Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1bacd7c-d946-3b6f-a95c-5a913b033afe.roa
File:                     b1bacd7c-d946-3b6f-a95c-5a913b033afe.roa (raw, json)
Hash identifier:          15QixoffDLT5/F2mY3n9F/EUbPWuEHHCc3iPRnSjLa4=
Subject key identifier:   3C:9D:3B:9E:8C:D4:99:35:8A:E3:BB:C4:73:46:DF:20:5B:51:7F:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F5CA7DB25D9FB27335C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1bacd7c-d946-3b6f-a95c-5a913b033afe.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396604
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f5:ca:7d:b2:5d:9f:b2:73:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=148527cc-0b86-4edb-9388-1f6a8c6541f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3f:2b:c3:d7:8b:a9:5f:52:0c:12:d4:80:eb:
                    12:fb:2f:17:bd:33:2f:6f:35:0d:5b:d1:25:fc:17:
                    fc:9f:12:53:66:a4:a8:29:67:ff:9b:0f:39:f0:66:
                    30:45:35:5f:f8:35:53:98:69:58:5f:ed:f4:cf:fe:
                    23:86:ab:92:35:68:59:fc:12:88:a6:95:49:cd:4e:
                    95:09:43:f7:86:e6:0c:4e:26:61:25:48:92:e5:c0:
                    6e:df:e5:30:f5:a2:ba:a0:34:16:cc:4a:f9:cd:2d:
                    4b:96:95:3e:f9:f9:f4:45:b7:10:8d:38:ef:84:ef:
                    f3:02:13:12:7b:b2:d8:0d:22:1a:0b:f0:7f:8b:ce:
                    5d:3d:70:68:82:80:45:35:34:3d:fe:e2:e1:a2:52:
                    24:5d:fb:09:d3:17:a1:98:80:2f:e4:a2:46:dd:e4:
                    66:5d:7c:5c:dc:2f:b9:b8:58:e5:c0:80:fa:e0:ac:
                    04:13:78:2d:08:0c:1a:5b:2e:d7:76:8e:48:fe:4e:
                    dc:27:a9:6e:0d:8d:5a:a5:e0:ce:2b:36:8f:30:df:
                    29:e6:89:b6:1e:bd:ec:a4:b0:66:fb:e4:57:f1:e9:
                    2a:80:51:a9:53:68:dd:50:c4:a9:af:da:90:46:fb:
                    16:11:e3:da:2c:2f:33:20:cd:3a:ab:c2:d4:01:b6:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9D:3B:9E:8C:D4:99:35:8A:E3:BB:C4:73:46:DF:20:5B:51:7F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1bacd7c-d946-3b6f-a95c-5a913b033afe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8a:f6:f2:16:97:1c:bf:ef:bf:5b:f3:0c:da:8a:96:d0:02:
         ff:6b:cf:29:ce:61:da:de:9c:b3:20:1c:3d:86:60:8d:b4:e7:
         31:9a:ee:aa:cd:1e:86:16:29:53:66:8d:77:6b:3f:33:66:00:
         24:31:c8:d2:60:19:7d:7f:83:c3:82:cf:d1:5a:00:dc:c4:9b:
         6d:88:b5:33:70:0e:ad:e4:89:d0:8b:48:88:0b:c5:9d:d8:35:
         98:98:40:4b:21:2c:c2:70:49:09:05:97:a5:20:28:ac:d5:ff:
         10:5a:a8:a9:a1:91:50:e0:a8:ac:46:e9:b0:56:56:49:3f:bd:
         b5:cf:8d:f6:6e:5e:d7:c2:22:0a:46:f8:db:d8:e5:96:fd:f7:
         52:4c:35:39:c5:6b:77:5e:fd:3b:7c:35:f6:19:5d:82:23:18:
         b0:29:7b:23:03:5e:fc:a0:94:ee:a0:49:d7:c8:ec:a9:4d:23:
         48:e1:b9:6d:5d:d5:1c:89:df:98:b7:41:88:92:50:1b:91:1f:
         9f:1b:95:10:4e:09:10:7f:41:1e:23:2d:5e:04:72:5b:5e:0f:
         a5:13:f1:a8:6c:31:a9:95:fb:fb:c2:89:37:eb:b4:dd:e2:8a:
         b9:f5:67:c5:9f:80:22:e3:70:0f:c4:15:7b:ca:15:12:e7:61:
         ed:45:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:12 2024 by rpki-client on console-ams.rpki-client.org