Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26c91c7a-861b-35e3-98f1-c5b86db92945.roa
File:                     26c91c7a-861b-35e3-98f1-c5b86db92945.roa (raw, json)
Hash identifier:          Gp92bbvzz6CDaq829cNlGBcx6B5IspidMVTvq0H54GQ=
Subject key identifier:   A8:08:5F:EC:39:31:90:00:90:10:B7:1B:EC:57:43:92:CC:75:3B:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9FB48B2EC9FDF6F117F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26c91c7a-861b-35e3-98f1-c5b86db92945.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     32651
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:fb:48:b2:ec:9f:df:6f:11:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=a839201d-0e8d-4253-b530-8f8966484229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ff:7d:42:a5:e2:7c:35:2d:7f:f3:be:c4:9c:
                    8b:a6:06:dd:54:60:ee:d6:34:67:3f:1d:79:6c:77:
                    81:8c:08:c1:ff:f8:1a:6d:85:af:4b:c1:24:ae:a6:
                    26:5e:c4:da:8b:95:7f:6b:72:a6:68:15:80:73:04:
                    33:29:23:ad:11:eb:1a:3e:82:ab:ed:ab:64:b0:81:
                    01:4b:24:f2:1d:6b:17:0b:df:d4:0e:58:a5:ab:7b:
                    15:a7:3e:34:32:9e:01:1b:1b:3a:8c:81:2e:58:d2:
                    6b:04:f1:a2:68:9f:90:7a:e1:d6:24:51:d7:53:09:
                    e5:14:81:1b:e9:f6:25:74:f0:61:83:33:b6:67:1b:
                    33:13:88:57:f1:ff:9e:d1:ac:f7:24:84:4c:45:ca:
                    e1:c4:d2:9f:2e:86:6e:90:85:ca:fa:47:d8:93:d2:
                    6b:aa:ac:5b:fc:4f:8c:9b:2e:c3:5a:16:50:bc:9e:
                    47:a2:fa:a5:ca:fe:c7:ac:b5:a2:ca:4d:58:9b:88:
                    4c:22:f9:0e:bf:d6:67:82:cb:74:f7:d6:e6:e0:8f:
                    fe:dc:d6:d0:8e:29:a1:d2:9c:c0:0c:91:04:fb:91:
                    58:a1:62:23:db:80:4d:ec:70:4c:7f:31:ef:cb:ea:
                    82:b0:28:4a:12:a5:60:b1:99:9e:ee:eb:58:2e:ba:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:08:5F:EC:39:31:90:00:90:10:B7:1B:EC:57:43:92:CC:75:3B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26c91c7a-861b-35e3-98f1-c5b86db92945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b7:85:4d:42:4b:3d:56:2f:db:5b:2d:32:8b:b1:5c:74:69:
         3d:d5:02:de:3e:e8:1a:fb:dc:36:2a:d3:50:ec:19:ac:45:18:
         ab:04:8a:33:b7:36:9d:09:5d:42:e7:c3:da:54:0c:67:d3:35:
         1f:0e:3d:5d:47:86:a4:62:54:e2:10:aa:71:b1:cd:79:04:9f:
         6e:50:7d:96:b9:16:bd:4a:97:75:ab:2d:ca:a9:dc:33:e2:3c:
         f2:fb:e1:98:90:e7:ed:92:69:c8:8c:fe:4e:f8:9c:52:ae:d0:
         56:42:83:78:a4:b7:54:0e:ca:01:c6:cf:d9:4b:e3:b7:5a:88:
         9d:76:32:ab:1c:80:ad:8a:c6:b8:5a:aa:eb:b8:34:aa:f8:1f:
         72:06:a5:41:16:c3:b2:fb:55:2a:2b:70:0d:a8:44:14:4f:a2:
         9e:cc:65:b7:38:72:b9:54:35:ae:2b:d7:b5:6c:b7:12:29:1c:
         df:30:06:64:e2:ab:7e:a5:5d:17:49:7a:b0:e4:af:a7:3f:c1:
         6d:57:e7:73:7d:d3:e3:e8:74:4d:63:09:83:b8:5c:01:ae:a8:
         a3:d7:aa:3c:6b:2a:d8:eb:24:17:80:ca:20:5e:31:bf:9e:41:
         d3:c9:8b:d6:68:e9:5f:bb:c3:72:bb:5c:22:eb:ed:33:5f:be:
         3c:2e:58:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:59 2024 by rpki-client on console-ams.rpki-client.org