Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89f4704-3804-3d4c-ab7e-73dacece75fe.roa
File:                     f89f4704-3804-3d4c-ab7e-73dacece75fe.roa (raw, json)
Hash identifier:          uhaRIUmAV6XQ7sN2yWNKXwLLwjXlxjSHIvjH92ay97w=
Subject key identifier:   51:AD:82:E4:20:9C:CF:80:43:D2:2B:DA:60:E3:C3:25:EB:AD:A2:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F7CF19D4618007625B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89f4704-3804-3d4c-ab7e-73dacece75fe.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396550
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f7:cf:19:d4:61:80:07:62:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=0db0b0b7-4c31-41e1-bb54-65e10cb8a07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:93:71:c2:31:93:ca:d8:6d:f5:75:1d:3a:79:
                    92:08:1e:a3:70:e8:be:9c:99:c2:65:96:d6:e2:b3:
                    b6:ed:24:63:3e:04:59:26:c0:e3:0d:78:a6:dd:2c:
                    63:86:bc:d8:54:2f:aa:e5:52:2a:1b:b0:a0:ab:db:
                    c9:02:d0:79:6d:6e:17:83:be:2d:1f:6b:69:02:1f:
                    8b:0e:85:77:e4:c4:99:04:16:7f:f8:df:50:88:34:
                    40:80:18:d5:ea:37:51:fa:f3:ce:04:5f:55:36:db:
                    da:71:a6:3c:87:40:7c:a5:df:f9:5e:2e:59:31:66:
                    1c:13:6d:c6:d9:12:1a:0a:6b:07:34:b5:62:c8:e8:
                    db:2e:63:9c:47:66:14:be:e6:46:2c:11:0b:79:47:
                    1f:a7:3f:b7:30:7f:91:e0:5c:e4:14:33:29:98:04:
                    39:96:ab:d0:21:7e:18:df:6f:77:49:14:19:88:c9:
                    a5:09:4e:5d:dc:dc:ad:ee:2f:44:40:9a:6d:c5:95:
                    19:25:25:f7:7e:e9:ee:1c:de:c7:4b:b8:44:f0:93:
                    93:72:d1:17:84:5f:07:28:fc:72:be:a4:6b:e3:5f:
                    2f:22:b9:d2:a8:79:b7:bf:39:94:fd:95:41:72:b0:
                    ab:bb:c4:14:18:93:db:cd:4d:7a:0f:5c:f4:c2:15:
                    e2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AD:82:E4:20:9C:CF:80:43:D2:2B:DA:60:E3:C3:25:EB:AD:A2:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89f4704-3804-3d4c-ab7e-73dacece75fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:93:8f:24:45:52:96:17:f8:42:e6:5f:2a:c2:d1:c1:20:a9:
         e2:31:98:d8:7d:51:d0:60:a3:6c:42:da:ff:5c:2b:d6:42:c5:
         e9:23:ff:95:a9:79:6c:12:09:79:34:6c:69:b5:00:eb:78:d0:
         c8:bc:56:49:7b:db:40:16:aa:88:28:e6:15:60:07:38:91:a8:
         7a:ca:b7:6e:1e:c0:68:77:b0:e4:25:27:e2:bc:14:c7:66:d1:
         c6:f5:87:88:60:81:33:12:1d:03:bd:30:d7:63:a2:d4:ff:1e:
         40:4a:42:ca:c3:36:97:cf:57:ba:ef:87:6b:40:c5:be:6f:5c:
         1a:4c:ad:87:2a:fb:5b:fd:3a:eb:43:a3:88:e8:cd:20:48:a6:
         96:d9:3d:c5:e9:98:0e:0a:d9:13:ea:d4:a5:ea:2a:78:c3:eb:
         7c:59:e8:2f:c0:ea:ec:6a:91:4e:5f:34:8e:21:57:18:5f:4d:
         e2:37:89:8c:6c:98:29:6f:ff:12:45:d4:7b:c1:74:36:fd:a8:
         77:8c:e9:44:c7:48:0b:c3:d8:de:dd:91:cf:5c:44:80:ce:b0:
         c7:f2:9c:a8:81:6f:6f:ed:5f:6d:bf:63:14:e5:5b:dc:e0:2e:
         69:5b:74:a5:b5:61:e2:5f:e9:d2:75:67:43:4c:06:3c:ec:20:
         62:78:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:19 2024 by rpki-client on console-ams.rpki-client.org