Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4041993b-13e1-3b5b-8657-0a7f7446c299.roa
File:                     4041993b-13e1-3b5b-8657-0a7f7446c299.roa (raw, json)
Hash identifier:          4tzoIa0lK3/XGH+oJ4Xz6pSzQZoI412BeIYeZ6LqCsU=
Subject key identifier:   16:16:1D:51:20:9B:A0:AA:CF:69:51:65:ED:07:2E:58:D6:E8:30:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F29761D2C009A16B1100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4041993b-13e1-3b5b-8657-0a7f7446c299.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     20362
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f2:97:61:d2:c0:09:a1:6b:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=a0d0e757-72f5-486b-a8e6-84dad4b0d686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3a:33:57:6d:39:c6:92:79:b7:ab:bf:e5:c5:
                    6e:6e:6e:0c:8a:4b:d4:67:60:3a:0c:a4:71:e3:51:
                    95:8b:9a:b2:ff:5e:af:fc:ea:ae:db:8f:67:15:b4:
                    36:43:eb:b1:dc:7b:22:79:d5:2d:4f:29:f8:ec:9d:
                    61:fe:43:be:8a:2e:ae:08:6f:2e:58:31:e7:e6:d8:
                    b7:1d:49:77:9d:16:75:46:7d:bd:6b:c9:af:f7:2b:
                    c0:88:7c:fe:e0:7c:48:fe:ea:76:b5:12:58:d3:61:
                    32:f4:ce:c6:91:84:cc:f0:54:ce:8f:6f:df:7f:eb:
                    b3:39:7d:6e:ff:24:b3:e1:bd:8b:ed:4a:ed:8c:5f:
                    03:0b:04:59:60:f5:60:01:4f:45:e1:50:d5:cc:fd:
                    1e:f0:49:3d:b2:06:0b:1b:d2:d6:c3:11:e6:c5:aa:
                    03:ec:c0:cc:7b:f6:1b:73:9d:9b:74:38:7b:13:6c:
                    41:5e:2b:26:c7:db:ea:67:8c:fd:dc:ca:49:75:e4:
                    13:28:81:c8:87:95:e6:a3:a9:5d:fe:9b:01:72:3f:
                    cd:dc:d2:af:29:8c:5d:10:5b:3d:9b:18:32:f8:be:
                    c9:bf:16:85:0f:fd:e5:b5:41:1f:d5:9d:62:04:23:
                    44:a6:a4:08:d7:15:dc:34:9e:fe:d5:7d:5c:05:fc:
                    81:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:16:1D:51:20:9B:A0:AA:CF:69:51:65:ED:07:2E:58:D6:E8:30:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4041993b-13e1-3b5b-8657-0a7f7446c299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:eb:17:23:c6:d2:20:88:ac:c3:63:d8:2b:ef:f7:b6:40:19:
         52:78:64:1d:23:51:80:c3:f6:26:33:86:82:b4:e2:e9:46:3e:
         1c:3e:fe:84:e2:73:72:59:e3:ab:c7:7c:bb:bf:77:28:61:5a:
         7d:28:e0:e4:43:bc:dd:2e:0a:18:d6:1e:44:2f:c1:74:9b:a9:
         f5:9a:c1:5d:42:95:14:ff:1e:4d:df:c6:c1:d1:84:a1:61:23:
         b0:be:8b:0e:f9:e5:6b:c3:23:01:5e:7f:7a:6a:ae:59:82:7a:
         c5:40:43:5b:ad:37:ea:e1:b7:c2:50:a1:3c:51:95:05:2b:d7:
         49:ec:4a:84:cd:de:5a:84:da:8f:b8:7c:bd:55:60:86:f7:5e:
         df:db:07:ce:cb:50:53:ca:cf:fa:d1:87:a9:91:78:19:81:c1:
         eb:fd:81:ea:c6:a0:a5:d5:89:26:4e:f4:87:5f:26:a0:50:d7:
         90:30:ab:88:ac:0d:a1:76:b6:90:c5:b7:b8:41:50:fc:22:1f:
         1d:f9:a6:97:ba:4d:96:a7:7a:66:fc:55:e1:59:19:6c:63:d4:
         1e:93:96:97:6e:28:04:3f:fc:14:b1:d9:0d:7f:f9:2c:5f:fc:
         a6:21:93:55:f8:d4:7a:e1:31:58:e2:20:ec:4c:ab:5a:5b:8b:
         02:e7:39:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:28 2024 by rpki-client on console-fra.rpki-client.org