Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc532284-f014-350d-b427-c6adfecb650f.roa
File:                     cc532284-f014-350d-b427-c6adfecb650f.roa (raw, json)
Hash identifier:          i7nS4t+Y42flTQRBnkPoAW1HDgEEKBGrrdqLwxkun2Y=
Subject key identifier:   12:46:09:2D:28:E8:2A:86:A9:A4:E2:BF:26:A5:F1:E5:F4:B6:7C:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F006EBAFD9428EFF5380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc532284-f014-350d-b427-c6adfecb650f.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396615
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f0:06:eb:af:d9:42:8e:ff:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=b25bff40-5bb6-40ea-bd97-c219f0e9533c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f6:af:7a:ee:98:c8:83:da:8f:75:ed:a8:23:
                    50:29:6b:93:fb:5d:14:34:75:c2:98:21:df:1a:5e:
                    0f:59:4a:78:59:92:f5:70:53:99:b8:67:a1:4a:5a:
                    aa:a1:8b:33:d7:8f:b6:91:08:4a:be:3f:a4:1b:3e:
                    0d:54:55:0e:10:c1:51:68:60:62:84:d5:58:01:cd:
                    17:6d:4f:f8:bf:10:30:22:f5:51:8f:4b:5d:3b:29:
                    7a:6b:3a:76:53:b5:d0:64:02:18:c9:74:90:d8:9c:
                    c2:ec:e4:11:4b:b0:05:40:18:11:44:b0:54:bd:e0:
                    ef:be:62:e3:9f:83:d2:67:25:00:28:ad:b0:c3:0a:
                    bc:0e:b2:80:47:7a:cf:75:26:a2:51:66:04:7e:19:
                    c7:39:92:82:51:96:f8:02:5c:e9:03:78:2e:69:64:
                    3f:66:6e:71:16:fd:aa:9d:cc:c3:93:5c:fc:cc:fb:
                    8a:da:29:29:6a:96:e1:58:46:66:bc:91:bd:81:1a:
                    61:e8:07:92:7c:d6:4a:15:9e:42:33:14:25:46:11:
                    46:34:bf:47:5f:c4:a2:9f:76:36:58:7c:b8:05:83:
                    9b:e7:03:22:14:db:3b:22:ca:bf:9e:64:fa:41:c0:
                    18:08:e0:c2:53:9a:ff:bc:17:1f:f9:93:14:74:de:
                    3a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:46:09:2D:28:E8:2A:86:A9:A4:E2:BF:26:A5:F1:E5:F4:B6:7C:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc532284-f014-350d-b427-c6adfecb650f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:03:00:88:af:52:7a:68:dd:de:dc:7c:e2:72:7f:49:23:33:
         03:97:a3:c3:4a:00:b9:5f:ea:3e:07:c8:05:d4:08:d3:f0:03:
         2c:e2:71:e4:ec:29:b1:cf:0e:10:e6:04:4a:76:b0:24:e5:b6:
         df:e5:16:d6:dc:03:c3:66:d0:b3:36:14:f9:0f:14:a0:9d:0e:
         e8:bd:64:2f:7f:1b:20:ce:c8:e9:40:83:2c:39:59:c2:a6:da:
         a1:ab:5d:97:29:b9:52:7d:2c:94:0a:de:39:50:9b:58:a9:5a:
         5a:9b:f9:b9:30:a2:b6:45:6e:0b:67:a4:33:bc:83:14:62:87:
         88:bf:21:57:15:33:61:54:0e:4c:36:04:2d:6d:3e:ca:52:93:
         dd:75:60:c2:58:be:d8:69:85:e2:8a:2e:36:82:00:b0:e4:98:
         12:fd:51:5c:da:b1:df:11:74:d3:dc:39:9c:0d:ba:19:28:0f:
         d9:2f:5c:9d:9e:1c:a6:79:58:43:53:c9:7a:b4:cb:3d:9c:70:
         19:a4:76:d1:31:21:68:e9:e6:ca:17:bc:df:b7:1d:3e:fd:e8:
         5a:25:b1:55:08:a7:22:a5:c7:33:c4:c6:ae:0f:97:7b:40:86:
         20:8a:96:3e:e0:f6:a0:9b:fb:10:ea:37:a3:c0:16:94:2b:fd:
         1f:71:eb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:15 2024 by rpki-client on console-ams.rpki-client.org