Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c7380ba-5513-3ea9-ab49-5b6875a6f144.roa
File:                     0c7380ba-5513-3ea9-ab49-5b6875a6f144.roa (raw, json)
Hash identifier:          z79uVBHYXAST1NFK0gNO2W9s0pT+bjLe9u4qnwAnJ/M=
Subject key identifier:   F0:A5:21:AB:EC:B4:65:4B:9C:F6:1F:03:9D:D1:AE:E7:7F:2A:11:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D14D047D9DCB1F5D70EDF8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c7380ba-5513-3ea9-ab49-5b6875a6f144.roa
Signing time:             Thu 24 Oct 2024 12:50:03 +0000
ROA not before:           Thu 24 Oct 2024 12:50:03 +0000
ROA not after:            Wed 22 Jan 2025 13:50:03 +0000
asID:                     396549
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:4d:04:7d:9d:cb:1f:5d:70:ed:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:50:03 2024 GMT
            Not After : Jan 22 13:50:03 2025 GMT
        Subject: CN=9dfed908-8fd3-4b20-9909-87ad729ddc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4a:af:fd:62:08:03:ed:d4:56:e6:06:7d:d6:
                    2d:4c:75:c0:c4:b9:80:3f:1b:5b:26:66:f9:73:f6:
                    40:08:81:39:a7:ae:22:52:9e:ba:da:f0:bd:65:df:
                    85:64:2a:62:91:4b:bd:71:ed:96:2e:e3:83:c3:0b:
                    f6:c9:e4:37:45:9f:d8:19:6a:a6:36:78:39:bf:05:
                    af:fd:53:1a:dc:96:14:c5:6f:72:0f:8b:e0:ea:76:
                    5b:4f:94:88:f3:6d:f0:79:1a:31:0a:a7:91:79:bb:
                    8b:c3:d7:e3:bd:84:81:cf:b4:76:6a:05:69:2b:dc:
                    07:14:fe:41:5c:69:44:a3:48:71:41:cd:a6:b7:47:
                    36:71:02:4e:06:f5:3b:2d:91:62:a6:27:d3:f0:71:
                    56:40:6f:69:2d:56:83:93:8c:c9:44:97:46:fa:37:
                    5c:f8:58:a4:9c:5f:45:3f:9b:90:9b:69:52:d0:7f:
                    f8:69:2b:42:7b:90:b2:5a:1d:76:1a:d7:72:3a:37:
                    47:cb:5f:e8:ea:de:fc:ed:65:34:8d:a5:de:b5:3f:
                    e2:85:90:f7:e4:30:15:73:e9:f9:1f:10:ce:92:bb:
                    11:eb:fe:83:c1:45:e5:d7:94:2e:42:f2:81:e3:4c:
                    5e:68:0f:af:a9:fd:fc:94:71:86:2b:27:fb:39:19:
                    2a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A5:21:AB:EC:B4:65:4B:9C:F6:1F:03:9D:D1:AE:E7:7F:2A:11:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c7380ba-5513-3ea9-ab49-5b6875a6f144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a2:59:fe:16:91:af:1d:33:eb:f2:ea:9c:f5:52:32:19:2d:
         cd:44:08:aa:1b:6c:0f:50:73:a6:05:06:6b:fd:b4:7b:37:93:
         80:60:0d:f6:d4:3f:1e:3d:42:48:8b:50:c7:19:52:14:51:9e:
         b8:b5:68:c1:b5:60:33:a0:fa:2e:08:49:a8:f9:d8:be:e0:8a:
         cd:9d:3f:8b:37:3f:67:39:3a:cc:65:92:38:54:0b:01:71:cc:
         95:31:e6:ea:6d:18:38:76:1f:dc:e1:2d:a2:3e:98:f0:84:5a:
         df:9f:02:d8:f7:81:35:65:61:9e:6c:92:3f:5a:df:bc:e3:bc:
         08:de:00:4c:67:14:9d:2d:17:e1:37:52:f7:64:95:9d:ee:43:
         1f:34:87:8e:b9:ef:a2:e8:e9:cb:6d:bc:d4:f6:8d:eb:4c:7e:
         4c:3d:c5:3d:6b:61:76:fb:c9:8a:20:00:66:1a:43:f2:7b:a0:
         8a:c9:77:32:07:f1:f2:5b:cc:6d:e2:93:22:8a:5f:2f:31:3e:
         24:79:f3:45:27:97:cb:34:94:91:b8:99:a9:a0:42:b9:79:4c:
         a2:22:e1:3c:44:80:7d:1e:0a:70:1d:33:cf:dc:61:54:25:ac:
         81:fd:f7:df:cd:82:05:f9:b5:83:04:05:72:6f:90:69:85:1e:
         e1:75:bb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:57 2024 by rpki-client on console-ams.rpki-client.org