Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e6489a-a7da-364e-a1a6-f2459dc66045.roa
File:                     d4e6489a-a7da-364e-a1a6-f2459dc66045.roa (raw, json)
Hash identifier:          ynP/dtyb3Eyfy1YGrPH/CNjUdmPyvdeV6Yf1cJMhSYY=
Subject key identifier:   36:2C:E9:73:2B:2F:57:E9:AC:95:F2:A6:35:F5:BA:89:03:21:A1:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9FC7E3B967EB9C1162E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e6489a-a7da-364e-a1a6-f2459dc66045.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     10515
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:fc:7e:3b:96:7e:b9:c1:16:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=6d134841-22c3-4f22-9d90-173d697105b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:8d:7a:81:06:df:82:38:86:5a:f0:af:63:
                    e2:ef:82:9e:04:30:4d:8f:f4:5a:00:d9:b9:1c:0b:
                    b1:99:b9:4d:9c:42:62:5a:63:83:e3:24:41:3b:ea:
                    52:06:aa:c1:af:f9:5c:93:77:31:f7:b8:d1:27:fe:
                    5a:bc:50:95:42:70:6b:0e:26:ea:b2:85:7b:3c:f3:
                    33:53:c6:11:74:d3:b2:4e:ec:da:6e:05:83:c6:9e:
                    94:b0:37:8e:3a:0d:4d:b0:d6:b3:d6:9c:5f:08:c4:
                    aa:a8:3c:12:07:d6:21:a2:01:e8:64:8a:84:03:82:
                    be:2a:51:f5:54:66:aa:9b:05:14:2c:9a:23:2b:cf:
                    d3:0a:ba:4c:8c:b4:ed:c1:30:21:e1:e2:4e:be:95:
                    21:9e:69:d5:0b:3c:94:29:57:c8:f8:89:47:da:dc:
                    a1:45:1f:b4:cc:5e:16:2d:56:75:f4:67:e8:c4:e0:
                    58:18:6b:1b:0d:79:2d:2b:cf:78:74:61:88:6b:60:
                    38:b0:87:b3:10:6b:03:e8:d5:a3:b7:f5:c7:28:48:
                    d0:cd:b0:ca:71:31:ae:52:fb:fb:1c:a7:ad:f3:5d:
                    a4:86:77:6a:9b:c1:06:59:29:58:2a:57:4e:c6:20:
                    68:f8:b6:bd:c7:7a:5c:48:d4:bf:7f:cf:a1:55:34:
                    ac:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2C:E9:73:2B:2F:57:E9:AC:95:F2:A6:35:F5:BA:89:03:21:A1:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e6489a-a7da-364e-a1a6-f2459dc66045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:1c:d1:27:fa:55:e2:bd:63:ae:86:5a:b1:4d:d1:8e:76:22:
         61:8b:6a:51:c4:46:a5:bf:e3:04:e0:a7:11:73:a4:52:71:b9:
         34:9a:f7:a4:0e:9d:0c:46:ff:6c:14:8c:46:ea:76:70:40:48:
         41:18:bc:e1:db:45:3c:23:6f:d9:9b:30:eb:f3:b8:68:9e:25:
         88:2e:49:77:ea:8a:86:81:36:e9:5e:39:b5:5e:5e:2f:8d:17:
         16:54:65:48:5f:fd:4d:e5:80:e6:01:54:7e:e0:aa:60:12:95:
         01:73:7b:d8:67:5c:39:d7:82:85:da:49:95:d8:bc:eb:60:de:
         7b:0f:69:63:64:a4:77:8e:1a:fb:7a:c5:72:1d:90:cb:86:bc:
         bb:79:fb:58:99:86:bf:41:19:7c:1f:72:0d:25:9d:25:af:76:
         57:36:d7:19:23:15:c3:12:33:b6:29:6e:45:b3:f0:fe:a5:a9:
         ad:9c:6e:93:86:7b:2f:77:88:2f:43:a3:0b:ac:90:4b:37:4a:
         16:18:77:cf:92:6c:8e:ba:5d:7f:df:d1:b3:99:ec:d2:7a:ef:
         bd:69:ae:83:da:bb:3f:82:46:aa:b8:d3:2b:07:63:31:83:b8:
         aa:a5:5b:96:a2:e6:99:6d:1e:db:5a:95:b7:e5:56:ae:22:3e:
         c2:a5:3f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:48 2024 by rpki-client on console-fra.rpki-client.org