Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0facfd3-4ff9-333d-a203-8ce85a26b238.roa
File:                     b0facfd3-4ff9-333d-a203-8ce85a26b238.roa (raw, json)
Hash identifier:          VpBIOHtuGtGul30P6SRTPOl/DtUYG6v1w3uUtzgfHAI=
Subject key identifier:   9B:CE:6D:D6:21:C2:FB:0B:68:3B:D3:2F:14:13:0E:C8:84:B5:F7:CC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F7538B943855001CB580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0facfd3-4ff9-333d-a203-8ce85a26b238.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396605
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f7:53:8b:94:38:55:00:1c:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=04353870-a710-4558-b819-e6b9faaa8e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:8f:3a:c2:da:9a:2b:9d:b5:1a:ad:b7:f8:
                    af:81:bf:71:c4:43:83:30:e3:b1:80:46:4f:60:63:
                    c2:bd:aa:a9:96:19:55:cc:c2:fe:b4:36:ad:ca:71:
                    02:dc:5d:a0:77:a1:f2:62:84:e0:a2:57:f9:4b:66:
                    31:62:a4:a5:39:60:b3:78:ed:e6:f5:f0:4c:ba:4f:
                    99:f7:dc:2f:1f:f1:cc:bc:46:ae:c1:24:e5:76:14:
                    49:39:43:4e:f6:cf:03:b1:b3:1b:f5:8e:fe:2d:68:
                    18:c5:24:8a:3e:da:0a:5c:0f:72:8e:07:71:9b:9f:
                    01:07:2c:02:3b:53:0f:59:d0:b8:f6:06:38:2b:e1:
                    de:11:7e:d4:11:45:18:6d:ac:8c:d8:23:ef:ee:76:
                    36:51:00:03:bc:42:ab:81:01:06:bc:d1:db:47:b0:
                    50:d9:1b:5d:47:d6:b6:bf:65:1b:7a:97:81:85:84:
                    cb:99:57:de:42:21:7a:a0:70:ef:47:5e:30:73:bb:
                    03:18:cb:bf:88:4d:51:d9:f5:a2:d7:8f:c6:74:66:
                    27:71:70:61:0f:f4:dc:ed:22:ad:34:3b:4d:d9:7c:
                    90:c1:0b:50:1d:cd:9b:a0:70:7a:b3:52:c0:08:cc:
                    6f:2e:d0:b1:bd:93:ca:86:3f:55:c7:f2:8e:a0:6c:
                    fd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CE:6D:D6:21:C2:FB:0B:68:3B:D3:2F:14:13:0E:C8:84:B5:F7:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0facfd3-4ff9-333d-a203-8ce85a26b238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:cd:0b:e7:73:34:31:51:d9:cd:58:7d:54:f7:0c:7f:1a:db:
         34:94:4b:77:b2:f5:2c:69:78:06:19:30:fd:b0:38:ba:68:fc:
         b0:d1:d6:1f:d1:94:a6:69:ee:35:45:13:ac:ea:31:79:8b:3a:
         bc:db:ab:ea:41:b1:f9:b2:b0:fd:2e:35:2b:cc:c3:a2:37:04:
         ae:2d:23:97:51:40:72:74:06:eb:ec:f2:be:24:8c:af:df:5e:
         77:f8:6f:7a:7b:5f:c7:49:fb:ba:df:d3:a1:2b:39:65:65:82:
         60:d3:32:c2:a4:89:16:eb:69:43:72:de:dc:84:32:32:79:24:
         ba:02:6b:a2:e7:d5:6f:76:2b:7f:76:90:ee:74:2b:f4:3e:bc:
         1d:a6:49:4c:c7:80:d1:32:a2:82:54:37:1d:88:77:8b:68:d7:
         52:ee:c3:c6:b3:44:c0:62:d3:5e:d9:e0:86:a7:84:92:e8:d0:
         67:c4:01:56:0b:b2:c2:d7:5d:31:0e:95:a4:72:66:5a:f1:41:
         48:c1:88:a6:63:e0:0c:9f:02:08:55:cc:f5:50:63:5a:d3:07:
         ab:06:ec:1d:16:a0:f1:7e:d2:b3:e9:82:3a:8a:cb:c8:71:85:
         c8:69:2e:a8:28:58:3b:bd:f4:3a:49:9a:f6:33:dd:6c:03:da:
         ec:ea:c8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:12 2024 by rpki-client on console-ams.rpki-client.org