Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10a76dfa-f5b7-39fc-a9a1-bbc92e4e8678.roa
File:                     10a76dfa-f5b7-39fc-a9a1-bbc92e4e8678.roa (raw, json)
Hash identifier:          ezMvrbHm2esSOC8/xHs2vLKrscHJW2uS/aYkzV6GYHg=
Subject key identifier:   39:D0:5C:63:7D:54:BF:4F:30:66:16:56:AF:86:19:EC:90:F6:FC:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584787211DA5ABC6F7A1DB43DD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10a76dfa-f5b7-39fc-a9a1-bbc92e4e8678.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     396562
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:1d:a5:ab:c6:f7:a1:db:43:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=737afe5a-4730-4c45-a48e-4453db9c1148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4e:e4:6e:3a:d9:b6:1c:5c:f3:81:50:a8:1e:
                    f4:bb:50:18:bd:2b:63:96:1a:c3:5f:a0:6f:03:3b:
                    71:41:67:bc:f8:bd:58:d3:82:a5:f4:67:4f:01:03:
                    b9:10:de:26:1e:6c:3c:0d:43:06:59:1f:07:7b:33:
                    07:3d:22:c0:9e:dc:e1:02:59:a7:d3:f3:18:76:51:
                    fd:ad:21:bd:65:4b:f2:7d:f7:0e:6c:a9:83:ec:31:
                    48:1c:73:0f:37:6e:ab:21:4a:fe:2a:fd:24:4d:1b:
                    fe:e6:8d:11:82:57:5f:74:1b:37:12:b6:92:00:dc:
                    34:72:3d:15:da:85:bf:04:11:d5:8f:19:2b:41:77:
                    52:ce:de:55:05:b5:eb:8b:2f:d3:42:65:46:d7:74:
                    cc:4b:34:eb:6c:bb:c1:74:03:79:98:2e:03:4d:14:
                    e5:83:a5:4a:5e:b0:6c:b3:da:89:e0:41:c9:c3:9b:
                    64:82:a8:8d:3a:6a:92:0d:80:30:d2:e1:1e:22:49:
                    9a:20:76:92:32:2b:4b:be:30:70:1a:27:47:38:42:
                    33:db:6c:5e:13:c3:6f:bf:4a:b0:26:0b:73:48:87:
                    2e:77:68:d1:c2:9b:a5:0d:d6:31:60:96:e5:4a:30:
                    68:19:1e:8a:9b:cb:9e:f2:2c:a1:7b:47:42:e2:0e:
                    86:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D0:5C:63:7D:54:BF:4F:30:66:16:56:AF:86:19:EC:90:F6:FC:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10a76dfa-f5b7-39fc-a9a1-bbc92e4e8678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f5:d8:59:a7:13:40:25:33:9b:a3:a6:3a:b3:05:67:2c:24:
         0d:34:f5:de:7c:5b:67:68:67:a4:44:95:d9:e9:1c:71:a9:49:
         30:a5:c8:33:bd:fe:09:41:b9:b4:d6:ed:26:64:a7:95:3c:05:
         4b:5d:e7:39:1c:a7:59:a0:76:8d:91:83:bb:ac:ff:ae:08:5b:
         73:b3:ee:89:43:f0:7a:1e:a8:78:36:49:b1:ff:23:56:d3:57:
         a2:09:cc:c3:eb:f5:2a:28:eb:12:2d:ff:09:70:e7:ff:d6:c0:
         02:b5:ed:1a:71:5c:a6:60:5f:35:ac:fa:c0:b0:fe:e1:44:60:
         04:1d:79:5c:bc:24:9a:4d:03:af:8c:9b:ec:f8:d4:79:8b:98:
         d0:fe:81:c2:1c:59:40:8d:2d:52:62:b0:08:7d:a7:24:27:46:
         9f:93:f9:83:26:2b:0a:49:7d:1e:81:00:1c:61:4e:d9:eb:05:
         f1:90:0b:79:84:1e:e7:17:f5:e3:af:44:1b:04:61:4c:2d:aa:
         07:d7:c5:35:b9:17:c7:b4:c2:ec:0e:51:be:9b:1a:93:b8:9f:
         53:47:ff:16:92:9a:98:60:f2:c2:35:d9:d9:42:4b:52:b7:91:
         da:fa:58:8c:65:75:18:31:04:d0:14:3e:db:72:ca:aa:26:94:
         16:17:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:57 2024 by rpki-client on console-ams.rpki-client.org