Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c77ee1c-f129-3052-8ce7-613539905fb9.roa
File:                     4c77ee1c-f129-3052-8ce7-613539905fb9.roa (raw, json)
Hash identifier:          7e/60sJuBvROVdhy9Vg4pBFpL6zgR8bAH4bR90P3O/s=
Subject key identifier:   1E:C7:A7:67:C4:7F:CC:C0:CD:B8:72:5F:E3:08:E2:5E:6B:F9:99:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F393746C0C7948C89940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c77ee1c-f129-3052-8ce7-613539905fb9.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396608
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f3:93:74:6c:0c:79:48:c8:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=2ee07356-3e90-4186-aba1-536ea42367ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:d1:7c:0f:21:d1:14:1b:fb:93:c2:c5:17:
                    94:4b:8e:e4:4c:6c:c0:8a:ac:3e:56:ef:c2:65:f0:
                    58:f6:a9:2f:05:b4:5c:ed:91:78:3d:b5:53:bc:06:
                    81:5e:9e:71:79:3b:19:20:47:e7:fd:3c:d9:c1:22:
                    2d:f7:64:18:98:47:b5:af:15:46:f5:37:39:94:5e:
                    a9:e4:1b:79:c0:78:51:37:cd:7e:4d:6f:da:20:70:
                    e5:6c:18:d9:e7:42:43:7e:11:26:99:69:e5:aa:ea:
                    95:03:52:3a:c5:d4:28:23:75:57:de:44:1c:95:56:
                    b7:bb:8e:84:61:0c:e4:27:d5:51:31:71:78:1d:62:
                    b1:77:7f:cb:5c:f5:3e:45:bb:17:99:70:b6:de:8e:
                    69:c1:97:2b:79:57:4d:c2:ab:02:3f:4b:b1:d1:a2:
                    c2:ea:bb:17:a2:45:9c:c3:98:33:77:01:b0:4c:49:
                    34:38:d8:4c:1f:3d:ed:f3:8f:86:5f:45:92:6b:58:
                    cb:b4:2c:dd:63:5f:00:8b:4e:40:e7:14:7d:6f:da:
                    c3:c1:26:bb:9f:04:d9:86:1a:0d:1f:aa:8f:af:7d:
                    30:e8:23:6c:99:64:52:6f:d6:9d:cf:6a:80:31:9b:
                    8f:fe:12:8b:d5:cd:db:b8:f4:05:76:a9:61:c3:7d:
                    ca:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C7:A7:67:C4:7F:CC:C0:CD:B8:72:5F:E3:08:E2:5E:6B:F9:99:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c77ee1c-f129-3052-8ce7-613539905fb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:6d:5e:ff:f8:b8:92:da:f3:03:05:a8:50:4c:2d:c8:c0:fe:
         84:31:92:50:5d:38:94:dd:74:d7:cc:e1:9f:9d:21:35:c9:b9:
         89:2a:c9:9d:e3:a8:96:2e:f5:a4:cc:2c:1b:bc:39:0f:b1:0e:
         d9:fe:51:34:f6:e7:ef:0b:5b:df:99:07:f5:de:7c:86:eb:39:
         74:7c:38:af:dc:72:f4:74:f3:d6:f4:a8:08:f3:5a:13:cb:36:
         5c:a2:04:05:1e:d1:d2:61:ad:d9:da:1c:ea:18:5a:d9:b1:a8:
         4c:2f:72:5a:b9:4f:cb:3d:51:be:ef:55:fc:9a:57:84:23:a5:
         96:a6:c4:97:8f:a7:7b:e2:4f:07:a2:81:ef:b7:85:c6:5d:7b:
         ab:85:26:b9:03:d1:17:fa:e2:97:6b:34:85:70:27:82:17:71:
         30:ac:f7:cd:34:0f:91:dc:89:b5:ad:54:5e:b1:cc:5f:fb:0b:
         4b:3c:18:2d:37:42:24:e8:26:82:56:2a:e3:85:ae:74:55:c9:
         ca:09:6b:f4:d1:39:b5:46:20:c1:0f:70:d5:6b:40:9c:c6:11:
         ba:61:9e:0a:eb:38:94:0e:3c:e0:bc:a6:97:bf:b5:0b:69:36:
         ea:1c:2e:3f:29:2a:b3:77:7f:29:be:33:73:18:92:90:95:5a:
         a4:16:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:03 2024 by rpki-client on console-ams.rpki-client.org