Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a59110-e169-3d90-a0a3-33333fd93cd1.roa
File:                     48a59110-e169-3d90-a0a3-33333fd93cd1.roa (raw, json)
Hash identifier:          MinT5j7x2loKIwKcbt4AIn0kn1TM9NPtvPhdza+aU/s=
Subject key identifier:   1D:7B:A0:01:EC:79:BF:7E:4A:CE:7D:DE:2F:44:E5:77:74:66:77:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9EFC773CE8ED432F6A4B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a59110-e169-3d90-a0a3-33333fd93cd1.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396550
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:ef:c7:73:ce:8e:d4:32:f6:a4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=9cafde34-0f5c-4513-803e-0561a23cce57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:63:46:2c:86:c0:fb:43:4c:ee:d6:6a:71:
                    a1:0a:8b:48:1e:5d:c6:6d:da:55:42:30:cf:d7:25:
                    38:c9:05:56:34:42:dc:06:bc:e7:0f:c1:9b:4d:c8:
                    2b:e5:73:a0:f1:55:bc:d4:d1:f1:3f:3b:e4:1d:42:
                    d5:e5:fc:61:1a:03:d7:40:b0:05:85:fe:c9:69:34:
                    19:bb:b5:9e:5c:5e:af:5f:87:4b:43:db:33:00:70:
                    d4:5a:0a:b2:c8:7b:da:ce:0d:c2:f1:e1:2b:b1:e9:
                    36:08:9a:08:ed:01:14:b4:22:46:33:f7:53:c2:57:
                    e4:6d:02:eb:46:90:09:a3:5c:e5:42:33:3f:f8:6f:
                    1f:d4:22:32:9f:14:ab:1d:30:37:c6:b3:32:58:31:
                    a5:78:c5:e8:2c:01:42:8e:fb:51:e1:8e:d6:5c:7e:
                    e7:e8:d0:0a:64:da:c0:45:b5:23:e4:d5:ff:91:56:
                    c7:48:d2:1f:97:d2:92:06:39:55:b0:26:52:1c:99:
                    b7:c7:54:24:c5:04:3a:d1:75:e7:86:bc:db:64:11:
                    b5:a4:6e:22:3a:89:30:45:14:a5:89:e2:25:02:c6:
                    5c:48:98:9d:77:13:7e:ca:63:ad:03:af:59:df:21:
                    80:08:cf:4b:a3:ce:ed:8a:2e:0e:04:1c:db:99:42:
                    d5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7B:A0:01:EC:79:BF:7E:4A:CE:7D:DE:2F:44:E5:77:74:66:77:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a59110-e169-3d90-a0a3-33333fd93cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d8:a5:5e:f6:da:f3:70:f9:2c:33:e2:c3:60:32:ab:e4:9b:
         bb:8f:69:4a:ae:2c:36:0f:c3:fc:6b:2d:91:e2:44:5f:ea:aa:
         91:55:d3:9c:36:4c:93:b9:5a:61:f5:57:43:43:1f:49:00:8a:
         cb:6e:17:c7:ff:64:70:d8:ec:f8:32:52:94:b4:c8:fc:43:d9:
         54:43:72:db:3e:7d:f7:a0:1c:3c:0e:e4:3a:9d:df:cb:c2:b8:
         11:23:a7:17:78:5c:c4:d8:5b:ae:80:73:d1:fa:80:44:20:83:
         86:78:18:65:43:ac:f1:ba:01:83:ec:55:8c:16:d2:b1:f6:ab:
         49:ad:c2:c7:f5:b8:e6:a7:cd:e5:75:6f:e6:b6:ff:1a:ff:f7:
         f0:8d:25:85:db:a9:20:8b:c9:23:fc:22:44:3a:3b:c7:10:43:
         61:3d:ac:98:b2:11:3c:01:85:07:e1:68:91:93:3b:e6:65:ce:
         a7:23:c5:9c:6e:16:4a:4a:83:c2:03:46:6b:ae:36:60:5a:a8:
         44:9d:4d:aa:a6:5b:bf:35:b1:b3:80:e1:d0:78:67:b4:c6:94:
         f2:c9:06:0e:7e:5e:10:02:69:19:e3:7a:1c:a5:3c:24:bc:85:
         b6:f3:5e:50:69:a3:a1:13:de:df:21:e0:58:e6:74:d8:6d:d1:
         32:4d:45:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:02 2024 by rpki-client on console-ams.rpki-client.org