Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cc22c29-b6b1-32cd-9e8e-2e7d7b3115bf.roa
File:                     8cc22c29-b6b1-32cd-9e8e-2e7d7b3115bf.roa (raw, json)
Hash identifier:          y0PFSr7FIEcv+T+hldu0ldPmNC9gGEKfeLzkTCXYnY8=
Subject key identifier:   C1:19:C3:A1:C6:21:F4:27:3D:E2:67:17:57:48:57:92:01:9C:92:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9FBC9C097591A4B014B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cc22c29-b6b1-32cd-9e8e-2e7d7b3115bf.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396541
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:fb:c9:c0:97:59:1a:4b:01:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=4782a64f-e050-4ab8-8e2e-0b0d4ad795eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:6e:ba:e6:6f:d3:2d:eb:00:cb:98:a4:10:
                    19:c7:68:e7:53:4d:80:a7:09:67:ab:5b:d6:5f:c9:
                    aa:40:55:6d:b5:da:25:d0:5a:c5:52:25:41:8b:3d:
                    5a:4b:58:12:52:78:2c:24:88:15:e0:4c:2f:54:c3:
                    94:13:a4:e0:b2:e7:8f:1f:f7:4d:9f:cb:36:59:c8:
                    a5:95:12:8b:fa:24:ce:cd:57:62:06:e2:44:eb:3b:
                    2a:43:c3:bf:32:f4:dc:7d:b8:ee:16:66:67:57:9a:
                    22:c9:8b:8c:6d:42:80:5e:d6:b4:83:11:65:8b:a9:
                    11:e2:0e:62:ed:af:b2:c1:a7:26:d0:66:4b:36:78:
                    f5:02:39:c8:6b:f3:6c:f0:45:53:9e:d8:7e:95:63:
                    cb:1f:f9:67:5f:76:54:4b:03:fa:43:49:d8:c3:78:
                    74:60:d0:d5:d0:08:71:3f:7b:3b:3f:6a:46:c2:3b:
                    bf:a2:81:15:1e:0b:88:53:06:b0:18:03:13:a9:55:
                    e1:76:28:aa:c1:77:b4:0c:6c:0f:20:d4:80:b2:a9:
                    8b:e3:5e:c4:ea:52:65:25:16:0b:c2:1a:38:5e:c0:
                    2c:1f:15:e9:64:cf:98:c2:c6:54:65:b4:60:9e:ae:
                    8e:9c:60:d5:c8:c3:37:f8:93:d5:63:6f:81:e7:ef:
                    9b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:19:C3:A1:C6:21:F4:27:3D:E2:67:17:57:48:57:92:01:9C:92:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cc22c29-b6b1-32cd-9e8e-2e7d7b3115bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:9b:ff:a5:a3:df:e0:10:ff:68:f8:4e:d1:62:7e:66:b8:c0:
         7c:71:f9:9d:4b:b4:99:59:93:b5:2c:7b:55:c3:fe:54:11:a5:
         40:5c:73:fc:60:19:de:bc:72:57:35:9d:01:89:59:a7:21:e3:
         f8:7f:ea:0b:75:50:fb:64:0d:a7:a6:8f:10:9c:70:e2:b1:e1:
         49:cb:a6:83:29:1f:12:06:2d:a4:62:84:fa:fa:4b:70:d5:09:
         1b:0d:73:c7:73:95:e0:69:87:1f:7e:85:61:27:c0:b2:4e:37:
         3f:75:fa:97:f8:92:b3:39:d0:02:e0:a7:39:6d:c6:9c:6e:fa:
         00:ae:52:b8:8e:76:2d:ce:ec:86:36:ed:58:8f:ce:15:9d:c2:
         58:77:e2:f7:e9:0c:a0:d1:bb:be:86:ac:ad:ca:d1:5a:48:5c:
         f7:ca:2d:21:63:71:66:e1:e4:9e:af:c2:13:61:cc:88:57:9a:
         8e:15:34:63:63:d5:83:53:49:b1:6c:bc:79:34:de:fe:0a:a6:
         7c:d1:be:e9:bb:2a:be:2a:53:61:ea:23:d5:85:35:c9:64:34:
         17:40:fb:14:20:92:85:ea:9e:16:60:6f:b8:e6:41:a3:f7:73:
         2a:6d:f0:f5:01:82:58:8f:b2:68:9f:bf:59:d6:29:34:03:24:
         d0:82:89:fc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfI2fvJwJdZGksBSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk
NDc4MmE2NGYtZTA1MC00YWI4LThlMmUtMGIwZDRhZDc5NWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU5uuuZv0y3rAMuYpBAZx2jnU02Apwlnq1vW
X8mqQFVttdol0FrFUiVBiz1aS1gSUngsJIgV4EwvVMOUE6TgsuePH/dNn8s2Wcil
lRKL+iTOzVdiBuJE6zsqQ8O/MvTcfbjuFmZnV5oiyYuMbUKAXta0gxFli6kR4g5i
7a+ywacm0GZLNnj1AjnIa/Ns8EVTnth+lWPLH/lnX3ZUSwP6Q0nYw3h0YNDV0Ahx
P3s7P2pGwju/ooEVHguIUwawGAMTqVXhdiiqwXe0DGwPINSAsqmL417E6lJlJRYL
who4XsAsHxXpZM+YwsZUZbRgnq6OnGDVyMM3+JPVY2+B5++bUQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMEZw6HGIfQnPeJnF1dIV5IBnJJdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGNjMjJjMjktYjZiMS0z
MmNkLTllOGUtMmU3ZDdiMzExNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAXm/+lo9/gEP9o+E7RYn5muMB8cfmdS7SZWZO1LHtVw/5UEaVAXHP8
YBnevHJXNZ0BiVmnIeP4f+oLdVD7ZA2npo8QnHDiseFJy6aDKR8SBi2kYoT6+ktw
1QkbDXPHc5XgaYcffoVhJ8CyTjc/dfqX+JKzOdAC4Kc5bcacbvoArlK4jnYtzuyG
Nu1Yj84VncJYd+L36Qyg0bu+hqytytFaSFz3yi0hY3Fm4eSer8ITYcyIV5qOFTRj
Y9WDU0mxbLx5NN7+CqZ80b7puyq+KlNh6iPVhTXJZDQXQPsUIJKF6p4WYG+45kGj
93MqbfD1AYJYj7Jon79Z1ik0AyTQgon8
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:08 2024 by rpki-client on console-ams.rpki-client.org