Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f34a2ce0-16a7-3a24-95ed-a6addd6d85df.roa
File:                     f34a2ce0-16a7-3a24-95ed-a6addd6d85df.roa (raw, json)
Hash identifier:          9Asr7raEQnA8Rgs+Ee1fN8ejGHhKpwlbSni7eAK/o1o=
Subject key identifier:   3E:54:6D:90:38:C2:FD:AA:39:A4:FD:98:32:45:F2:B7:73:66:9B:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F6FC3A8CA38FD0F07360
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f34a2ce0-16a7-3a24-95ed-a6addd6d85df.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     211369
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f6:fc:3a:8c:a3:8f:d0:f0:73:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=8555d046-4752-473d-b741-f0cca9973aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f2:68:54:be:36:81:95:a7:46:7b:30:03:79:
                    de:fa:46:54:33:3a:a1:cb:3e:a2:82:87:3f:d9:5a:
                    04:cf:64:10:2e:08:f8:6b:81:ea:73:8e:3f:be:ee:
                    51:7d:78:be:1a:dd:ec:90:fc:06:b8:11:f4:6f:e7:
                    e5:0b:bf:3a:27:e1:f2:09:64:02:f9:5e:c3:1d:ee:
                    d4:14:b3:54:d6:84:76:5a:c4:f6:45:8d:10:e4:4b:
                    8c:b2:11:4c:0e:bf:01:c0:0c:58:79:71:f3:c8:87:
                    f4:f8:df:09:1a:e9:0e:ab:32:d2:86:fd:63:65:8a:
                    eb:e7:cd:64:65:f6:74:e2:47:10:b1:09:31:29:ae:
                    03:97:5d:4d:a8:ac:90:2a:e1:ae:bc:ad:2c:7e:43:
                    6b:0a:36:0c:f2:ff:5b:22:ea:22:ad:bb:08:16:27:
                    8b:7f:64:91:42:55:c4:e6:06:cb:4f:6c:31:69:5e:
                    41:4d:25:e5:49:a8:92:5c:34:9a:ff:5a:27:44:fb:
                    c4:21:e8:50:94:1e:d4:29:94:61:1b:89:f0:2a:94:
                    ad:aa:ca:a6:7b:62:b2:9e:1c:da:22:c1:a4:05:02:
                    51:df:10:f6:5e:59:96:31:f5:7b:2c:b9:55:76:45:
                    02:09:a4:1f:b0:41:ed:c2:8f:e2:2a:9c:59:2a:2e:
                    f4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:54:6D:90:38:C2:FD:AA:39:A4:FD:98:32:45:F2:B7:73:66:9B:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f34a2ce0-16a7-3a24-95ed-a6addd6d85df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:76:1d:6b:94:d2:ed:18:64:e2:f7:03:cd:5a:31:b7:d3:22:
         7f:20:9d:1e:e2:8a:d7:53:d3:c1:44:aa:56:01:09:a4:92:16:
         d8:47:43:78:4e:c6:62:28:d4:d8:c6:6e:0b:d7:ca:03:a0:32:
         b0:4b:00:78:8f:5e:90:0b:0f:9f:35:c3:59:d3:07:08:9d:2e:
         1e:86:56:ac:f3:93:4b:22:82:e6:d1:45:c1:be:5e:01:1a:2a:
         a2:7f:b8:1d:c4:44:ef:52:17:2f:9f:1e:65:32:9e:44:ae:3b:
         1f:ab:d1:dc:05:c0:cb:e9:b9:4d:30:a6:4a:04:f4:46:fb:9e:
         81:35:72:e7:e9:15:ce:5c:24:c6:33:48:02:1d:76:6b:ca:b4:
         ec:14:11:b1:74:cb:73:8f:ae:5e:6b:e2:a7:31:38:61:fa:1b:
         f0:f9:37:15:31:d5:28:1e:d2:29:08:5e:bb:89:44:1f:45:f5:
         50:a9:72:43:8c:b7:91:83:79:90:ec:41:e8:26:db:7e:08:af:
         38:d3:84:a2:b5:40:b7:16:38:ef:02:a8:e1:ad:60:ac:c4:3a:
         ae:89:7f:02:2e:c0:48:a6:12:51:6e:67:8a:83:5e:cd:8a:8b:
         b9:8a:1c:68:02:31:01:99:dc:67:dd:bb:cb:33:72:8d:4c:98:
         c1:88:f5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:52 2024 by rpki-client on console-fra.rpki-client.org