Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/049d8085-8aac-3c61-aefd-0c7664661080.roa
File:                     049d8085-8aac-3c61-aefd-0c7664661080.roa (raw, json)
Hash identifier:          aCJfvH/hDx98GFylWrTjdz7Z1kS0F9TZ0SGhbseew3A=
Subject key identifier:   1E:3B:F3:12:44:C5:1C:09:57:D3:94:EA:83:A0:44:CB:C2:60:F7:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D14CCC22A9C26346507740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/049d8085-8aac-3c61-aefd-0c7664661080.roa
Signing time:             Thu 24 Oct 2024 12:50:02 +0000
ROA not before:           Thu 24 Oct 2024 12:50:02 +0000
ROA not after:            Wed 22 Jan 2025 13:50:02 +0000
asID:                     397205
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:4c:cc:22:a9:c2:63:46:50:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:50:02 2024 GMT
            Not After : Jan 22 13:50:02 2025 GMT
        Subject: CN=28d0bdf5-2d36-40f4-a5ed-99c9f8e7f3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:45:6b:6a:13:3c:7e:30:4c:ad:d2:4f:77:c1:
                    e2:5d:f8:09:f5:db:e7:95:7d:d4:e3:4d:9c:a2:7e:
                    17:6c:3b:fb:2c:18:ec:1a:13:01:62:e9:1c:69:06:
                    36:c8:0b:22:2b:1d:d0:a9:3a:71:68:fe:36:eb:03:
                    5d:73:96:9a:17:94:f6:2e:14:cb:2f:c2:0a:0f:67:
                    3b:f3:16:50:14:85:d8:26:db:ed:a3:a6:24:3b:1b:
                    13:0a:18:a5:9c:b6:d2:bc:fd:fa:fb:23:c8:ca:06:
                    0c:46:e9:b5:24:e3:3f:ed:1e:33:84:c8:3b:fe:7e:
                    d9:a2:70:1c:8d:0b:90:16:88:91:05:e4:d7:30:15:
                    1b:5c:0b:88:b8:55:d2:24:1e:98:23:cd:6b:50:80:
                    ad:89:fc:34:99:87:0d:3e:5a:7d:0e:fa:67:cb:45:
                    22:b2:10:37:6f:4d:a2:a9:fb:88:09:94:37:1a:32:
                    c3:23:6c:f1:01:5d:cd:d9:c4:58:46:d8:46:30:97:
                    79:ce:16:24:37:20:47:72:f1:8f:bb:d7:13:be:97:
                    2d:81:97:1b:7c:ad:41:f5:52:17:69:ac:fb:74:c8:
                    ad:88:b4:d8:b6:f0:8e:9f:20:b3:23:48:cf:8f:e2:
                    4a:79:fa:98:da:20:e7:11:1a:38:6c:6d:7e:69:d3:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3B:F3:12:44:C5:1C:09:57:D3:94:EA:83:A0:44:CB:C2:60:F7:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/049d8085-8aac-3c61-aefd-0c7664661080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:35:a7:9c:ac:72:b0:0b:b4:c7:48:c4:4d:b7:fb:92:d2:4e:
         5f:7e:a8:fd:97:a7:ed:4d:47:7d:41:59:c1:8a:b7:23:0d:68:
         b7:3e:33:6e:ab:08:f7:9f:f9:b7:c1:21:5f:a1:84:5a:3b:dc:
         a7:4b:2d:a6:55:5b:a6:88:e4:7b:48:70:ef:08:17:0b:44:eb:
         1a:ef:75:36:d0:52:9b:68:5b:00:19:48:9c:4a:f9:24:00:c6:
         99:31:06:69:56:c3:bd:06:dd:4c:c4:ff:a0:14:9d:15:91:4e:
         2f:b1:2d:87:6e:ac:54:60:b1:42:18:3a:c6:8e:84:d5:6a:79:
         4c:63:55:80:b5:95:8a:98:8f:d9:33:cc:60:73:3d:1a:27:ec:
         7f:65:d8:0c:4a:d0:1e:b5:d7:82:94:e6:ac:44:c5:be:58:4b:
         43:36:46:1a:c8:1d:5d:90:88:db:db:46:04:95:c7:19:f8:f6:
         b8:4c:c8:af:24:35:2b:23:fc:64:2d:b7:6c:70:c8:0f:48:05:
         cb:2e:85:8a:2b:8c:95:9c:c0:59:6c:d5:7e:fd:61:b3:a6:cb:
         cb:70:1e:a7:f4:fc:95:14:3c:7c:83:ad:21:49:e8:88:f0:20:
         d8:84:f4:ec:5d:b0:38:6c:43:20:f6:01:6c:de:5a:73:ac:28:
         f8:3c:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:22 2024 by rpki-client on console-fra.rpki-client.org