Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa
File:                     0ece9ded-a213-3cef-a817-7375a4dacf4b.roa (raw, json)
Hash identifier:          FKZf5Nlyt+Ea6Eur8I6yXNxRSGJFBNZd/jei+wMe4LA=
Subject key identifier:   57:58:92:DD:A3:DC:C5:64:2E:3D:71:03:C4:C5:92:38:1A:C3:EE:F6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B98716B8C157ACE5C6B05100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa
Signing time:             Thu 31 Oct 2024 14:16:41 +0000
ROA not before:           Thu 31 Oct 2024 14:16:41 +0000
ROA not after:            Wed 29 Jan 2025 15:16:41 +0000
asID:                     396578
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:87:16:b8:c1:57:ac:e5:c6:b0:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 31 14:16:41 2024 GMT
            Not After : Jan 29 15:16:41 2025 GMT
        Subject: CN=aff081df-2acf-4063-acc8-4b4967156718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4e:11:d1:1c:66:b0:9c:0a:d0:ff:b4:16:c5:
                    41:b6:53:eb:0b:39:27:37:43:cc:66:1f:f5:42:0a:
                    c0:15:34:73:b0:f4:12:b3:ee:ec:eb:06:e9:fc:e3:
                    43:79:24:3e:ca:e0:0c:de:dc:ce:7d:a8:7b:b3:20:
                    d7:48:9c:ae:06:3c:44:50:93:64:e2:17:0a:35:f0:
                    46:97:78:27:7b:12:79:6e:85:59:01:23:1c:b8:db:
                    8a:03:a0:66:7e:a9:4f:7b:1f:df:c9:7a:39:fc:aa:
                    77:15:3f:e9:d9:5a:f5:fd:d5:ff:29:dd:22:fb:a6:
                    a4:8c:7f:0a:20:e0:41:06:5e:70:0a:45:16:63:bb:
                    8e:7e:9d:0e:1f:fb:f4:4d:43:5c:e0:39:f3:23:78:
                    f3:7f:97:fd:97:1b:2a:4b:00:a2:af:4d:20:bd:8b:
                    b2:37:28:9f:75:6a:dd:55:bd:3a:dc:d0:db:f6:26:
                    50:88:bb:ff:3c:31:b2:26:f8:6a:9e:7c:db:99:88:
                    77:2e:ae:b8:d2:e5:89:4a:fd:16:a5:6f:c1:5c:d8:
                    1c:de:dc:94:ba:10:53:8a:7e:c9:14:53:1b:49:b5:
                    9f:f8:b7:4c:fb:a6:c2:c8:53:24:5b:b9:07:12:d5:
                    3a:8c:ea:d1:ee:37:43:9b:03:60:51:9a:ad:ec:c2:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:58:92:DD:A3:DC:C5:64:2E:3D:71:03:C4:C5:92:38:1A:C3:EE:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c5:ce:52:38:2e:5a:c0:ab:14:78:15:77:8f:26:52:f0:16:
         58:ef:80:89:86:99:53:4f:cb:58:1f:72:6a:1a:38:ae:82:53:
         32:33:b0:14:29:4f:08:49:50:01:aa:66:a0:4b:85:a5:14:17:
         a0:f4:f2:14:dc:7e:85:3c:fc:91:5a:3f:bd:c6:0b:e1:4a:3e:
         2d:f5:25:5a:45:3f:96:44:4b:9f:e3:7d:bb:78:40:5e:29:a4:
         a6:64:e6:02:28:c4:25:b6:e8:66:38:2c:6b:c7:86:d3:26:b4:
         df:bc:b4:fb:6d:28:33:ff:6a:9c:30:26:9e:e2:7e:70:fd:c5:
         c0:8e:79:b1:cd:97:b3:ea:0e:89:6a:bd:0c:f0:16:fb:23:af:
         de:e6:03:4d:99:7f:92:65:8c:c4:7b:54:c9:c2:64:8c:64:ad:
         f0:ae:57:1e:e7:f3:ad:1f:e6:c0:bd:75:ad:50:2b:87:26:bd:
         c1:59:b0:56:7a:6f:90:ee:f1:6b:aa:96:3d:dd:68:8b:14:a0:
         a9:25:1d:ac:67:76:df:ea:a8:a8:f2:0c:44:9f:44:c9:d9:5b:
         13:37:76:9a:89:09:cb:c3:f8:67:01:b9:80:0d:c0:74:cb:48:
         17:44:88:53:a9:1f:26:6c:a0:c0:6a:6a:24:5d:73:5b:1a:99:
         44:fd:f0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:23 2024 by rpki-client on console-fra.rpki-client.org