Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa
File:                     9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa (raw, json)
Hash identifier:          r3fql6Ltv8Te7+K3Ohc6A8mL+2U7+zj8jXPKTMQIXjk=
Subject key identifier:   EC:F9:65:2D:C9:C7:08:75:CD:1C:C1:8D:87:6B:F5:DC:8C:2A:1C:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9FD3EAD845E6CA3E67A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396551
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:fd:3e:ad:84:5e:6c:a3:e6:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=32ff582f-9ad8-4f80-bb6c-dc1494196543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:be:f3:e1:c3:19:06:1f:93:0b:18:1d:bc:
                    73:84:3d:1e:ab:7a:63:bd:a8:8b:a6:db:b3:6d:f8:
                    66:45:06:45:b4:c2:cf:db:02:e4:26:65:a3:c6:e6:
                    3f:35:d7:34:a3:79:7e:e5:28:ad:f9:45:0c:c2:59:
                    69:1b:5f:79:54:7c:c0:95:85:9f:a4:3c:c8:40:ae:
                    4f:5d:e1:a1:8c:22:0e:b7:2a:1a:a1:d6:90:cc:a0:
                    d8:11:41:ac:fd:01:ba:7d:00:5f:86:34:7a:52:a2:
                    9b:32:42:b6:8e:2e:d9:b8:58:33:cb:50:7e:27:fd:
                    d9:ab:49:27:c8:70:22:26:a9:5a:b1:92:8b:2a:4d:
                    7d:41:cf:5f:a8:4a:48:29:32:bf:4b:24:ce:be:ee:
                    98:f3:5c:25:e6:77:f1:2b:18:23:f9:05:1f:f0:33:
                    de:81:c3:ee:e1:bd:b8:5c:f7:0b:c5:3a:58:52:28:
                    d3:d3:0c:ee:28:0c:37:10:7f:c1:ba:38:ed:37:b4:
                    dd:26:64:02:7d:4a:36:b5:cc:0b:02:be:94:eb:61:
                    88:dc:e2:24:5d:b2:3d:f3:ef:be:66:09:9e:fd:38:
                    3b:3c:d2:87:8b:0a:e3:48:4d:af:2d:44:f2:8c:f3:
                    a6:dd:b6:07:7b:18:51:e9:97:6a:ca:c7:40:b0:6e:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F9:65:2D:C9:C7:08:75:CD:1C:C1:8D:87:6B:F5:DC:8C:2A:1C:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:ad:94:32:50:c8:5d:37:8b:b0:60:2a:f4:cc:ba:12:71:62:
         12:06:74:c8:ca:00:4f:6e:09:db:47:48:e0:32:77:01:fe:f3:
         70:87:99:f7:06:e5:e8:dc:34:d3:04:a1:6f:0b:15:10:cb:ed:
         08:06:38:f3:02:f9:31:6c:d2:bb:d7:ac:29:90:53:ad:b7:1f:
         e1:96:68:00:2b:5a:50:85:0f:29:df:b0:3e:4d:1d:81:de:f1:
         9e:c0:c8:91:f6:14:b9:a0:f9:c4:a4:52:31:11:97:2d:83:36:
         f8:91:6c:67:97:47:ec:a9:26:c8:fa:e1:86:54:f7:6a:03:ad:
         4d:ec:3e:15:73:e0:03:63:a3:e2:1e:00:48:1a:70:ef:ed:06:
         32:b5:ce:13:b1:4b:ce:16:0b:04:2d:fa:4b:66:f7:e5:8b:03:
         8d:1a:e3:fe:8c:e3:34:53:4f:61:1f:49:36:5b:b3:38:48:17:
         b0:f0:b5:84:6e:5a:21:cf:0d:e3:97:3e:36:91:da:b3:57:68:
         4b:0a:28:3a:ec:87:30:df:0c:45:25:31:e3:4c:d7:f5:5c:22:
         23:c0:9d:0e:ff:ba:9d:bc:59:8c:c2:4b:59:43:d2:fb:01:79:
         1d:86:4c:7a:1b:05:b3:3a:dc:80:6f:d8:24:2a:5e:5b:d8:e4:
         43:6d:ac:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:37 2024 by rpki-client on console-fra.rpki-client.org