Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9156a6f4-91bc-3a10-8346-02b18f956ccf.roa
File:                     9156a6f4-91bc-3a10-8346-02b18f956ccf.roa (raw, json)
Hash identifier:          FJmWOrz9BO/knjNZGMw5nEX2ReKR1f2HILTaz/zCT+s=
Subject key identifier:   56:44:FE:53:AD:31:38:2B:1E:31:77:B9:D6:38:07:F7:77:D6:3B:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F05720BB2EB37DEC46C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9156a6f4-91bc-3a10-8346-02b18f956ccf.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     20431
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f0:57:20:bb:2e:b3:7d:ec:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=a932dd8d-08d2-45c5-a3cb-34beb2a08dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:64:0b:10:23:81:16:f5:f2:e3:24:52:37:9e:
                    aa:0d:83:36:1d:6f:2c:08:7f:21:3f:73:8b:f8:8c:
                    f3:d1:21:9a:4e:0b:a4:c1:39:25:c1:c4:07:bc:3d:
                    1c:ed:1e:5a:c4:0e:19:e9:ff:41:a3:94:b5:bf:34:
                    99:7f:85:be:58:18:f8:bc:a2:2a:03:40:fc:e2:76:
                    72:5c:6e:04:34:b7:3d:38:89:93:56:53:8c:ac:ce:
                    a8:ac:9f:34:08:be:38:59:9c:e6:a1:d5:ef:63:a0:
                    52:7e:2d:74:b4:ac:d6:41:2d:84:8c:26:2a:82:c6:
                    09:cb:cf:d7:22:70:29:3f:4e:06:a2:09:70:95:dc:
                    29:17:a2:dd:d6:e1:67:46:49:25:a2:61:47:42:99:
                    a2:2b:8c:43:0b:4f:57:75:fa:86:31:2f:5e:79:e9:
                    b4:ac:42:9a:d6:ee:0e:5d:ee:75:5d:3f:bb:35:a6:
                    e2:02:83:42:77:c6:00:8e:91:92:e6:8c:54:53:ab:
                    ec:0e:ec:e9:60:96:e5:85:e0:8d:51:5f:e0:fa:6c:
                    8d:48:82:e2:16:ab:04:e5:f3:7c:77:bc:27:66:01:
                    62:dc:de:46:68:12:b1:cd:13:f1:fa:a3:94:8b:10:
                    49:23:c8:92:c2:85:f7:c4:04:66:78:aa:ba:dd:f2:
                    79:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:44:FE:53:AD:31:38:2B:1E:31:77:B9:D6:38:07:F7:77:D6:3B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9156a6f4-91bc-3a10-8346-02b18f956ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c9:c9:96:d7:ea:2a:70:92:03:96:fe:3e:d2:08:b2:06:c9:
         9e:f4:a9:e1:a9:b0:c1:9f:a3:11:dd:f8:7c:b0:e5:95:4c:d5:
         0e:08:72:b2:a2:38:c7:53:17:7c:f1:ce:8d:f5:48:14:81:38:
         20:89:2a:76:b1:f2:56:34:e4:f6:69:9c:b5:44:ac:09:56:47:
         12:cf:82:57:44:09:f6:4c:7c:f9:2b:57:ef:68:0b:ed:d0:8f:
         50:3e:26:70:24:8d:f7:f4:37:fb:98:c9:0e:6c:02:8d:bf:2d:
         37:42:23:4e:d3:55:2a:09:18:0e:4d:cc:83:9f:98:58:38:9e:
         2f:5e:00:bf:73:3a:eb:eb:27:b9:79:eb:f7:db:23:17:91:6b:
         93:32:34:de:5f:3a:57:50:96:68:d0:57:fc:8d:c9:e1:eb:dd:
         91:21:5e:23:c2:2d:91:f3:97:05:8d:0b:36:bc:4d:85:4b:0f:
         0b:64:c7:3c:fc:64:f8:50:9a:95:bc:85:34:2c:d4:b3:39:97:
         18:63:4f:4e:b7:d9:85:3b:cd:34:6f:e2:ca:dd:2b:ce:59:98:
         ee:5c:97:92:36:71:6b:c8:01:15:db:41:e8:32:68:45:53:70:
         3b:75:ad:55:5c:9e:58:6e:0e:ba:e7:b0:f9:9f:9e:93:7b:95:
         f7:c2:cd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:36 2024 by rpki-client on console-fra.rpki-client.org