Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/675eea21-b05a-3e9c-a904-7e9552fe8ed0.roa
File:                     675eea21-b05a-3e9c-a904-7e9552fe8ed0.roa (raw, json)
Hash identifier:          73UTHrTFsnSn42aKRiQ0V6ww4FSlQwAfabd30Iglnuo=
Subject key identifier:   1A:E7:65:2D:85:61:05:15:D1:1F:9B:89:B0:01:4B:FE:3A:40:5F:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9FB82B4EE2775D6112F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/675eea21-b05a-3e9c-a904-7e9552fe8ed0.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     36617
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:fb:82:b4:ee:27:75:d6:11:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=91fae56c-43c2-4563-9c83-53f25c0f57a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fd:ac:07:a6:d6:09:4d:44:90:16:4e:f0:a0:
                    f6:de:07:ce:91:06:07:98:35:0b:71:ff:54:91:81:
                    6b:b2:fa:96:b5:30:51:de:22:8a:73:94:d6:ca:63:
                    94:6e:93:db:97:08:2f:5d:3d:a9:8d:b1:53:fe:cb:
                    03:c5:48:c3:02:07:e0:e6:1f:c1:96:d3:78:8f:9d:
                    51:ea:a5:79:e5:08:8a:53:e6:1b:5e:51:3d:b6:96:
                    24:9b:c8:5f:f7:34:76:6b:eb:27:fe:c0:bd:e4:af:
                    ec:96:c0:4e:5c:c1:b1:d0:53:9f:f5:77:57:1b:12:
                    4d:c6:6f:54:30:e4:d7:ee:ef:e0:33:37:9a:e4:39:
                    5f:73:e1:76:16:ac:64:4d:d6:3c:b1:62:0c:63:0f:
                    ff:b5:27:1f:aa:3f:e6:b3:2c:2a:6d:34:e2:61:b6:
                    5b:85:f3:a0:18:66:5e:39:a9:b8:1b:45:2e:99:fa:
                    79:d3:01:3e:66:9a:71:b2:a3:93:42:5f:5f:5a:04:
                    74:e1:92:25:cb:96:93:27:56:72:87:c3:d4:99:b8:
                    40:91:80:10:c0:2a:8b:9e:1b:f6:50:76:d0:3f:ec:
                    e7:c1:7c:fc:bc:00:d6:95:f5:58:4b:d0:a6:42:ba:
                    60:06:54:a2:d9:70:c3:22:74:8d:72:29:cd:0a:0a:
                    b2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E7:65:2D:85:61:05:15:D1:1F:9B:89:B0:01:4B:FE:3A:40:5F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/675eea21-b05a-3e9c-a904-7e9552fe8ed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:70:dc:52:b1:80:44:1f:aa:cc:87:f9:15:ab:83:41:4f:df:
         04:64:a5:e4:eb:c0:78:54:29:be:9d:ed:04:ab:c7:f8:10:67:
         3b:2b:20:60:5b:45:ce:21:a0:57:0e:13:bb:dc:99:8b:89:39:
         89:91:9e:db:58:24:fc:9f:c9:75:bb:21:03:f9:af:a3:83:cd:
         c5:ae:f8:8a:75:c8:7a:22:97:e6:26:59:bf:bf:e2:69:3f:9d:
         4a:7e:86:05:e1:c5:e0:ad:e5:12:ce:dc:54:dc:e1:dc:ba:74:
         c6:db:7f:49:b4:3e:4d:3a:b2:ac:71:c4:d5:3c:1b:bb:37:69:
         80:12:28:f5:22:0f:19:21:62:9c:4f:dd:9b:07:ae:a8:32:41:
         68:2d:e8:1c:2e:0e:ef:71:6d:5f:14:04:92:eb:e5:e9:3d:f6:
         79:63:5b:d9:db:01:70:eb:63:b0:7d:c1:24:70:14:c1:9e:6a:
         69:31:a9:6a:92:2e:32:e1:74:ff:3e:f5:14:ce:7b:cb:fb:91:
         ef:3b:d0:c2:fb:e2:ba:ec:d9:05:c8:a5:b5:24:fb:53:79:75:
         62:c4:d6:26:fb:6c:3b:41:28:df:77:be:d4:ce:78:e3:88:83:
         dc:42:25:42:17:e6:55:fc:32:24:40:c8:b3:18:0d:e5:84:d7:
         53:f8:df:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:05 2024 by rpki-client on console-ams.rpki-client.org