Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ff6117c-612d-3aa7-be51-97d44f0b4aa4.roa
File:                     4ff6117c-612d-3aa7-be51-97d44f0b4aa4.roa (raw, json)
Hash identifier:          NGw28U/Kd1FNUOTbqr0+lW3kvzwUNhOZe8b+n3G8pUk=
Subject key identifier:   F6:92:FA:2E:2D:50:C2:43:B5:D9:E8:89:A8:C0:3C:0A:E0:E4:D7:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9FAD906E52F8C40682440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ff6117c-612d-3aa7-be51-97d44f0b4aa4.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396576
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:fa:d9:06:e5:2f:8c:40:68:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=645d8d83-15db-49a0-b2b0-fd687ad3ad10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fc:2c:40:de:f2:17:b8:a8:fb:0b:9f:d1:7e:
                    3c:11:cf:1b:27:91:93:61:75:9f:87:85:fe:52:78:
                    c1:bc:bf:3d:c5:a4:19:45:5a:e0:7c:d6:3a:4e:b9:
                    b0:43:b5:62:67:19:fa:c6:a5:61:cb:01:bd:25:f2:
                    69:98:30:16:da:57:7e:4b:7a:a3:af:d9:5d:e1:16:
                    f8:33:7d:cd:fd:f0:12:d2:ef:26:97:fa:d6:0a:1c:
                    d1:a4:f7:8e:ef:7d:ec:fe:5f:88:c4:97:b0:df:89:
                    07:27:15:4a:88:74:ab:54:04:2f:6a:ed:ab:f5:ef:
                    c6:68:8e:39:65:03:03:d5:fe:a2:7e:1a:e0:93:19:
                    ad:2a:7e:00:48:b2:69:c4:8d:cb:0f:ed:0d:6f:9c:
                    bf:3f:07:67:d5:f6:ce:4c:37:46:0e:13:5a:26:3c:
                    22:59:44:8d:3d:d8:2d:e9:74:db:21:05:1f:c8:99:
                    56:fd:e0:bc:77:46:8d:fb:56:b2:dd:90:24:34:2f:
                    ad:8c:fd:12:43:69:bd:0b:b4:3f:01:7c:e2:09:d5:
                    6a:3b:df:54:7b:b3:25:d9:79:96:d3:b8:84:13:16:
                    bb:49:77:f3:54:31:f4:a7:cc:42:72:d2:6d:96:80:
                    e6:22:f5:7a:b9:58:af:70:0b:ef:9d:e2:c3:94:08:
                    b0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:92:FA:2E:2D:50:C2:43:B5:D9:E8:89:A8:C0:3C:0A:E0:E4:D7:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ff6117c-612d-3aa7-be51-97d44f0b4aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:31:f5:6b:89:ef:51:94:b6:ae:e2:79:96:18:1b:18:36:5b:
         df:36:0b:fc:e7:ac:78:ea:d4:f6:79:d9:98:30:35:38:e2:bf:
         1e:05:2a:31:8a:2d:57:10:6a:16:b5:cf:cd:01:14:b4:06:68:
         fe:8b:26:4f:b3:5f:f2:24:4b:95:1c:b5:de:78:a0:94:f7:c3:
         a4:83:1e:db:88:d8:71:a0:62:ce:6f:a1:91:77:fa:97:22:56:
         f7:a9:db:3d:82:fe:2c:da:7a:c6:bd:2a:f7:e8:ca:f0:e9:f1:
         d7:b0:aa:92:26:8c:1b:95:2c:76:87:6d:0b:d4:8b:ad:85:c6:
         80:a2:5b:ca:f2:06:2c:7b:31:52:c8:55:2d:3e:75:5a:ef:a0:
         28:40:dc:37:01:ef:b0:a6:e9:27:75:11:d5:dc:de:7f:bd:bd:
         78:cd:3f:c7:1c:f9:bc:6a:ad:8d:e6:ea:d3:68:a3:68:4b:1c:
         a5:58:03:b7:66:b1:68:db:46:3b:08:0b:91:9f:82:80:b3:1b:
         d1:b5:ed:89:e0:f4:79:94:20:54:07:66:2e:dd:ff:60:cd:cd:
         4d:6f:8c:e2:f2:1f:c5:40:2e:53:9e:10:d8:98:fc:ec:35:36:
         b2:b7:fd:ad:a2:dd:79:93:45:18:ea:49:8f:b9:ed:42:02:dc:
         73:40:e0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:03 2024 by rpki-client on console-ams.rpki-client.org