Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed8580c5-116d-3a0b-980a-f5ba5112c4c0.roa
File:                     ed8580c5-116d-3a0b-980a-f5ba5112c4c0.roa (raw, json)
Hash identifier:          08JyL1hge/jnQrG1Pdk0jvocQqZndnvUrH+bJ/77lcQ=
Subject key identifier:   51:72:7F:90:D4:4A:0A:7F:12:01:1D:FE:19:BD:D8:1D:AE:17:2A:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F35E521C81AC641ED1E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed8580c5-116d-3a0b-980a-f5ba5112c4c0.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     211369
IP address blocks:        192.68.126.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f3:5e:52:1c:81:ac:64:1e:d1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=275fb6e1-ee36-4e25-8615-2fc4e0dc702f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b2:1c:9b:91:00:0d:98:e3:df:f2:e9:f6:9f:
                    43:07:ec:e8:8a:77:97:79:81:72:87:00:f5:b2:5e:
                    f2:07:7d:a1:f8:d5:20:de:96:f9:4f:75:cc:e6:01:
                    87:d8:29:33:ac:44:7e:ea:b2:45:01:78:b6:2a:d7:
                    4e:99:bc:b0:e3:13:07:ae:75:ab:26:a3:11:57:83:
                    3a:fe:51:5f:90:c3:2e:38:ba:49:35:18:1f:99:9f:
                    b3:97:64:50:bb:43:ff:33:0c:c4:13:90:b7:03:91:
                    31:ba:a0:7d:47:20:77:e3:c9:1c:ff:47:8f:a0:67:
                    41:c1:cd:3f:4a:df:9d:b7:a7:37:2c:51:52:d5:db:
                    1e:25:d0:7c:36:99:4f:c9:1f:2f:18:e3:94:2b:d7:
                    d9:02:b3:4b:0f:46:94:1d:e6:3c:2c:15:17:63:65:
                    4d:77:40:a8:c2:40:db:4b:dc:c3:d5:9c:cb:13:76:
                    c2:f0:db:cf:c2:59:2d:88:ec:46:a4:6d:cc:a1:dc:
                    40:b4:1d:f3:f7:fa:62:57:ca:88:a0:ea:34:52:e2:
                    c1:75:2b:81:0b:26:fd:cc:48:09:fb:6e:fe:43:68:
                    2d:22:48:a0:8f:29:c2:3e:fd:fc:9a:f1:d1:14:fb:
                    4a:6f:a9:9d:76:c5:f9:64:21:0d:a1:f3:d4:21:60:
                    4f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:72:7F:90:D4:4A:0A:7F:12:01:1D:FE:19:BD:D8:1D:AE:17:2A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed8580c5-116d-3a0b-980a-f5ba5112c4c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:68:dc:af:52:58:cc:35:fc:40:65:94:a7:64:e2:f6:f0:9e:
         82:48:a1:79:ed:cf:cd:1a:25:31:2c:3b:c9:73:1d:a6:8d:8f:
         46:4b:d5:c2:6b:58:32:e4:1a:91:5f:ed:25:ee:d0:0a:f4:85:
         64:4c:83:87:28:1e:65:f7:77:09:18:71:7d:72:21:f7:62:df:
         64:87:6c:5e:1b:96:85:cc:cc:1b:23:86:ec:7c:ac:6a:8f:e4:
         79:04:7e:05:f4:57:d2:de:a0:84:2a:a7:f9:19:4b:f3:c0:64:
         cb:a4:2a:72:48:5b:ee:87:31:6b:34:3a:58:7d:3a:33:f6:e4:
         d9:f4:7b:df:84:97:01:fb:ef:b1:97:89:9f:a8:09:39:76:a9:
         5a:19:6e:b4:ad:73:ae:d7:72:76:74:83:ca:f9:e1:d6:0e:ec:
         7b:8c:5b:bb:86:f2:7f:e2:7d:2a:9b:c7:e9:3f:05:a7:1d:22:
         23:6a:6e:0e:37:19:da:88:63:08:4a:17:5d:ac:25:ad:2f:32:
         2a:5e:c6:fb:13:1b:0c:d7:cc:38:de:33:30:de:2b:86:e1:e0:
         d1:7a:4c:78:7a:2e:33:bd:f0:15:68:47:07:80:b9:9b:05:8e:
         88:33:55:db:aa:29:43:68:9f:7f:e3:be:5b:c6:5f:0c:5f:d5:
         e7:a9:e6:d6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfI2fNeUhyBrGQe0eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk
Mjc1ZmI2ZTEtZWUzNi00ZTI1LTg2MTUtMmZjNGUwZGM3MDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7Icm5EADZjj3/Lp9p9DB+zoineXeYFyhwD1
sl7yB32h+NUg3pb5T3XM5gGH2CkzrER+6rJFAXi2KtdOmbyw4xMHrnWrJqMRV4M6
/lFfkMMuOLpJNRgfmZ+zl2RQu0P/MwzEE5C3A5ExuqB9RyB348kc/0ePoGdBwc0/
St+dt6c3LFFS1dseJdB8NplPyR8vGOOUK9fZArNLD0aUHeY8LBUXY2VNd0CowkDb
S9zD1ZzLE3bC8NvPwlktiOxGpG3ModxAtB3z9/piV8qIoOo0UuLBdSuBCyb9zEgJ
+27+Q2gtIkigjynCPv38mvHRFPtKb6mddsX5ZCENofPUIWBPoQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFFyf5DUSgp/EgEd/hm92B2uFyr3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWQ4NTgwYzUtMTE2ZC0z
YTBiLTk4MGEtZjViYTUxMTJjNGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBQaNyvUljMNfxAZZSnZOL28J6CSKF57c/NGiUxLDvJcx2mjY9GS9XC
a1gy5BqRX+0l7tAK9IVkTIOHKB5l93cJGHF9ciH3Yt9kh2xeG5aFzMwbI4bsfKxq
j+R5BH4F9FfS3qCEKqf5GUvzwGTLpCpySFvuhzFrNDpYfToz9uTZ9HvfhJcB+++x
l4mfqAk5dqlaGW60rXOu13J2dIPK+eHWDux7jFu7hvJ/4n0qm8fpPwWnHSIjam4O
NxnaiGMIShddrCWtLzIqXsb7ExsM18w43jMw3iuG4eDRekx4ei4zvfAVaEcHgLmb
BY6IM1XbqilDaJ9/475bxl8MX9XnqebW
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:18 2024 by rpki-client on console-ams.rpki-client.org