Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ae523e-413d-3de1-b8a2-602af3acc080.roa
File:                     86ae523e-413d-3de1-b8a2-602af3acc080.roa (raw, json)
Hash identifier:          ybU22KsdO/SY9WHm++1lUg/TdqlH/ph8dCEpSmw6Tvg=
Subject key identifier:   7E:57:3F:96:95:1F:8E:78:76:3D:17:27:50:82:16:E1:D0:02:E7:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F03729F8CEF376A7B000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ae523e-413d-3de1-b8a2-602af3acc080.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396558
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f0:37:29:f8:ce:f3:76:a7:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=cfd6e684-d1ec-4217-9b71-0ec26b9750d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:16:e1:1a:c7:02:c5:22:dc:1e:0c:00:61:2f:
                    7a:41:36:76:f9:71:fa:05:16:e3:44:9f:7b:32:51:
                    76:c3:fc:b0:9b:cd:53:50:15:6a:74:ef:8b:78:56:
                    32:8a:64:32:72:cf:91:b6:3d:fb:2e:5c:88:5f:80:
                    81:28:f5:59:9a:0b:13:14:6f:18:fe:42:f0:22:e1:
                    88:13:4c:c1:ae:22:ff:a2:7e:53:d0:61:2b:1c:e3:
                    d4:ba:fc:51:2d:09:95:67:d4:e3:8e:57:6d:6c:b3:
                    b8:71:a6:ac:a9:d0:7b:bc:8f:1e:4d:1b:e4:c1:04:
                    2b:dc:f3:86:5f:14:e6:5b:e1:43:7e:15:c6:ed:fe:
                    78:f7:38:f9:98:82:14:6a:02:55:5e:bf:58:8d:36:
                    2a:1b:bc:bf:9f:87:b9:25:d8:4e:5b:35:5c:c5:1d:
                    b5:41:9f:9d:8c:ab:70:6d:ce:09:60:9f:c8:49:c1:
                    ed:f1:be:7f:a6:25:cf:86:dc:20:d4:73:38:31:50:
                    2e:44:5e:0c:fb:af:49:b0:07:d3:2e:8f:13:91:c1:
                    6a:70:12:7a:11:24:c0:7f:7d:82:78:9a:f7:40:42:
                    61:93:57:7b:10:34:1f:15:35:af:d8:5d:7e:8c:07:
                    28:3c:43:df:34:74:07:49:16:3c:01:74:5f:03:1c:
                    3b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:57:3F:96:95:1F:8E:78:76:3D:17:27:50:82:16:E1:D0:02:E7:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ae523e-413d-3de1-b8a2-602af3acc080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a4:ab:e9:32:95:1c:02:fd:d9:80:cb:6a:52:35:75:e5:dc:
         4d:f3:36:34:25:4f:8f:40:5a:87:bb:96:d7:48:ca:2a:2d:be:
         ec:df:0f:60:2f:cb:4b:99:9e:d1:ed:ad:02:25:f6:79:75:1a:
         42:fe:20:50:55:40:94:75:d4:34:ce:7a:6b:80:2c:c2:31:e5:
         ee:74:ae:52:ec:a0:6a:6a:e0:e9:91:1c:51:4b:7d:e4:18:a8:
         75:ce:53:7b:dc:90:12:b8:ea:76:2f:6e:33:ea:1a:92:83:0e:
         61:59:75:e0:a9:7e:a4:1a:0a:3b:8c:98:e5:a0:8b:64:61:53:
         d8:89:b0:c6:c8:59:93:df:fa:f5:6d:12:53:15:c5:3f:d0:71:
         a8:68:01:11:62:3a:bc:84:0a:a7:b0:85:45:dd:e3:60:66:83:
         1a:87:f6:eb:e4:e2:88:19:11:be:16:ff:53:58:ff:31:ae:5c:
         f1:bf:cb:a2:df:70:de:6c:0e:0e:a5:9e:98:9d:37:f6:a5:1f:
         99:17:83:82:4e:eb:ae:90:ae:8f:a1:cc:28:99:fe:48:56:5d:
         a3:2e:6c:2a:b8:90:f4:4c:5b:c5:a5:f8:59:85:9c:fa:d8:e2:
         a2:dc:3b:d9:d3:ec:2b:bb:d3:1c:89:01:cf:70:98:20:c1:84:
         48:28:cb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:35 2024 by rpki-client on console-fra.rpki-client.org