Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cc3758-1111-31a1-b00c-39cfc72c1b3b.roa
File:                     59cc3758-1111-31a1-b00c-39cfc72c1b3b.roa (raw, json)
Hash identifier:          qWpa9jqwqVonoIit9OYTW+ixFocMq2Xyphtr2UmkF/Q=
Subject key identifier:   FF:8B:B9:42:6B:F5:1E:DC:80:A4:CF:57:5F:34:F8:2A:E4:4C:E6:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F029119BED3DF3584B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cc3758-1111-31a1-b00c-39cfc72c1b3b.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396596
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f0:29:11:9b:ed:3d:f3:58:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=8622c825-730f-4323-a6f3-3eaeea87e10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:52:44:31:45:f6:11:f4:8a:c6:0e:ab:2f:
                    88:20:e6:20:ac:8c:d5:25:c1:69:89:b0:0d:ed:81:
                    fe:f2:80:65:e5:bf:b6:c4:35:35:5f:9d:57:e2:4a:
                    e6:8b:6b:f5:24:92:f6:89:34:25:f6:8f:79:28:27:
                    30:85:0b:e4:a6:67:6f:34:8e:4a:fc:d3:48:ba:c1:
                    48:48:20:f0:d1:59:1d:92:93:30:58:41:d5:c3:8c:
                    cd:cb:73:8b:c5:a1:49:07:c2:65:53:7f:44:b8:16:
                    12:e3:dd:f7:e2:2d:48:24:f5:8b:14:4d:4a:fd:d6:
                    7c:c1:7e:cd:17:79:50:b2:a8:a1:20:00:44:62:13:
                    bf:6f:12:59:4a:06:2c:46:d4:77:9f:65:ce:2b:6d:
                    7e:dd:ec:89:2e:f4:97:f4:a3:b7:82:53:da:8c:13:
                    09:74:7e:e3:df:1b:60:bc:9b:a4:05:c7:6b:b9:b6:
                    06:85:c2:56:9c:52:b0:fc:71:16:e3:2b:6d:61:40:
                    6f:3f:00:69:2a:36:49:fa:65:91:40:94:e1:4e:08:
                    a4:7d:9e:85:01:7c:44:80:1d:60:49:b3:da:0d:2c:
                    84:2b:cd:79:71:f0:d0:ff:2d:1e:6b:20:7d:0c:9e:
                    81:c2:f3:5c:f6:ca:38:df:4c:61:ac:b8:ef:2b:b9:
                    00:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8B:B9:42:6B:F5:1E:DC:80:A4:CF:57:5F:34:F8:2A:E4:4C:E6:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cc3758-1111-31a1-b00c-39cfc72c1b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:22:45:f2:62:a4:16:6c:eb:dc:9c:dc:7d:e5:08:de:af:2c:
         86:84:14:3a:e0:6a:4a:48:c3:1d:fd:a5:47:88:66:98:5f:79:
         b3:21:54:ac:aa:da:87:6a:ba:15:49:fa:35:b8:90:f4:3c:1b:
         60:68:19:ad:4f:8d:e9:9c:ff:23:bf:ac:74:cf:51:07:58:ca:
         66:82:04:46:5f:32:d0:2e:45:51:fe:c0:82:46:5c:3b:92:d3:
         3e:27:52:d4:7e:e1:5b:a5:e5:39:59:82:6e:75:57:38:96:ba:
         d3:b4:9c:33:62:30:ee:0f:67:62:54:4d:e9:09:0f:15:ff:53:
         e4:a9:00:86:52:81:a2:f1:5c:e1:d5:f0:34:03:99:56:86:57:
         41:7d:97:77:7c:a0:8c:6b:c1:bc:40:48:a5:a5:de:ff:c6:a5:
         ff:85:65:ab:62:ed:50:d3:6c:06:d7:4b:a4:d9:14:73:32:54:
         20:12:eb:d1:7a:ef:13:ac:de:61:fe:73:43:8e:98:d4:e8:e5:
         03:77:1d:40:a7:30:8d:9b:31:e4:48:48:69:2e:19:c4:60:ab:
         2c:27:e7:14:07:87:82:f6:cd:3b:bc:9e:39:03:ec:81:56:af:
         1a:b2:8f:a7:8d:74:a9:89:3f:7b:85:11:24:c4:e1:86:09:04:
         26:e2:64:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:04 2024 by rpki-client on console-ams.rpki-client.org