Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ddb90e-f2d3-30d5-8b64-97b05749778a.roa
File:                     18ddb90e-f2d3-30d5-8b64-97b05749778a.roa (raw, json)
Hash identifier:          Gn9B0vBU4JNTD0Tx0Svm/NuPe7geA65JpOUi0gnD+V4=
Subject key identifier:   70:86:4C:A0:3D:B5:13:C0:57:00:A1:0A:8E:88:2B:79:A5:88:3F:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D1428D72A6BEBF7FC39E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ddb90e-f2d3-30d5-8b64-97b05749778a.roa
Signing time:             Thu 24 Oct 2024 12:49:58 +0000
ROA not before:           Thu 24 Oct 2024 12:49:58 +0000
ROA not after:            Wed 22 Jan 2025 13:49:58 +0000
asID:                     396580
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:42:8d:72:a6:be:bf:7f:c3:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:49:58 2024 GMT
            Not After : Jan 22 13:49:58 2025 GMT
        Subject: CN=a44e307b-e8cf-4962-acaa-eb0106416f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:95:83:7a:f2:a9:ac:88:01:43:e3:ee:81:
                    cb:08:c5:59:c6:3c:ed:cd:d7:73:4b:cd:c8:14:b3:
                    f0:25:e2:8d:a6:e0:4c:64:d1:90:00:c6:2e:4c:41:
                    79:42:a1:27:95:c0:bc:ea:2e:d0:30:56:0e:4b:fe:
                    ac:f1:fd:ef:e9:fa:0c:2b:04:3e:ca:5b:dc:81:d4:
                    15:33:73:cf:3c:9c:a4:1a:a5:e2:4f:93:22:c9:60:
                    3c:9f:f6:5e:4b:83:99:5e:f4:81:4a:30:6c:b3:39:
                    40:57:01:e0:fa:a5:8f:a5:91:b6:73:f8:32:1c:a5:
                    aa:82:47:d9:8f:b9:bf:f2:6c:8c:35:bd:c3:ce:94:
                    52:55:d4:b7:eb:0e:dc:df:8d:14:6c:da:3a:65:d2:
                    a1:35:19:b1:03:f9:4e:39:af:e7:31:ad:d1:fa:b6:
                    f3:4b:8a:42:c5:85:9b:e9:35:77:f1:50:21:08:39:
                    32:b1:8e:fe:8a:df:01:8b:00:07:19:fc:e0:cf:f6:
                    7f:d3:eb:08:b8:1d:4e:e4:f2:73:3e:63:cc:d5:0d:
                    7e:fa:e0:fc:d9:6e:61:5e:6f:c3:03:b7:93:9e:14:
                    30:f7:c3:e5:75:6a:e6:8e:8b:7f:7a:e4:be:2f:1a:
                    fd:ef:b9:4c:9c:29:7d:0d:b4:f7:0d:68:e5:92:0f:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:86:4C:A0:3D:B5:13:C0:57:00:A1:0A:8E:88:2B:79:A5:88:3F:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ddb90e-f2d3-30d5-8b64-97b05749778a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c0:b8:e6:02:cd:3c:f1:fa:e8:23:c6:ee:d6:55:af:66:b8:
         85:b2:37:c2:b3:19:10:34:60:68:23:a3:c3:28:71:ec:69:f8:
         b8:a9:c9:ae:0b:27:7f:cf:29:22:5c:e8:27:cc:e8:e7:4c:b2:
         77:61:7c:69:b7:43:56:35:02:7e:c8:7c:e2:67:6c:e7:5f:59:
         e9:db:99:27:05:56:f4:48:05:1e:8f:c5:42:fb:34:8a:90:d5:
         f2:ce:71:12:8e:92:f2:7f:9f:f6:bf:8a:64:b1:08:7b:4d:e1:
         6e:80:cf:66:e2:50:c0:60:11:96:ac:ff:3a:31:3e:c7:59:23:
         0d:a2:5a:55:2e:c2:e6:5a:cc:88:52:54:c5:ff:53:ae:51:30:
         12:32:60:11:4f:86:8f:22:a1:e0:23:f6:82:f1:41:43:7e:ee:
         b8:07:98:f5:8e:7b:d0:2c:94:84:81:ff:cf:f4:ed:a9:43:18:
         3f:78:a7:69:6e:1e:ee:7b:13:21:7d:12:a0:32:18:ee:99:68:
         26:c7:a3:10:62:ca:f9:37:2e:e3:f9:69:4c:2c:55:31:4b:d6:
         1a:d3:b0:0c:50:1c:36:f4:51:93:8d:dd:09:79:14:55:c7:a2:
         40:c6:05:7e:e7:14:4a:84:e9:b9:d9:50:fb:b2:67:fb:82:24:
         5a:66:f4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:24 2024 by rpki-client on console-fra.rpki-client.org