Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b03e940-c8f9-3a39-90c5-b6e2a6367e34.roa
File:                     6b03e940-c8f9-3a39-90c5-b6e2a6367e34.roa (raw, json)
Hash identifier:          g9AYUcJykc5CtBSqgfyuF9qUNk1AnsgGgoOlbWi51AA=
Subject key identifier:   64:CA:F7:C8:15:2D:6A:81:A2:8F:A8:1C:D1:65:49:E2:79:D0:88:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F1249711FBC8B2F60500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b03e940-c8f9-3a39-90c5-b6e2a6367e34.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396542
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f1:24:97:11:fb:c8:b2:f6:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=329456b2-071e-4a0c-b675-d99f0633b3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:96:7e:5b:91:59:2e:a1:82:38:99:94:00:df:
                    cc:c4:78:11:05:1a:99:b5:52:48:79:e4:8d:fb:42:
                    db:06:8a:c9:bf:09:65:0b:7d:10:29:07:59:aa:71:
                    a4:f2:e5:4c:99:8a:21:aa:b5:96:4b:ff:2b:b3:89:
                    44:9a:a5:83:55:78:3d:3d:8d:db:89:e6:7e:68:08:
                    db:2f:29:eb:28:c4:3e:05:7c:84:ab:9a:74:85:fa:
                    13:6e:e6:86:3e:2b:b4:24:fe:72:61:ad:03:ab:80:
                    dd:2e:8c:e0:9d:eb:1f:f5:57:c4:f5:25:09:e7:a1:
                    80:2b:74:82:9d:e6:4d:b6:52:61:b5:61:a9:69:27:
                    1a:c8:a5:92:3a:90:37:96:46:24:0b:d7:b3:61:93:
                    43:07:12:7d:2c:f1:1f:ae:af:50:0c:56:d0:45:f7:
                    64:d8:13:8e:ca:de:df:58:20:45:8f:78:51:57:51:
                    48:43:7c:5f:f0:00:1b:16:48:bc:01:8e:95:2a:82:
                    e0:30:3a:5e:49:a0:db:e0:7d:f0:1b:a4:5f:7b:4a:
                    5a:fe:4f:3c:bf:49:b9:3b:bc:3d:02:26:ad:27:2c:
                    6c:93:fb:14:24:5c:df:cf:7e:8f:49:bc:04:77:c5:
                    0e:46:c0:2d:9b:be:5d:01:5b:2b:a1:9e:29:17:d7:
                    df:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CA:F7:C8:15:2D:6A:81:A2:8F:A8:1C:D1:65:49:E2:79:D0:88:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b03e940-c8f9-3a39-90c5-b6e2a6367e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:a7:36:6b:bd:59:17:4e:33:22:09:d8:33:90:a5:89:3a:91:
         1d:e6:9e:d5:ec:d7:19:07:95:26:63:50:4f:dd:72:ae:cf:15:
         5b:8c:6a:37:6c:46:d3:18:4c:c4:b4:1d:6d:9b:c6:4b:97:4b:
         54:94:72:22:e3:51:90:a2:86:a4:34:2b:7a:7e:2b:99:87:0e:
         00:ee:8f:0a:0c:59:24:89:52:55:f3:ca:07:81:9e:e6:4d:a6:
         99:ec:0d:7b:06:39:b6:a5:fb:87:cf:59:f4:69:c8:47:71:70:
         5d:b3:82:64:12:00:7c:a4:f5:9e:70:a8:1c:b8:b5:f2:b7:02:
         72:54:1e:84:1a:58:ca:86:ce:85:c5:29:b7:43:03:66:69:c1:
         67:56:5a:93:24:43:ce:97:9e:8c:15:f1:2e:be:4e:e0:fb:4f:
         a6:78:f6:bc:66:ea:86:f5:23:4a:11:4e:f6:e0:4b:bc:09:79:
         af:ba:84:f1:66:fa:d2:14:6d:65:40:51:79:e5:61:69:29:06:
         ad:46:2c:90:ce:04:fa:e7:0c:b1:d7:ec:5a:ca:81:ae:13:f0:
         2a:96:f1:e9:ff:85:7d:32:bc:e8:25:80:9e:f1:a6:4e:5e:9e:
         e7:99:90:4b:77:8f:e1:23:b2:2a:7d:18:4a:f7:44:cd:de:2c:
         08:12:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:05 2024 by rpki-client on console-ams.rpki-client.org