Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2ab224-25a3-366f-8164-87a4c5564e32.roa
File:                     be2ab224-25a3-366f-8164-87a4c5564e32.roa (raw, json)
Hash identifier:          pOUDsMrA+5qzRaH3qpmViErIw98YOu2RqkQuRyhWSPo=
Subject key identifier:   7F:17:BA:17:65:38:47:62:A5:32:DC:C7:61:DD:0E:E3:EF:F2:C1:2F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F9E4914BD53CCDE45A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2ab224-25a3-366f-8164-87a4c5564e32.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     36631
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f9:e4:91:4b:d5:3c:cd:e4:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=adbffcd8-7b9c-4ebb-a5f3-5998e7ac6f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:ff:13:4c:e5:3c:e8:9a:3e:d9:b2:74:7d:
                    3d:0d:d3:8f:3e:37:0d:a0:ec:0f:e6:18:4e:cc:4d:
                    2b:3b:41:21:1b:33:93:81:85:ea:06:6a:ac:77:b9:
                    b7:52:b2:c0:41:22:d3:4d:fb:64:80:93:f6:0c:39:
                    09:d4:64:6b:b4:e0:09:92:63:64:f6:ed:07:17:21:
                    52:22:64:3e:72:70:d7:dc:c2:44:44:81:f3:24:62:
                    3b:dc:5b:be:6d:b8:8f:dc:81:02:5a:ab:a3:0b:13:
                    c8:c8:df:ac:5b:5f:3e:52:c9:3a:c7:ce:e9:66:57:
                    18:bd:99:cd:78:30:18:f4:7f:ec:cf:56:96:ba:c3:
                    20:44:a5:c1:11:ae:7a:05:8e:19:8d:b6:54:8e:a9:
                    42:16:3e:6a:db:bf:7b:48:45:a8:f0:0e:db:8f:27:
                    6b:8d:66:24:32:64:97:80:cd:d8:73:4a:b6:65:9c:
                    e4:c7:d3:91:0d:fb:36:58:d4:80:4d:c8:ed:49:a5:
                    25:59:91:e4:68:f6:d9:ae:de:72:2f:a4:2e:92:8a:
                    ae:14:09:be:5c:1b:61:06:27:13:00:1c:36:d5:c9:
                    09:de:e5:30:00:ea:cf:0d:a1:f6:bd:33:57:79:9b:
                    70:be:52:ff:93:d6:14:f6:d7:7a:9b:20:f5:86:64:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:17:BA:17:65:38:47:62:A5:32:DC:C7:61:DD:0E:E3:EF:F2:C1:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2ab224-25a3-366f-8164-87a4c5564e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b8:11:86:21:9f:1c:0a:be:0d:f5:e0:e5:b9:3c:0f:66:37:
         73:2f:7a:98:74:90:d6:ef:11:ec:f1:2f:3f:41:d7:9d:93:0c:
         aa:a3:77:5f:b2:50:b4:3c:75:b7:b7:33:5d:ec:5f:2d:72:b9:
         6c:89:e3:9f:37:a5:61:c9:8f:18:7d:5b:53:7e:d2:89:ef:f0:
         88:ab:a6:5f:35:5f:08:85:f9:66:41:c7:31:c3:ec:93:57:9a:
         82:5b:f6:af:c9:20:f8:a7:45:a9:af:62:81:91:0c:30:60:34:
         0b:fc:a7:48:7f:3f:d9:ea:68:6c:3a:02:68:9e:ce:90:a3:71:
         c7:60:59:2d:77:ee:04:8b:1b:a9:48:b0:f0:30:17:a9:3c:ce:
         0d:4f:63:1f:00:6a:63:7b:0b:40:bc:46:8d:a2:bd:7b:df:a0:
         16:93:c3:9c:e1:a3:fe:63:eb:88:af:d2:62:1c:17:e0:9b:33:
         51:dc:7f:6d:b6:fe:a9:a1:8f:d5:a4:13:12:60:3d:2c:1b:0e:
         41:da:2b:7f:e8:09:45:14:25:2e:4c:05:5d:20:5d:ed:6b:f5:
         9e:2e:b3:c9:11:f1:f9:3e:60:09:8b:1f:c6:04:18:9f:3b:00:
         39:49:6b:40:55:d2:7f:e2:2c:25:ae:15:6c:b2:3b:80:07:2c:
         ec:63:23:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:13 2024 by rpki-client on console-ams.rpki-client.org