Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5947ae3d-0cb8-3631-a5d1-98d51e9f7ecc.roa
File:                     5947ae3d-0cb8-3631-a5d1-98d51e9f7ecc.roa (raw, json)
Hash identifier:          5URaKUbam0vfevLox+kleHZORKyorEYpnjvNpU11m1s=
Subject key identifier:   5E:70:B5:94:43:A3:AB:F3:43:76:2A:07:2D:A3:06:AD:D5:11:03:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F388135396B488C06700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5947ae3d-0cb8-3631-a5d1-98d51e9f7ecc.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     397211
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f3:88:13:53:96:b4:88:c0:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=442bb427-4b72-4cc7-88a1-b620cb6a6acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b7:96:95:66:82:41:0e:09:44:b0:34:d2:34:
                    61:43:e2:3b:95:a4:70:b7:10:fd:c4:65:2a:67:46:
                    f2:dc:c4:e5:d5:7c:27:73:40:5e:3e:69:82:13:9a:
                    52:74:91:67:41:27:9b:d8:d5:b1:ea:36:97:12:e2:
                    79:aa:ed:b9:dc:7c:ca:4a:4b:cd:5b:cf:64:d8:a0:
                    f3:df:64:fd:29:03:4b:d7:2a:fc:d5:e2:af:30:56:
                    78:b6:99:14:73:49:67:12:0e:70:80:46:98:24:07:
                    e6:fe:22:f4:84:2b:b1:0e:3c:58:51:ed:4c:05:1b:
                    d7:df:13:f9:f2:a9:4f:77:fd:23:65:26:d3:d9:c1:
                    32:fa:63:10:e2:53:74:7e:28:8a:dc:50:c4:6c:cc:
                    58:a4:47:45:52:ba:2d:a7:f7:4f:e2:da:58:2b:a0:
                    8b:66:9b:a9:41:9e:d9:a7:4d:a1:65:cc:92:e0:16:
                    5b:7a:75:34:3f:10:25:18:d7:f2:21:61:e2:1b:06:
                    45:95:f9:96:83:7f:b7:89:37:7e:ab:4f:47:8f:a6:
                    69:bb:c9:3e:7d:f9:f1:c3:2e:cc:8c:cf:35:c2:9f:
                    cc:a4:d1:c6:54:55:3a:85:7a:a7:6c:ec:fd:2f:17:
                    96:7c:d3:50:ba:e1:64:b2:0b:8f:59:f5:31:4c:5c:
                    47:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:70:B5:94:43:A3:AB:F3:43:76:2A:07:2D:A3:06:AD:D5:11:03:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5947ae3d-0cb8-3631-a5d1-98d51e9f7ecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:b4:23:cc:f3:12:f6:89:1e:e8:79:4b:4c:3e:ce:d2:63:6f:
         c4:e9:f2:3a:38:f0:14:90:4b:dd:b5:dc:28:55:e2:4b:89:10:
         a9:15:25:2e:45:0c:20:a3:3a:1e:ab:8e:50:36:6e:38:d7:77:
         c7:e8:d6:e2:4e:be:91:86:8a:84:7a:ab:19:62:4b:de:11:f0:
         2f:c2:93:1f:df:f6:57:15:ed:24:62:d9:c2:9e:5d:37:c9:de:
         a6:0c:e6:15:d7:60:a8:d9:41:b7:9b:6a:16:d7:4b:2e:94:4b:
         66:80:56:e2:18:4c:89:86:fd:cc:ec:5e:f3:7c:a1:72:bc:62:
         15:ef:c2:4b:ac:68:78:81:28:d5:e6:32:12:17:ee:b8:aa:c3:
         5f:ba:e2:aa:e1:e4:5a:f1:dd:33:e4:7d:da:a1:32:8f:31:27:
         e7:79:f8:1c:70:23:14:a7:24:24:fc:a4:30:81:82:2b:c3:7f:
         fe:57:d8:eb:ee:a0:03:cb:40:eb:40:fe:3d:a0:78:69:35:56:
         cf:2c:cc:03:99:f4:4d:24:3b:12:03:9d:98:5b:4e:dd:86:da:
         1c:44:61:2d:46:30:03:f2:d2:51:f6:a9:6b:12:23:c3:2a:a4:
         c3:9b:f6:16:7d:80:44:2e:81:56:3e:7a:b7:f4:1a:f8:dd:f8:
         05:d9:1e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:30 2024 by rpki-client on console-fra.rpki-client.org