Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/734dc754-5c0a-3db9-b394-16061a58a528.roa
File:                     734dc754-5c0a-3db9-b394-16061a58a528.roa (raw, json)
Hash identifier:          C2TavdCJgL+N9cPM94XIw1Ovs0eCFrryEFjO/wptjp0=
Subject key identifier:   45:D8:21:31:56:10:D0:E9:62:14:87:D8:FF:CC:7D:09:13:AD:66:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F91119E6AA14B598286A
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/734dc754-5c0a-3db9-b394-16061a58a528.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396573
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f9:11:19:e6:aa:14:b5:98:28:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=9a5f9dba-2c61-4b53-9c31-33f3513527c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a1:4e:99:0d:6e:bc:4b:0b:84:eb:bd:24:da:
                    77:64:22:cd:ae:61:a3:e7:bf:cc:ad:ac:75:c7:84:
                    e6:62:2a:28:8a:52:35:d5:6a:55:dd:c9:df:26:fb:
                    62:02:6e:23:43:e4:cc:d8:c8:d2:99:ba:e3:13:06:
                    d3:b7:30:20:e6:38:b0:f6:0b:de:6c:a4:a6:4b:05:
                    ae:09:33:61:de:71:cd:54:b9:9e:18:c9:45:74:b0:
                    b2:fd:76:19:33:33:e3:71:a6:37:09:24:28:77:3e:
                    7b:9c:a2:e0:ea:04:c2:16:fe:ca:2f:41:6e:b9:1f:
                    9a:38:a5:01:9d:59:45:3a:68:b8:13:19:55:16:fc:
                    44:34:fa:22:a9:89:82:d4:c6:42:bd:08:fc:57:58:
                    9a:a2:7e:6b:4e:10:1e:5b:62:28:8b:3a:45:32:91:
                    55:fe:17:6a:bf:63:f9:9e:80:91:cb:b6:c8:b7:c8:
                    08:56:97:da:b5:1a:92:96:70:28:54:51:ed:0d:2c:
                    7e:ea:2c:dd:8e:ae:97:09:67:b0:a3:2e:5b:5e:f0:
                    1d:15:45:c3:41:64:58:41:82:16:c4:3b:ec:0f:b1:
                    f3:08:61:0d:6a:91:a3:d7:22:82:4f:c9:cd:2d:bc:
                    ea:f8:53:b9:55:a1:ac:f5:38:ff:75:e8:d0:fd:a5:
                    0b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D8:21:31:56:10:D0:E9:62:14:87:D8:FF:CC:7D:09:13:AD:66:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/734dc754-5c0a-3db9-b394-16061a58a528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:22:ff:24:a3:03:ff:fe:66:37:6f:d5:25:47:06:80:df:cb:
         45:91:8d:ac:3e:e2:04:eb:c5:8f:31:fa:02:54:56:46:5d:0f:
         9c:4e:ec:b1:5f:66:11:4b:3a:5c:86:1c:a3:9e:2f:1f:83:ad:
         86:77:54:99:09:ad:7d:36:7a:54:ce:48:0f:28:98:34:e1:75:
         e6:62:eb:c6:0b:4d:19:f1:dc:78:12:31:93:af:1d:f2:32:7a:
         ce:31:76:9c:90:05:ff:c7:61:ca:0b:77:40:c5:fd:b5:30:cf:
         58:d5:5a:67:42:35:f8:1d:7c:17:6d:49:bb:a7:d6:9e:29:26:
         58:4c:98:af:3c:4e:6b:38:4f:51:7f:36:66:43:f4:65:48:e1:
         bc:a0:65:b7:67:c3:48:fd:a8:7a:05:b2:ac:ad:f5:93:b6:b3:
         07:29:c6:cf:04:5e:57:21:4b:93:48:da:9d:42:52:4f:b5:32:
         6f:57:77:9e:75:2a:57:ae:b8:ff:26:98:32:6c:49:bc:26:b5:
         0f:1d:25:50:e4:77:9a:f0:f9:89:18:c3:32:6f:82:82:86:40:
         09:2e:35:8f:b1:27:b3:74:3d:ed:a9:5d:7f:7f:91:06:e0:d8:
         dd:13:8f:0e:3e:eb:62:18:6c:3a:af:42:2e:3c:a8:32:15:57:
         8f:7e:2c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:33 2024 by rpki-client on console-fra.rpki-client.org