Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e60b25f-d585-392f-8d3e-a327ca31525a.roa
File:                     0e60b25f-d585-392f-8d3e-a327ca31525a.roa (raw, json)
Hash identifier:          nUCHe4J9bfUv+A/rwqw1i4yEpk4CxKNz5mV50sax69Y=
Subject key identifier:   D5:BC:53:2B:33:CD:98:55:07:95:11:8F:2E:7E:57:7B:0B:00:91:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858477EBCC0A5AA967253069C4E30
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e60b25f-d585-392f-8d3e-a327ca31525a.roa
Signing time:             Thu 10 Oct 2024 12:52:07 +0000
ROA not before:           Thu 10 Oct 2024 12:52:07 +0000
ROA not after:            Wed 08 Jan 2025 13:52:07 +0000
asID:                     396572
IP address blocks:        192.42.176.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:bc:c0:a5:aa:96:72:53:06:9c:4e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 12:52:07 2024 GMT
            Not After : Jan  8 13:52:07 2025 GMT
        Subject: CN=8722d5dd-d372-4d74-9249-8feec83bb5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:52:30:c0:8f:57:6a:a8:d4:d6:5d:ca:db:6c:
                    13:a9:fd:07:32:d7:c8:cc:5d:f1:03:12:28:8c:7e:
                    5c:03:4e:fc:42:23:53:de:91:e8:2e:fa:40:26:f8:
                    be:84:d2:a4:e8:e9:4f:b3:da:8f:d8:dd:72:8b:36:
                    ae:44:34:fa:c6:2f:76:ec:88:e9:83:32:01:29:25:
                    f8:8f:50:86:87:ed:61:c6:05:55:dc:b8:71:7f:f0:
                    8c:0f:85:91:28:3c:00:42:da:ab:3c:98:3e:e2:4d:
                    74:ac:16:7b:8f:e1:31:7e:5a:9b:9e:82:84:7f:fa:
                    7f:ce:b3:44:59:99:53:f4:35:28:b1:98:16:99:82:
                    8e:66:42:e2:37:0a:07:2b:66:a7:02:b9:ef:10:9e:
                    02:10:5f:73:e6:88:4f:80:26:80:74:c9:4c:d0:d1:
                    34:d6:09:ba:84:d2:5e:2a:eb:e7:85:c8:c9:2c:bc:
                    d4:4e:4c:48:ce:c8:89:b4:b7:2c:8d:46:2f:c9:70:
                    fa:dc:dd:97:98:81:76:b7:5e:20:19:71:b5:3d:ec:
                    b3:73:50:76:88:8d:20:54:f0:51:fe:7b:65:60:88:
                    a1:61:d1:a7:e5:4a:6f:24:be:db:58:2a:1f:50:95:
                    28:b7:9e:a8:34:22:12:ea:2b:47:9d:68:8f:5c:11:
                    fe:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BC:53:2B:33:CD:98:55:07:95:11:8F:2E:7E:57:7B:0B:00:91:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e60b25f-d585-392f-8d3e-a327ca31525a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:97:5c:84:fd:bb:18:a4:22:a0:64:0a:43:04:63:d0:ca:e1:
         f6:d7:05:7c:51:6d:9f:21:aa:eb:f7:8d:f0:e7:0d:07:ff:22:
         b2:ea:ff:74:c3:1d:a1:00:0a:52:6b:65:59:83:87:3f:c9:52:
         a4:e5:97:05:6c:b7:fa:b6:2e:65:08:ac:13:65:7b:09:26:b6:
         8b:a5:80:86:6a:65:95:50:3f:d1:48:40:b6:b7:39:7e:e7:a8:
         41:32:61:ce:95:8d:6c:db:bf:db:36:8d:df:a6:df:39:1c:cf:
         14:aa:fa:91:b6:01:d4:3c:d9:e2:02:3e:dc:c7:8a:29:1d:c7:
         7f:73:41:37:23:ec:fe:52:aa:77:38:7f:d2:7f:83:85:e7:e1:
         c5:3f:8c:00:65:a6:a5:58:c1:fc:d5:b6:ea:8e:ed:cb:5a:bf:
         63:f9:94:9e:2f:22:aa:50:38:91:a9:4e:5a:3e:98:08:4d:2c:
         60:d3:2e:3c:63:eb:fb:44:37:5c:d2:3e:f3:b8:22:bd:b7:b9:
         0f:d9:17:2d:9f:85:c9:dc:71:c1:7c:45:96:4e:9c:4f:f6:10:
         62:b0:1f:bd:43:c2:71:c5:7f:00:a1:47:d9:d4:f9:2a:f8:5c:
         5c:97:24:b2:cb:a9:d6:22:7e:21:9b:92:a0:39:58:07:92:dd:
         b5:a1:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:57 2024 by rpki-client on console-ams.rpki-client.org