Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4da21fd-9982-3516-8511-d16ca490384f.roa
File:                     c4da21fd-9982-3516-8511-d16ca490384f.roa (raw, json)
Hash identifier:          7r484AGTlRuVZsoLXZhwKDdy9R7zSdFt0W/kk0es6H4=
Subject key identifier:   A9:F5:4A:17:53:BC:08:9A:A7:C4:1D:10:2B:4A:FE:70:A7:5D:5A:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9EF8CF078FEEAABC6F600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4da21fd-9982-3516-8511-d16ca490384f.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396617
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:ef:8c:f0:78:fe:ea:ab:c6:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=00319335-9c7a-4f9e-883e-d985974f4f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:25:2b:2c:8e:5b:51:df:79:67:78:67:39:00:
                    ce:ba:a9:5a:e4:a6:2d:f4:69:fd:d8:58:ae:2e:7f:
                    da:de:32:96:be:fb:72:b1:5e:ab:e4:97:52:ed:72:
                    f4:1d:a3:5b:4c:fd:cf:c8:09:94:3c:36:31:65:ac:
                    e4:96:ec:3f:da:ed:d8:49:f6:02:6c:b7:ca:f9:04:
                    6d:f6:4a:9f:10:a8:d2:36:35:61:23:df:64:3f:c3:
                    58:86:c4:2a:37:9c:3e:b8:32:c2:47:80:5e:7b:8d:
                    fc:02:7e:51:e9:3e:5f:a5:70:8b:60:86:68:b6:58:
                    6f:ab:f6:91:19:fd:b3:45:81:4e:27:a2:33:24:f0:
                    84:b6:b1:13:65:d8:04:69:b5:08:d1:a5:39:5c:e3:
                    1b:6c:59:bc:76:52:2e:c7:25:eb:9b:34:1b:10:cd:
                    94:01:90:49:d1:13:84:e5:b2:cf:0f:33:90:f4:e9:
                    52:35:cd:52:dc:44:d3:7f:d7:56:67:6c:75:b8:89:
                    de:4e:db:04:15:63:98:82:6d:fe:31:8f:82:3c:1b:
                    07:79:3e:c9:64:09:91:56:95:11:de:0c:5b:1f:32:
                    1e:b8:3b:2b:06:86:38:68:2c:5e:be:02:21:d0:36:
                    ae:50:ca:92:5b:aa:04:87:7a:ab:92:b2:15:42:cc:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F5:4A:17:53:BC:08:9A:A7:C4:1D:10:2B:4A:FE:70:A7:5D:5A:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4da21fd-9982-3516-8511-d16ca490384f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:1c:9a:d6:8f:a7:11:54:6b:5b:dd:91:0a:dc:bd:8a:c6:03:
         48:e5:48:17:5e:6b:ca:1c:5e:f2:48:81:98:da:72:e6:f0:78:
         07:90:d7:3b:8e:6d:19:36:6b:2a:a4:75:dc:a2:a8:cc:bc:25:
         3a:1c:96:26:0c:13:c2:1b:fb:04:cc:20:46:06:30:bc:97:bd:
         46:f7:db:63:e3:5a:1a:17:f1:0a:74:45:bb:67:bf:e3:2d:dc:
         64:0b:e6:19:e4:88:a5:50:80:85:40:a5:03:e6:5a:56:9b:12:
         27:e5:b4:cc:93:d2:dd:b0:ee:74:a8:94:08:fe:35:b2:d7:23:
         d9:0a:53:f9:6d:67:d2:4e:5b:de:da:dd:0b:32:1a:d5:8c:43:
         3c:0b:57:5d:0b:84:4b:51:4a:cd:4c:5d:70:8e:84:b1:41:54:
         c3:4e:e7:fc:21:6b:2e:a5:ca:7b:54:ed:bf:7e:6c:3e:c1:5d:
         f1:cd:06:f7:51:d7:2a:83:e2:01:d8:a0:bc:78:20:ef:4b:e5:
         2f:31:19:44:27:2b:4c:a1:a4:fc:e1:e0:0a:6f:24:41:dd:96:
         00:60:93:4e:53:98:ac:3b:e9:48:5a:3e:b5:3d:d5:a7:cf:8c:
         a3:6f:eb:5a:af:04:ef:a0:c1:f4:39:5c:2b:c3:f4:90:e2:88:
         e3:87:4a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:15 2024 by rpki-client on console-ams.rpki-client.org