Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa
File:                     c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa (raw, json)
Hash identifier:          40EjTZFa9I6GNDz6S5RP+HJ+Yq9rZBC3UoVacF7KxPc=
Subject key identifier:   BD:31:3A:56:4D:8E:A5:62:A6:97:A0:84:EB:E6:00:E3:4B:40:A1:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F4760DFDB53DE95A8CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     36618
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f4:76:0d:fd:b5:3d:e9:5a:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=b5b60a68-3752-4484-8a1e-2357d12733de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2b:f0:66:c1:70:b6:e3:a4:bb:ff:6b:30:a1:
                    60:e3:80:69:3f:ee:b7:1d:7f:1f:60:66:70:c3:2d:
                    25:98:d7:cc:f3:27:20:3a:8c:c2:58:08:bc:16:17:
                    ae:59:0b:fe:ae:9b:f2:a9:f7:22:70:db:66:bb:44:
                    16:9e:4c:bf:86:97:ca:9e:68:a3:48:ef:83:e6:6e:
                    c1:f4:50:d9:09:cb:1f:15:8c:e8:5d:2e:ab:1e:2c:
                    e8:94:dc:df:bc:e4:2b:92:9d:f8:6c:b1:e8:88:14:
                    45:1d:ee:c5:a5:83:97:da:e6:d4:68:6c:62:32:a8:
                    2c:87:5d:3b:44:ff:1f:81:9b:d8:8a:1d:f6:99:37:
                    2b:78:2e:90:f4:e3:a1:4f:59:b1:07:32:96:01:c2:
                    8b:99:b5:a3:fc:c5:cd:b3:c9:0b:11:ec:3f:12:e3:
                    cb:91:b2:7d:17:0e:de:67:bd:7c:93:d9:52:c6:83:
                    c3:82:07:e6:c1:50:4b:8a:d0:52:35:4c:75:96:f8:
                    f7:09:d8:0b:02:ef:cb:89:20:2f:02:a4:d1:ab:d2:
                    59:b8:08:63:14:74:00:9d:5b:b3:96:5d:0e:16:a9:
                    8f:46:67:3b:77:b8:a8:e7:a9:c6:d9:fc:f2:6d:fd:
                    50:85:03:59:18:92:fa:1a:b8:12:c9:be:d8:51:80:
                    37:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:31:3A:56:4D:8E:A5:62:A6:97:A0:84:EB:E6:00:E3:4B:40:A1:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:82:2e:58:30:85:68:dc:55:58:fb:ce:37:fd:68:d7:83:eb:
         bb:ce:a9:26:3c:d2:c8:30:19:fa:ca:02:ae:70:e1:27:f0:8b:
         2b:70:62:7d:26:0d:0e:4f:ed:1c:40:58:4e:41:65:96:fc:39:
         78:ab:9d:31:1c:91:92:43:e6:3f:0c:c6:ed:c8:ac:63:7c:8e:
         1e:18:4f:d1:0a:ab:df:a2:09:07:84:a5:0a:8d:52:e3:ed:49:
         c6:f9:c4:c9:4d:98:47:8a:3e:f4:e2:6b:4e:77:43:75:e8:01:
         5b:e3:e8:f0:27:6b:d1:8b:d9:e4:52:5e:3f:39:cc:73:33:8b:
         f9:9d:3a:94:c9:e8:96:af:a5:b4:6f:79:43:28:dd:8a:06:b6:
         67:2c:ed:a6:bf:f8:fa:ad:c2:c0:d4:22:68:5e:d5:7f:2b:5d:
         23:c0:32:32:2c:96:b8:fb:a0:c4:3f:af:9b:ab:96:6b:0d:21:
         f2:6e:86:e7:62:ec:86:11:f9:f1:7e:78:70:f7:49:cc:62:af:
         a4:a2:c5:42:2e:93:84:59:25:ad:92:d1:4e:23:a8:2e:9d:5d:
         51:27:c4:81:f9:43:56:4e:95:c4:49:4e:d5:12:43:4a:e8:f8:
         55:ee:b8:7b:f5:16:e2:e4:dd:b0:6a:0b:d2:f1:f0:fa:12:ab:
         3b:78:62:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:14 2024 by rpki-client on console-ams.rpki-client.org