Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e77fecb2-deca-3224-add0-5a42310f76a2.roa
File:                     e77fecb2-deca-3224-add0-5a42310f76a2.roa (raw, json)
Hash identifier:          XmDjavkPM14XR66Oj2Bt093MZMyL/2UEGNez/Ng3zL8=
Subject key identifier:   05:35:95:37:E1:7A:DB:2D:6B:7B:4F:7A:32:AF:EF:CD:C4:E0:E9:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F3FA722ACF2A26420480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e77fecb2-deca-3224-add0-5a42310f76a2.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     19836
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f3:fa:72:2a:cf:2a:26:42:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=7a2bf9c6-9f6c-45cd-b530-d2c1c8442284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d5:e9:08:d2:df:bb:3f:20:5d:f1:8a:00:85:
                    af:68:b9:46:f2:b0:ff:03:18:a8:75:6b:c6:e1:24:
                    a2:72:e6:26:c5:61:eb:cb:f0:86:ba:c6:3b:91:b0:
                    84:d1:6d:3c:c0:81:b1:2c:2f:7a:15:de:a3:ca:86:
                    ed:a9:70:a2:2b:92:d9:15:7e:4c:89:c6:fd:36:c0:
                    bd:5d:3c:68:00:79:23:cf:de:d4:d9:6e:11:15:9a:
                    cc:4b:c7:e0:2b:3e:bc:a8:1f:9e:53:e3:30:2f:8f:
                    a6:db:8b:ba:0a:f7:fb:d5:e1:05:2d:e9:8c:dc:4b:
                    02:78:a7:0b:e3:65:08:91:c4:0e:6b:e9:f8:62:62:
                    ff:ed:9b:e5:cc:3f:2d:a0:a0:7d:6d:ba:72:f0:2e:
                    8e:31:f4:4f:91:8b:a6:a2:51:4e:dc:84:96:2b:ca:
                    0f:62:0a:b2:f2:05:d7:30:4b:07:7f:1b:45:6d:89:
                    ee:ff:ef:2f:70:3f:9f:b0:43:7c:46:f1:0f:0c:e6:
                    ea:42:71:9b:b5:dd:6f:3a:a4:2d:51:67:f1:5c:fe:
                    7f:84:c1:f6:96:05:7e:29:15:94:52:e3:3f:63:b4:
                    ef:bf:25:d0:f3:4f:46:99:5f:d5:6c:65:41:8d:17:
                    6a:5a:78:38:3c:5b:2b:0e:ad:ba:3b:12:85:fe:b5:
                    cd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:35:95:37:E1:7A:DB:2D:6B:7B:4F:7A:32:AF:EF:CD:C4:E0:E9:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e77fecb2-deca-3224-add0-5a42310f76a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:42:4f:56:0c:34:63:98:a2:e3:44:71:69:87:c3:d5:13:46:
         4b:33:da:a9:83:ee:fb:ef:e3:1d:77:16:cd:7b:b4:3d:13:85:
         b5:ab:e3:6a:90:48:b4:58:da:42:26:45:88:b8:8b:03:87:9d:
         d4:67:bb:4c:3e:cd:93:4d:02:e3:09:31:41:74:0a:47:38:61:
         60:10:0a:3e:0a:b3:66:9b:da:a7:85:47:38:df:6e:bc:a5:f9:
         5b:60:93:93:7c:93:b3:77:e0:66:e0:ec:ec:c9:68:95:a5:54:
         69:a1:3d:88:6d:42:fe:74:61:fd:f4:54:a0:fa:93:1e:94:85:
         38:04:8b:0b:a3:eb:eb:ca:53:f5:15:70:3a:23:1d:b8:86:48:
         fe:86:ec:57:b3:49:25:02:14:3a:1e:3f:5e:99:4a:4c:1c:31:
         1f:b6:29:6f:36:97:b1:9e:7b:b0:1e:54:be:f8:65:3a:cc:61:
         fe:38:6b:f4:b4:9c:7c:47:4f:1e:16:4c:c4:a6:b1:d0:08:26:
         53:95:40:af:8b:61:91:bc:31:c3:55:9f:35:bc:52:f1:4a:62:
         92:81:21:d0:7a:0c:61:de:42:9b:87:c3:88:b4:71:44:c9:ed:
         7c:10:12:34:7f:a8:1e:34:e4:80:f2:4b:bd:41:c0:b4:89:72:
         87:48:4a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:18 2024 by rpki-client on console-ams.rpki-client.org