Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c51f699d-4a9c-395a-8cf1-f7833afd2076.roa
File:                     c51f699d-4a9c-395a-8cf1-f7833afd2076.roa (raw, json)
Hash identifier:          +6i8FZh+AeGs+s919TtzvENqTsia4/lwdn3ZkJejWT0=
Subject key identifier:   35:74:9F:F5:26:87:FA:4B:8B:D0:EF:4C:53:71:F9:E9:82:A4:58:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F36E97D8009287100580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c51f699d-4a9c-395a-8cf1-f7833afd2076.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396588
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f3:6e:97:d8:00:92:87:10:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=ab59d0b6-7a4a-4720-a3fd-29ebdfa167a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:41:67:87:c1:ad:71:a3:b6:f2:3d:94:b4:
                    dd:c8:35:6c:0a:13:bd:1e:b4:57:f6:bb:f6:37:92:
                    1c:e7:94:c0:8b:2f:4a:e6:77:f4:36:cd:7c:d4:ca:
                    96:bb:09:d6:06:09:8d:71:97:44:1a:21:cb:a3:8b:
                    c4:06:42:de:6f:3c:f9:b1:bc:a9:7c:9e:cd:ea:93:
                    9c:f1:a2:b1:ec:97:f1:e8:d0:26:bb:3b:24:23:a5:
                    e1:27:b2:af:89:bc:0f:af:3d:ba:7a:f4:3c:0b:13:
                    e1:39:12:8b:4c:ee:a6:73:44:20:2b:97:5d:df:c2:
                    b7:e1:f2:da:81:24:c3:7a:b6:a4:fd:a6:42:cd:8d:
                    44:af:43:65:d7:b8:d1:72:ae:e6:bb:5c:ec:50:21:
                    0d:8b:89:de:10:93:bc:ff:1c:d9:91:b9:f3:6a:a8:
                    bc:03:e2:4d:0a:9d:8a:9e:ba:b7:10:b4:39:f1:a4:
                    62:20:65:5a:7f:5a:c0:88:35:b4:27:53:da:f4:82:
                    7b:39:8b:a5:11:9b:dd:5a:c3:7c:fe:23:23:8b:f4:
                    6c:c1:e4:ac:1c:61:7b:c4:47:f5:89:ce:67:46:8d:
                    9d:9a:e1:0d:a3:ea:ab:39:aa:e1:26:af:ee:ab:34:
                    d2:45:0f:fa:bf:20:79:dc:fa:ea:a2:31:86:1c:af:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:74:9F:F5:26:87:FA:4B:8B:D0:EF:4C:53:71:F9:E9:82:A4:58:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c51f699d-4a9c-395a-8cf1-f7833afd2076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ab:ac:76:07:26:c5:ba:a1:18:0b:cc:da:63:b0:bb:20:85:
         f0:e0:78:e2:6e:7b:d0:e9:6f:ae:2d:56:a9:05:72:f3:48:87:
         0c:17:7e:55:e7:4e:99:5e:bb:39:cd:f1:a7:c9:f7:db:86:49:
         02:0b:ef:ef:b8:21:71:0b:5f:71:66:87:78:ca:d0:0a:63:a5:
         b1:1b:20:e8:a3:1a:d2:0e:42:ac:e3:98:86:3d:1a:a7:c4:2b:
         85:b9:3c:d0:b8:e7:43:d8:00:ed:55:5c:1e:42:0e:91:a8:44:
         f4:64:e7:0e:e3:ce:53:26:cc:05:9b:1b:67:ab:5a:3d:4e:b9:
         ea:9b:81:53:1e:7f:3f:c9:06:57:08:30:b9:29:c9:c1:f5:57:
         72:c4:43:3b:c6:69:48:40:93:94:ce:1e:1a:68:b7:1f:09:00:
         ca:94:24:9e:c6:bd:03:ba:77:95:e1:f6:01:87:67:ef:12:f1:
         6a:13:bb:37:e9:70:81:97:db:37:1e:17:35:85:db:9b:52:f4:
         ad:f6:44:75:2c:3a:8d:b2:6e:06:54:3f:c4:5b:4d:71:a4:6e:
         2a:5f:12:21:63:76:b3:74:7d:69:19:da:c2:59:e0:d1:0f:f2:
         33:ed:43:c1:d6:a9:73:f9:d6:d8:6b:9b:a5:0a:d4:94:c2:8f:
         71:9d:53:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:45 2024 by rpki-client on console-fra.rpki-client.org