Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81f6da8f-ada7-36d5-b37a-5e142e9866c6.roa
File:                     81f6da8f-ada7-36d5-b37a-5e142e9866c6.roa (raw, json)
Hash identifier:          VcVYZhhLTfr2A9+5i5BYgrlP65ZOuy8z4rfNFZcnqpc=
Subject key identifier:   D7:1A:C2:D9:91:94:0E:99:C8:FB:3A:13:B5:3D:AF:C1:75:67:5B:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F9C03C4F0102543A4380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81f6da8f-ada7-36d5-b37a-5e142e9866c6.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396560
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f9:c0:3c:4f:01:02:54:3a:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=b9cc8f43-f32b-4e71-a4df-bf73306ee50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a6:63:a7:05:f2:b5:ef:13:ea:4c:5a:ea:34:
                    b2:f3:44:3b:a2:57:6b:a7:bc:60:fb:97:88:8f:53:
                    9a:c1:4c:27:c5:74:20:2d:2a:9b:69:da:f3:6d:ec:
                    fb:32:86:bf:61:ef:b2:99:f9:b2:e1:12:fc:a8:85:
                    89:48:6d:ef:5c:d7:87:43:71:ab:41:74:99:50:da:
                    c4:92:1d:75:09:14:c2:af:4b:1a:48:69:93:58:13:
                    18:1c:9f:d6:29:43:be:6b:a9:dd:61:eb:6b:61:0a:
                    0d:f9:58:c1:0d:d3:6a:56:7e:15:4f:ac:86:4e:54:
                    16:4e:f4:02:2e:e3:39:15:bb:fd:fd:8e:ec:1e:93:
                    f5:e4:fc:6d:86:e5:e4:70:bc:b7:a7:09:5f:b4:c0:
                    36:55:53:f5:e6:b2:99:b4:0c:f0:ce:eb:53:27:0f:
                    66:6a:89:af:78:86:fe:a9:b0:10:e8:aa:05:c9:2c:
                    ee:95:4f:54:e2:42:35:d3:b1:78:f2:17:68:8a:9a:
                    48:bd:ad:2c:53:cf:35:5a:bb:16:b4:a8:f4:00:7e:
                    e1:4d:7d:79:a3:2a:4f:e9:ac:2c:a5:90:0e:7d:9a:
                    cd:0f:56:15:ca:29:4b:c9:1d:16:f6:0f:e4:88:a0:
                    e8:21:dc:0b:6a:7b:6a:fd:47:d6:0a:2a:21:9d:a9:
                    c2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1A:C2:D9:91:94:0E:99:C8:FB:3A:13:B5:3D:AF:C1:75:67:5B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81f6da8f-ada7-36d5-b37a-5e142e9866c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:33:b0:fc:92:13:1d:91:32:36:3e:cc:55:9d:d1:45:aa:29:
         57:37:e0:f7:6d:33:e5:49:f8:96:e4:4c:f8:a4:c1:86:12:7f:
         12:2b:f0:76:05:9a:cc:8e:71:f4:ff:7f:f4:a5:fd:f9:05:00:
         df:3d:2e:5e:2e:7e:92:cc:5e:37:8f:2c:35:f3:35:2b:82:e0:
         a1:52:73:92:12:e3:36:a8:04:77:6f:b0:be:33:94:a2:a4:f7:
         8b:39:4b:ba:23:af:15:a4:40:66:a6:8e:03:f3:7b:6b:e5:7c:
         a8:71:46:4c:bd:a7:e5:93:c6:3c:f5:d8:69:02:11:e2:c2:9b:
         ba:10:1a:de:25:cf:88:db:d9:c6:19:bb:0d:8b:0e:77:0d:b1:
         29:b0:cc:74:77:71:11:2a:34:23:13:a9:6f:bf:da:8d:53:ac:
         ac:a9:dc:f2:af:12:9c:e4:ee:42:1c:3c:9e:5c:de:41:9a:f3:
         ed:8c:38:e5:7c:7b:33:c4:f5:55:f2:06:1f:57:15:b3:88:5e:
         90:ff:7e:88:e7:f6:64:b2:ad:8d:85:75:7f:71:27:80:68:ba:
         ce:d4:41:13:cc:e9:6c:84:f1:83:b4:be:43:14:8b:53:9b:12:
         f8:63:10:53:8c:db:bd:1c:44:33:41:65:23:dc:d3:f6:38:31:
         33:9b:be:d6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfI2fnAPE8BAlQ6Q4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk
YjljYzhmNDMtZjMyYi00ZTcxLWE0ZGYtYmY3MzMwNmVlNTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaZjpwXyte8T6kxa6jSy80Q7oldrp7xg+5eI
j1OawUwnxXQgLSqbadrzbez7Moa/Ye+ymfmy4RL8qIWJSG3vXNeHQ3GrQXSZUNrE
kh11CRTCr0saSGmTWBMYHJ/WKUO+a6ndYetrYQoN+VjBDdNqVn4VT6yGTlQWTvQC
LuM5Fbv9/Y7sHpP15PxthuXkcLy3pwlftMA2VVP15rKZtAzwzutTJw9maomveIb+
qbAQ6KoFySzulU9U4kI107F48hdoippIva0sU881WrsWtKj0AH7hTX15oypP6aws
pZAOfZrND1YVyilLyR0W9g/kiKDoIdwLantq/UfWCiohnanClwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNcawtmRlA6ZyPs6E7U9r8F1Z1t9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODFmNmRhOGYtYWRhNy0z
NmQ1LWIzN2EtNWUxNDJlOTg2NmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBPM7D8khMdkTI2PsxVndFFqilXN+D3bTPlSfiW5Ez4pMGGEn8SK/B2
BZrMjnH0/3/0pf35BQDfPS5eLn6SzF43jyw18zUrguChUnOSEuM2qAR3b7C+M5Si
pPeLOUu6I68VpEBmpo4D83tr5XyocUZMvaflk8Y89dhpAhHiwpu6EBreJc+I29nG
GbsNiw53DbEpsMx0d3ERKjQjE6lvv9qNU6ysqdzyrxKc5O5CHDyeXN5BmvPtjDjl
fHszxPVV8gYfVxWziF6Q/36I5/Zksq2NhXV/cSeAaLrO1EETzOlshPGDtL5DFItT
mxL4YxBTjNu9HEQzQWUj3NP2ODEzm77W
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:34 2024 by rpki-client on console-fra.rpki-client.org