                    62:ad:29:53:83:73:1d:a5:38:23:e1:c3:fc:0e:3a:
                    cb:d5:bd:24:e9:7b:d2:7d:23:2e:9a:25:ef:7f:07:
                    f7:95:3f:49:e1:e4:29:59:6a:87:15:b9:81:49:19:
                    45:a5:38:3b:31:69:96:7d:72:83:0f:83:81:d7:c2:
                    d9:23:ba:3b:9b:90:11:8d:d9:17:4c:55:6b:ff:89:
                    f8:a6:61:11:55:6c:b4:db:d6:0f:ec:d2:97:e0:a7:
                    3b:f0:cd:86:e1:b9:b7:99:0e:d8:02:08:2a:b4:90:
                    30:16:28:07:1a:db:d8:a1:40:a2:ca:31:3a:c4:de:
                    0a:92:9e:a3:f6:04:c2:94:ed:12:15:d0:69:7f:94:
                    40:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F8:C4:EC:AF:EB:E7:60:7E:D6:AA:2D:57:35:D2:79:6A:60:88:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:05:92:ac:68:85:3e:09:d5:09:64:ce:93:96:27:1b:c5:52:
         bd:ff:17:ef:96:93:34:0e:94:9f:eb:07:b7:d3:e1:18:1c:40:
         9a:a2:31:a5:5b:43:48:f9:b4:ec:b8:94:3e:83:93:3d:69:91:
         79:e8:4e:3a:02:43:db:54:73:3c:b0:49:91:4e:79:99:2d:21:
         31:da:74:59:72:28:14:5a:12:df:89:5a:10:d9:65:3e:88:6b:
         49:54:28:7d:ff:be:55:b7:39:6c:83:5e:65:69:12:81:e1:e1:
         6f:bc:24:00:6e:12:2e:b1:be:06:08:74:32:8f:1e:5a:45:c6:
         f5:1f:ce:2f:28:63:b9:d2:cd:fc:7c:76:38:c7:c1:13:84:3d:
         4a:66:2a:1b:08:f5:03:71:e4:d0:9a:d2:f0:fe:65:dc:90:95:
         76:fb:eb:6b:8a:8e:90:c0:b6:9d:ed:9b:b3:8f:24:b9:00:77:
         35:61:01:c6:68:1b:24:db:95:f1:7a:1b:9b:20:d2:03:47:0f:
         48:a0:9c:6c:0a:ac:e6:84:45:09:bf:65:94:1c:6f:7a:39:9d:
         31:e0:f5:75:6f:df:7c:4c:a6:3d:31:33:f4:8e:fc:b7:a2:9d:
         3e:a9:cb:c0:40:62:80:3b:6a:fe:ea:b4:f9:23:bc:fe:99:b8:
         c5:fb:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:25 2024 by rpki-client on console-fra.rpki-client.org