Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d1a3100-457f-3375-930a-6bc39c62a667.roa
File:                     1d1a3100-457f-3375-930a-6bc39c62a667.roa (raw, json)
Hash identifier:          eOuXcp9OM4jDwmF80OLvNs9y5ElRNHlqh3rKRvr5ucM=
Subject key identifier:   ED:97:F4:BC:C6:12:B0:8B:90:EB:7B:B1:C1:F6:A5:1F:E1:49:7D:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858477EBCBEF48D78201AB1CCEA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d1a3100-457f-3375-930a-6bc39c62a667.roa
Signing time:             Thu 10 Oct 2024 12:52:06 +0000
ROA not before:           Thu 10 Oct 2024 12:52:06 +0000
ROA not after:            Wed 08 Jan 2025 13:52:06 +0000
asID:                     397194
IP address blocks:        192.42.176.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:bc:be:f4:8d:78:20:1a:b1:cc:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 12:52:06 2024 GMT
            Not After : Jan  8 13:52:06 2025 GMT
        Subject: CN=22240e93-58b5-420f-8d6c-abfad46b16c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e7:04:ab:85:8d:7f:45:f3:e8:d7:5d:2b:8b:
                    3b:ec:08:48:f3:b5:1d:3e:70:71:07:ca:63:7b:d1:
                    e0:65:4a:82:f9:3e:1b:84:75:6c:b5:3c:02:a3:3a:
                    35:cc:c6:6d:72:f3:31:eb:b1:d1:c6:fd:5a:89:38:
                    da:34:a7:81:4a:3e:a5:ce:a7:ab:b6:4a:da:32:02:
                    91:b4:2a:a7:bc:ab:02:a5:de:d3:12:b8:90:36:e3:
                    6c:0d:9a:8d:5f:0b:e2:ac:5b:70:af:94:2c:fb:0b:
                    32:e0:ba:91:d6:5d:83:5f:85:9d:96:08:79:3d:f2:
                    3e:d8:c3:1d:0a:43:ca:e8:b4:19:67:ea:df:dd:d0:
                    f4:f5:7a:32:f2:fe:80:2e:3c:83:b5:de:9f:ac:96:
                    7c:b2:ec:79:2d:b7:8c:54:af:a6:cd:1e:a0:d4:40:
                    9a:8d:3e:ef:27:52:4e:2e:ef:02:63:6a:20:72:15:
                    e5:48:5b:4f:07:96:9f:57:8f:cb:31:d9:b8:d0:9b:
                    83:51:f9:16:28:2c:29:ea:b7:14:25:e9:14:a2:cc:
                    e4:3d:e2:2e:6e:13:9d:b6:3e:5d:5b:93:4f:d9:98:
                    6f:3b:5e:c5:e1:84:ce:79:6e:b9:31:78:8d:86:6c:
                    b6:29:d2:81:13:88:9f:28:42:a5:76:de:df:7c:d2:
                    51:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:97:F4:BC:C6:12:B0:8B:90:EB:7B:B1:C1:F6:A5:1F:E1:49:7D:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d1a3100-457f-3375-930a-6bc39c62a667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:39:07:c8:c9:68:39:cd:f0:83:b7:24:78:2a:c7:08:e4:59:
         e0:d7:99:c0:96:b4:72:30:63:74:06:02:af:d9:d1:76:96:59:
         48:73:78:ef:70:05:ca:49:84:70:f9:50:5b:09:bc:ff:cd:fd:
         fc:08:6e:7e:b8:4a:06:37:fd:5c:08:06:a4:e7:0e:02:27:f9:
         f0:32:e1:59:e4:a8:35:29:f7:f5:c3:5d:b9:8c:0f:45:45:b1:
         03:97:f2:d4:53:32:b9:c7:73:d1:5b:81:53:bc:9a:49:b4:a3:
         58:f3:01:17:9d:b7:54:2e:1d:a8:c5:d8:ab:05:a1:f0:8c:22:
         8d:68:92:80:4a:8e:d8:5c:d3:f1:c4:c9:50:f7:0f:e6:d9:a3:
         89:ae:6b:13:7f:ee:c7:d2:57:a6:1b:f5:85:46:75:35:80:dc:
         10:dd:00:64:de:e3:3d:16:28:a7:d9:ec:6e:17:97:7f:91:6c:
         21:10:d6:b1:d6:46:49:f5:14:a7:b3:51:c3:4e:2e:2b:19:22:
         b8:9c:88:dd:1c:ff:10:32:80:f9:92:ee:e0:87:7c:77:21:15:
         30:26:aa:5b:13:61:ef:de:9b:21:f3:01:50:4c:67:ba:89:16:
         6f:e3:84:87:bb:44:e5:8e:90:2f:5f:6b:69:a0:31:de:9b:dc:
         31:af:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:24 2024 by rpki-client on console-fra.rpki-client.org