Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c293b46-3747-3aab-beab-084da7ebf02b.roa
File:                     0c293b46-3747-3aab-beab-084da7ebf02b.roa (raw, json)
Hash identifier:          LyAPyk5gWKUp48JHWVnExkioWSD9h4V0qYtKNExSjaw=
Subject key identifier:   CE:25:4C:11:92:C4:E7:0D:F7:95:55:07:1F:6D:24:53:AB:5D:AB:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858477EBCC0475FB191E3F6B10500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c293b46-3747-3aab-beab-084da7ebf02b.roa
Signing time:             Thu 10 Oct 2024 12:52:07 +0000
ROA not before:           Thu 10 Oct 2024 12:52:07 +0000
ROA not after:            Wed 08 Jan 2025 13:52:07 +0000
asID:                     10515
IP address blocks:        192.42.176.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:bc:c0:47:5f:b1:91:e3:f6:b1:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 12:52:07 2024 GMT
            Not After : Jan  8 13:52:07 2025 GMT
        Subject: CN=6fed8948-5c0c-4ef7-8c51-7b93f2e62a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d5:f7:bd:5c:b5:8a:b3:f6:2d:13:3d:2d:a7:
                    cb:47:8e:70:a6:63:1a:e0:19:c8:20:e4:03:f8:a5:
                    b1:29:9d:1d:8e:d3:93:cb:52:fd:4a:43:62:cd:99:
                    62:c7:db:27:a8:6b:2d:ac:44:2d:3f:77:77:32:5b:
                    93:74:d5:3b:ba:d6:f1:ec:e1:fe:70:4d:c2:9f:9d:
                    15:1c:f5:d0:1b:40:41:1b:7d:62:7f:aa:00:70:57:
                    f5:a5:3a:8c:0d:b7:08:b9:b3:3e:01:f8:38:6f:c8:
                    41:9b:e7:c8:8c:ab:57:4d:87:c4:9f:bb:65:67:16:
                    3e:23:13:0a:80:0a:1d:5e:ee:87:89:dd:53:1c:90:
                    99:5b:92:e0:0d:7f:6d:5c:cb:1b:6d:7c:ba:4d:46:
                    17:59:f2:0d:ba:e0:b1:b1:54:e8:ee:dd:9f:11:79:
                    c9:3e:ea:24:0f:a5:b8:87:61:e2:e5:95:13:22:5e:
                    b0:b6:ef:e2:23:9f:c9:a8:66:a2:cd:52:f6:69:88:
                    13:58:59:4c:d1:89:3a:0b:d1:e5:5d:56:a8:70:b5:
                    dc:1a:1c:39:78:b3:9f:4e:0c:94:d2:78:3a:63:18:
                    a1:0c:ad:5c:a9:5b:a1:20:3b:fc:64:50:56:57:e4:
                    40:ab:9b:01:0f:87:28:c9:5b:7c:35:da:a6:2a:67:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:25:4C:11:92:C4:E7:0D:F7:95:55:07:1F:6D:24:53:AB:5D:AB:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c293b46-3747-3aab-beab-084da7ebf02b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ea:23:a7:36:11:f4:5e:42:39:7a:e5:b4:36:f5:ce:35:5d:
         2d:7f:2a:70:c4:3d:e2:68:22:e6:c6:b3:cc:87:c3:f5:d3:4f:
         e0:a4:cc:84:8d:dc:b2:80:e7:e7:03:74:e8:ff:e9:83:ca:1d:
         5c:ad:f2:e1:00:20:3e:8f:90:7a:1e:fc:b1:c0:22:ff:8a:b9:
         cd:f7:28:ed:88:9f:39:7e:f5:f0:cd:cd:fc:ba:9d:32:d1:dd:
         74:c8:cf:95:ef:3e:91:d2:e9:a8:9a:b3:7f:f6:87:3a:d8:4c:
         a1:b3:a2:d3:06:47:8e:c0:75:42:41:3d:c3:33:6a:e1:87:ac:
         76:ab:df:3b:8d:63:a9:5d:f9:74:f2:6a:96:b2:38:b2:c2:3d:
         b3:c2:59:39:34:28:7b:42:8c:1c:97:07:02:4f:0c:e6:6c:f9:
         89:ea:b6:13:04:0c:93:e9:dd:cb:7a:27:16:4b:98:a9:40:9d:
         f4:fb:8d:45:f5:13:65:a9:9d:f6:4d:b3:d9:40:fa:d1:7e:1f:
         0a:d2:8b:3a:05:17:ac:a2:8c:58:a6:2b:37:6d:32:0d:0b:65:
         f9:cb:8f:e8:c5:6a:6d:ef:e4:4f:0f:c5:54:ba:a1:f0:48:f6:
         1f:97:0c:9b:5b:38:65:cd:ec:f6:02:af:fe:81:74:c5:80:35:
         37:83:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:22 2024 by rpki-client on console-fra.rpki-client.org