Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63e5ea18-3e6d-38b5-85ad-d53892d54f73.roa
File:                     63e5ea18-3e6d-38b5-85ad-d53892d54f73.roa (raw, json)
Hash identifier:          SotbgO353OaOAnKXeC2GHec8P7cVSTYzhElgobRTPxY=
Subject key identifier:   22:4D:FE:9F:16:B5:AB:99:CE:53:34:28:32:DB:F7:D1:FF:18:06:97
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9FA3100F62A83CB0DE900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63e5ea18-3e6d-38b5-85ad-d53892d54f73.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     397203
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:fa:31:00:f6:2a:83:cb:0d:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=e18e6daf-7532-4196-a70f-2e1e26b286cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:d1:7c:ca:83:f2:c1:5a:76:04:9b:e9:c4:f1:
                    1c:76:ee:f4:cf:9c:c9:ae:37:7b:e9:20:e4:bf:10:
                    d8:2c:01:7c:51:dc:70:64:51:db:6e:0c:49:d5:33:
                    84:04:0f:f7:fd:6f:12:7c:85:2b:61:31:09:94:e3:
                    f5:31:0d:b2:8b:53:03:08:3f:06:e1:a9:14:40:8b:
                    40:d1:ac:87:b4:ad:a8:18:fc:df:83:38:b3:be:1e:
                    d7:21:df:47:d0:c5:be:f9:9e:c7:31:a8:a7:1b:0c:
                    b1:1c:e9:a2:98:59:99:af:f3:05:b9:d8:57:e1:2c:
                    cb:06:7a:9c:05:1b:77:6c:a4:58:ef:76:21:e4:be:
                    fe:03:b1:56:89:25:e2:32:41:93:fe:08:5f:bf:a1:
                    e4:41:b8:9b:71:c5:f7:21:32:be:24:3c:cf:ca:18:
                    0e:70:80:4f:dd:59:2a:2f:8a:0e:05:e4:a3:84:a7:
                    5d:4c:65:66:a6:86:d5:03:40:5a:a4:45:80:63:05:
                    cd:8b:f3:f1:78:8b:d8:1e:1a:29:21:37:43:b3:8a:
                    d1:58:cb:55:ee:06:2c:bc:a0:8b:b6:f5:01:89:5c:
                    aa:93:00:2d:0d:70:fb:62:d3:56:ab:76:45:96:cb:
                    ae:5f:7f:03:f7:4d:09:f6:df:e6:12:fb:f6:c7:51:
                    55:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4D:FE:9F:16:B5:AB:99:CE:53:34:28:32:DB:F7:D1:FF:18:06:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63e5ea18-3e6d-38b5-85ad-d53892d54f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7f:5d:d2:64:5f:d8:09:cd:05:ad:0c:b6:06:2b:f6:58:fa:
         2b:35:8d:a3:4a:63:07:10:17:dd:e1:18:5a:c2:48:af:a2:ec:
         71:d5:a9:60:b9:ea:0e:08:78:28:36:b6:40:39:59:ad:84:ec:
         5e:a8:aa:63:fd:28:fa:53:2a:2f:6a:ce:ef:1f:16:ba:8a:a7:
         f7:46:8a:e4:b9:8d:8c:03:28:8d:23:98:5f:f1:00:67:28:5f:
         2b:a1:a1:c8:9f:6a:cc:c8:e3:cf:82:19:f4:99:29:4a:60:25:
         b9:b0:74:50:64:48:d8:79:7f:92:42:7f:01:91:7f:3e:42:82:
         68:97:37:16:fe:64:89:b0:35:97:2f:ef:ad:51:78:e6:e2:f2:
         81:fc:b5:53:dd:d6:99:aa:1e:e6:89:38:02:31:d4:c7:d7:6d:
         48:f3:fb:1e:c4:01:50:29:f6:2d:75:15:cd:b1:61:b2:14:ad:
         00:f8:ae:0d:8c:c2:18:a7:a3:f0:4e:e8:d5:d6:5b:3f:53:0c:
         a6:46:84:f5:1e:d1:d4:2b:57:ec:93:71:63:ab:cc:f9:bb:a5:
         c8:dc:4c:e3:50:9d:f6:51:44:46:b1:45:5e:58:d7:eb:bb:bb:
         df:45:0d:d3:54:3a:06:e1:fa:a6:76:3e:d0:04:10:f0:e8:84:
         89:d7:67:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:31 2024 by rpki-client on console-fra.rpki-client.org