Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe977fcd-1017-3400-b914-137d7017d477.roa
File:                     fe977fcd-1017-3400-b914-137d7017d477.roa (raw, json)
Hash identifier:          quCv4T1G0FCEn4Rmd0ASmPE0VOvHQqKjN4cu6CjSgMs=
Subject key identifier:   64:B2:74:95:56:23:22:9D:18:BF:62:13:87:45:AC:83:58:13:D8:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847C8D9F5E9EB20953D5569BD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe977fcd-1017-3400-b914-137d7017d477.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396599
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:f5:e9:eb:20:95:3d:55:69:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=4a016371-831f-4d45-bcd4-73ec64f21f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:d0:a6:89:d0:32:63:61:fc:d4:7c:27:14:
                    24:f7:7e:2c:c1:be:8a:83:6b:8e:f0:4c:55:74:4f:
                    8b:b4:b5:99:e6:c7:67:25:79:c2:8c:b7:b7:2a:02:
                    3e:08:05:be:e8:e0:a2:cb:ad:9a:f7:c3:98:a8:f9:
                    58:1e:e4:3b:e0:8f:75:34:6d:a6:fd:a7:a6:5c:37:
                    ea:37:c5:2e:8e:88:3f:87:cd:34:42:af:de:31:73:
                    1a:c2:81:92:f7:43:6a:f5:ec:f0:e5:d8:3f:fe:84:
                    3e:56:99:56:ee:79:b8:7e:1c:85:a4:2b:2d:0f:c8:
                    9f:ca:e5:1f:6a:7c:2f:40:19:58:d2:a0:41:8c:17:
                    3f:3d:96:47:02:0a:00:fa:de:89:36:a8:a0:a3:15:
                    c5:ed:63:64:bf:82:9a:26:3c:43:4b:f7:8a:d2:8a:
                    88:54:f6:c4:a0:4b:73:fc:ca:9c:1d:5b:e9:bf:10:
                    3b:ad:35:d1:c5:b0:57:10:51:af:87:a1:0a:c4:b3:
                    0b:92:c3:6f:42:24:f5:4e:f1:db:47:9a:fa:22:ea:
                    e7:9c:de:b1:40:b8:ad:c7:7b:a3:02:09:05:b7:f7:
                    1f:de:91:70:e4:0b:0f:ac:7f:bc:47:24:46:1d:ff:
                    69:21:59:ad:58:82:e8:67:5a:ef:47:ce:89:77:f2:
                    5f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B2:74:95:56:23:22:9D:18:BF:62:13:87:45:AC:83:58:13:D8:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe977fcd-1017-3400-b914-137d7017d477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:39:4c:e0:52:80:da:3b:9b:bc:e5:fb:5a:f6:9a:35:5a:5d:
         ed:3c:f4:a6:90:ed:8a:44:09:17:a5:79:45:c4:58:15:e9:3f:
         04:e3:6c:c8:4e:b1:f0:d2:66:e5:75:3a:1d:bc:49:8b:ba:b0:
         69:da:9d:52:dd:f2:30:3d:a3:47:d7:b7:17:ed:b9:3c:14:d9:
         3b:de:31:b7:0d:30:71:59:d5:11:b2:1e:37:74:07:f8:c1:c6:
         ef:3e:92:fc:da:19:36:6e:1c:e6:02:1b:21:4b:46:30:88:1b:
         97:b4:c4:c8:bb:d0:eb:59:95:89:07:c7:ae:10:20:c6:85:3d:
         7c:9f:a4:1a:95:3d:f5:07:66:b3:64:11:cc:b6:83:9d:ed:9d:
         f4:46:55:76:11:1b:59:5f:ee:1f:d6:4e:c8:1f:84:cd:d2:57:
         6b:2b:6e:b6:47:40:e4:fc:c7:78:ae:c1:9c:46:b5:60:3b:cf:
         a4:12:4c:e8:17:b4:65:f0:63:3b:e3:b1:db:14:e4:c1:4f:69:
         f6:b6:6d:f9:60:7f:ff:08:9e:9e:60:5d:4a:67:eb:e0:4b:c5:
         ab:83:10:0a:2c:2f:c6:09:c8:fb:79:37:50:54:3e:80:2f:a6:
         5c:b2:b2:3a:05:e1:d4:e4:c1:a1:a2:2c:35:cf:8f:94:21:9b:
         8b:f8:d8:6f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfI2fXp6yCVPVVpvUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk
NGEwMTYzNzEtODMxZi00ZDQ1LWJjZDQtNzNlYzY0ZjIxZjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYDQponQMmNh/NR8JxQk934swb6Kg2uO8ExV
dE+LtLWZ5sdnJXnCjLe3KgI+CAW+6OCiy62a98OYqPlYHuQ74I91NG2m/aemXDfq
N8Uujog/h800Qq/eMXMawoGS90Nq9ezw5dg//oQ+VplW7nm4fhyFpCstD8ifyuUf
anwvQBlY0qBBjBc/PZZHAgoA+t6JNqigoxXF7WNkv4KaJjxDS/eK0oqIVPbEoEtz
/MqcHVvpvxA7rTXRxbBXEFGvh6EKxLMLksNvQiT1TvHbR5r6IurnnN6xQLitx3uj
AgkFt/cf3pFw5AsPrH+8RyRGHf9pIVmtWILoZ1rvR86Jd/JfmwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGSydJVWIyKdGL9iE4dFrINYE9ihMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmU5NzdmY2QtMTAxNy0z
NDAwLWI5MTQtMTM3ZDcwMTdkNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAyOUzgUoDaO5u85fta9po1Wl3tPPSmkO2KRAkXpXlFxFgV6T8E42zI
TrHw0mbldTodvEmLurBp2p1S3fIwPaNH17cX7bk8FNk73jG3DTBxWdURsh43dAf4
wcbvPpL82hk2bhzmAhshS0YwiBuXtMTIu9DrWZWJB8euECDGhT18n6QalT31B2az
ZBHMtoOd7Z30RlV2ERtZX+4f1k7IH4TN0ldrK262R0Dk/Md4rsGcRrVgO8+kEkzo
F7Rl8GM747HbFOTBT2n2tm35YH//CJ6eYF1KZ+vgS8WrgxAKLC/GCcj7eTdQVD6A
L6ZcsrI6BeHU5MGhoiw1z4+UIZuL+Nhv
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:54 2024 by rpki-client on console-fra.rpki-client.org