Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2047a1b2-13a5-360a-a712-05c206b37123.roa
File:                     2047a1b2-13a5-360a-a712-05c206b37123.roa (raw, json)
Hash identifier:          GkacgibUaxSFs72G7TrixrkL+bGJzHQ4n8UewAcIZjc=
Subject key identifier:   7E:DB:66:40:F4:94:93:78:88:C5:77:95:45:88:B3:C2:1E:4E:B1:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CFD4CE8D5C09897ED89B5048
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2047a1b2-13a5-360a-a712-05c206b37123.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     396595
IP address blocks:        192.81.185.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:ce:8d:5c:09:89:7e:d8:9b:50:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=d3441e47-d569-4b9f-9abc-3201776d75f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3f:6e:af:95:2f:05:eb:c7:ee:54:aa:44:87:
                    e2:e1:62:02:fc:07:d2:29:26:06:f6:fe:6c:d3:b1:
                    dd:89:7f:dc:67:00:79:14:a0:10:3e:e2:b4:c3:de:
                    fd:6f:ee:dc:41:e2:76:77:ac:4b:34:d0:77:18:94:
                    91:92:d9:aa:99:33:47:5d:1b:12:66:2d:05:96:eb:
                    be:d6:63:47:fe:f4:ae:39:16:74:9e:91:1b:bc:54:
                    2c:65:d6:44:a8:20:78:d3:5f:07:4c:2b:a6:49:47:
                    72:ea:65:e7:e6:57:18:a2:63:a3:b9:b0:99:83:09:
                    e8:6a:91:60:a2:f7:78:52:c9:80:89:2e:6f:71:9b:
                    dc:67:ee:e0:d9:0f:05:24:dc:a3:e5:96:f8:4e:ea:
                    f9:19:76:3b:04:60:e3:1d:4e:c3:cd:e4:c1:7d:9b:
                    23:bb:11:b3:c4:f2:5f:d1:4a:65:85:76:a7:75:86:
                    91:b6:74:e4:d7:06:3f:3e:15:9f:05:5e:93:b7:6f:
                    14:40:9d:02:90:48:c8:c1:ce:b6:79:84:c2:8e:4f:
                    26:17:32:c3:0f:f2:98:74:f6:b7:14:d2:5d:41:18:
                    0b:44:ce:aa:5b:3a:5d:53:67:95:c0:5c:0e:42:f5:
                    02:d4:fa:1b:4c:67:c7:5e:be:2d:3a:1f:23:a7:e4:
                    88:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DB:66:40:F4:94:93:78:88:C5:77:95:45:88:B3:C2:1E:4E:B1:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2047a1b2-13a5-360a-a712-05c206b37123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:8c:73:e3:d7:43:f1:bd:7d:72:40:51:cc:7c:bd:6f:a5:bf:
         0d:0f:15:97:96:09:5d:de:81:31:b7:ba:11:38:ba:08:f3:0e:
         10:61:60:9c:20:b6:89:47:de:23:85:91:95:68:5b:6f:9e:3c:
         be:c2:94:10:06:90:d7:d4:80:6d:d9:0f:40:c3:ee:62:a8:c6:
         b7:2c:3f:fa:08:3d:aa:af:6f:34:7e:dd:58:06:e9:8c:1a:9c:
         fc:8f:5b:8c:1e:ca:8f:66:4f:e7:de:32:55:94:0f:a2:8f:e0:
         3b:33:de:2b:89:18:b4:0e:76:5a:f5:a3:fb:cc:b0:03:d3:67:
         53:37:61:05:c8:3e:02:de:7d:cb:a1:32:6c:32:c8:12:5e:cf:
         fe:a5:9b:a8:58:93:5b:4c:0f:6a:03:35:c8:f3:5e:0d:b9:b3:
         c0:4b:ec:0c:ac:a8:ee:98:b2:18:45:da:75:63:f0:50:80:5c:
         a7:73:9b:75:78:9a:8e:38:18:b2:5b:b5:0d:9a:62:ca:17:2c:
         a2:26:06:ae:6d:1a:d4:1d:b5:fd:17:8b:c9:d1:30:5f:ca:05:
         6e:06:0a:a0:66:84:e6:13:06:65:6c:71:34:be:51:e6:6c:14:
         b0:0f:04:64:cb:86:53:37:71:f7:8d:a0:d1:64:ca:5a:1c:82:
         9d:b4:29:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:25 2024 by rpki-client on console-fra.rpki-client.org