Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07d76533-0875-3237-86cd-c401a84692aa.roa
File:                     07d76533-0875-3237-86cd-c401a84692aa.roa (raw, json)
Hash identifier:          N2WUc+yCcmqDbS70Xk8E/mCb3sKkt3Z8rjFDSGJdHu4=
Subject key identifier:   00:A1:D7:61:CF:0E:B8:FB:67:1A:5E:E6:64:65:B3:34:54:93:9B:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A2519CA3EEB99BFD9EB60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07d76533-0875-3237-86cd-c401a84692aa.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     396603
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:25:19:ca:3e:eb:99:bf:d9:eb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=b2be5000-376a-4f9c-87db-8115785458c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7a:c7:4a:5d:ff:fd:46:8b:dd:11:7d:8e:37:
                    f7:99:4a:a2:ac:78:9d:62:ad:c9:bf:db:2d:39:a1:
                    85:cc:4d:27:37:24:6a:b7:87:ab:37:72:07:7a:84:
                    10:5d:34:24:6b:bc:0e:42:1f:77:67:30:e4:aa:67:
                    e8:a9:51:65:88:88:9b:e9:45:c6:48:f4:4b:77:b1:
                    f8:dc:d9:f8:82:a4:26:ce:e7:99:1a:bc:4d:31:e0:
                    25:c6:72:fa:82:5a:dd:ba:da:c8:49:a4:26:3a:aa:
                    6b:1e:63:e4:5e:b4:44:4f:74:48:10:45:07:51:31:
                    19:72:32:cc:0a:c8:75:58:15:d1:b3:18:f3:fe:db:
                    24:3d:41:70:c5:71:2d:49:e3:6f:9d:02:9e:57:b4:
                    bc:06:a1:35:87:ea:d9:2a:d2:e0:ca:f6:85:7c:ab:
                    b5:cc:cb:f0:1c:ac:5f:e3:bc:a4:06:33:ed:85:06:
                    8d:90:10:87:3d:48:11:e0:5d:86:2e:96:5d:fd:aa:
                    a1:8f:2b:5b:aa:da:8d:98:1a:75:df:bd:20:b7:7f:
                    57:3b:b9:a7:e0:88:25:05:41:49:00:ff:ef:ea:0f:
                    90:25:91:a3:d3:57:f3:58:85:ba:65:48:9b:49:5d:
                    10:e8:a9:ea:af:b1:5f:aa:f8:82:c1:ca:58:7d:07:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A1:D7:61:CF:0E:B8:FB:67:1A:5E:E6:64:65:B3:34:54:93:9B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07d76533-0875-3237-86cd-c401a84692aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:5e:80:2b:26:8e:f4:32:a6:f7:9b:43:bf:01:d3:b5:61:
         0b:97:9d:2a:e6:78:75:de:78:45:cf:a3:2a:36:1e:d6:9e:2f:
         3d:07:6d:fa:a9:b1:16:9e:09:1f:37:3d:44:5c:c0:fe:65:4c:
         f1:2e:1a:ad:c6:c4:f4:d8:2a:b3:c6:dd:6e:aa:db:83:ed:16:
         13:a4:77:67:22:c3:e7:80:15:be:75:3c:19:11:87:46:01:61:
         52:3a:f3:dc:8b:48:31:78:f9:d5:24:dc:80:03:00:23:c4:c4:
         a2:fb:71:f4:a6:1e:69:ac:bb:0d:a6:96:2b:bc:b5:04:dc:3e:
         0b:81:38:11:87:d4:ec:e7:f9:0b:9a:b8:cc:16:66:5e:10:1d:
         52:38:75:c7:87:79:f6:1b:c0:72:54:7a:ff:4b:78:41:a9:c2:
         1d:8a:4a:13:66:bc:bd:97:2c:22:83:c1:05:e2:b3:5b:65:7b:
         8a:34:e7:bf:d6:00:89:6f:c1:f9:cc:00:f6:f1:f8:6a:1a:cd:
         54:87:d3:e9:99:2d:ee:62:b8:fe:85:2d:20:5b:1d:76:c6:3a:
         b7:d8:c2:05:d0:c3:ed:13:88:d0:59:a6:fc:77:24:22:f6:2b:
         06:1f:90:55:73:14:4c:b5:f9:a7:ab:f1:f8:c5:7e:8b:bb:71:
         87:67:25:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:22 2024 by rpki-client on console-fra.rpki-client.org