Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85293bf3-1d96-34ec-a779-731db37259ce.roa
File:                     85293bf3-1d96-34ec-a779-731db37259ce.roa (raw, json)
Hash identifier:          pZlCeU33NVhaH3wq8RguYOFo8AD5I0PgdhFrmRyLmBQ=
Subject key identifier:   A0:0D:9E:AC:5C:54:C5:A8:50:49:8E:F1:61:DF:E0:AC:D0:0E:63:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9FCE3A346B9E8526F6380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85293bf3-1d96-34ec-a779-731db37259ce.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396592
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:fc:e3:a3:46:b9:e8:52:6f:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=b855a17a-37be-46de-ada1-e866830eefb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:69:f1:3d:b1:11:64:d6:8d:b0:f4:91:cb:
                    55:cf:1f:2a:67:e1:7a:91:c3:b7:21:34:bd:53:b8:
                    d8:24:18:0a:87:b1:f4:8e:79:2e:14:c4:67:5f:25:
                    4d:d9:4e:0f:5c:9b:41:e9:ae:51:72:91:db:c2:53:
                    c1:9e:3e:b4:83:12:e6:04:20:78:4c:b7:e0:c0:b4:
                    a8:92:a7:8e:2e:95:8d:3c:64:58:ff:b2:d3:c2:bf:
                    e5:7d:38:91:36:8e:ce:71:87:4f:2a:91:31:ee:3f:
                    9a:99:1c:a7:0b:76:e1:cc:ad:f7:ec:d4:f7:55:e0:
                    19:4e:13:32:68:bd:ef:e8:74:5c:2f:5f:0c:b0:34:
                    69:87:fb:ce:0e:0c:10:6b:1b:34:15:0b:67:60:3c:
                    59:06:94:55:77:31:6a:40:cc:10:10:89:36:54:4b:
                    6b:6d:6e:cc:c6:dc:bd:61:05:ac:13:4b:48:05:8f:
                    5b:d4:7e:38:98:71:cd:d2:b9:61:41:50:a0:0e:14:
                    70:b8:7d:07:ea:8e:61:8b:e1:86:f2:9b:6b:59:05:
                    c8:6b:8e:39:72:6a:6b:88:7e:78:3e:f7:94:03:94:
                    ff:d0:ce:55:46:74:f4:99:a2:dc:da:23:83:a9:da:
                    b8:7e:af:d8:a0:54:bb:64:17:c8:dc:59:db:5c:53:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0D:9E:AC:5C:54:C5:A8:50:49:8E:F1:61:DF:E0:AC:D0:0E:63:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85293bf3-1d96-34ec-a779-731db37259ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:10:37:80:b2:63:26:15:e7:6f:1b:4f:d6:9f:9f:18:ed:4f:
         01:34:8e:22:1a:d0:35:a6:da:f9:b8:52:d5:bc:e1:83:b7:f3:
         62:e8:b0:6d:47:82:1b:27:e3:45:11:75:dd:68:53:d7:79:12:
         2e:0e:32:79:a1:e2:41:ed:ec:51:95:49:de:9c:98:30:0e:8b:
         c5:15:f4:c4:aa:0a:89:f9:d5:aa:65:a8:70:84:1c:91:ec:18:
         34:d0:08:8b:06:49:ac:9f:d1:3d:22:cc:6b:00:57:c5:d8:bf:
         b9:1b:06:fa:3c:db:11:92:e2:e7:17:53:a6:5a:c9:fa:28:59:
         49:0b:7c:cb:28:77:b8:6a:c0:00:18:a9:e4:25:d2:2d:ab:5b:
         43:db:9e:b1:b1:89:95:1a:02:2c:28:d3:2d:6a:65:41:1c:36:
         f7:36:95:6c:f1:23:bf:a6:4c:2c:e6:84:49:15:82:02:50:37:
         3f:84:46:52:b1:c8:f5:32:45:86:25:4b:b0:ce:c8:94:12:ef:
         c0:c6:fd:98:b8:c3:05:f1:3a:2c:c4:5e:bb:69:46:eb:68:9e:
         0e:69:3c:0d:5c:4c:5f:c7:fe:17:fd:e5:ce:ff:d4:f3:16:46:
         f0:03:06:90:bc:d6:01:8b:47:8c:80:80:8d:ee:ce:c1:95:7a:
         5b:51:e6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:35 2024 by rpki-client on console-fra.rpki-client.org