Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/237f5aa8-35e2-3829-9805-24462e624262.roa
File:                     237f5aa8-35e2-3829-9805-24462e624262.roa (raw, json)
Hash identifier:          l36vEy4f6QHkgWKCiR+sGmz5ID27pFJwT1h47uQS5JY=
Subject key identifier:   FD:CA:2B:39:B0:D9:D9:EA:48:55:74:6C:A9:8F:4C:AC:AB:EF:82:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C9B6C8CA347EB2D8C5D8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/237f5aa8-35e2-3829-9805-24462e624262.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     396571
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c9:b6:c8:ca:34:7e:b2:d8:c5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=960f18a4-c282-4df7-9e60-b412dc832ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:57:55:7c:9e:ea:71:48:5d:d4:22:24:07:88:
                    e8:1b:4a:77:a4:02:81:fb:02:4c:bd:ac:72:ec:a6:
                    92:55:6c:ed:51:d1:63:3c:c1:47:1c:65:41:6c:8e:
                    5c:fc:05:75:23:33:ee:58:47:57:57:ec:34:35:a1:
                    0d:53:90:b4:b6:b6:f8:a5:26:a2:44:bf:c6:95:4f:
                    75:ff:e9:e1:a6:7f:c7:0d:88:be:ff:2b:44:8b:cd:
                    4c:f2:07:e2:84:77:be:14:17:0f:fb:8e:27:05:8b:
                    ab:f7:b1:00:12:7f:ce:58:cb:dd:b1:f4:5b:e7:9f:
                    b9:60:ed:4e:be:1c:30:fe:90:9e:91:a0:9a:ce:58:
                    a2:c6:20:7b:0c:5c:07:95:78:74:4c:5e:88:e3:dc:
                    29:e6:7e:ed:d1:0b:21:d0:85:83:81:3d:e1:5a:75:
                    e3:a3:0b:fb:86:57:44:e8:1d:47:28:2e:d1:df:e5:
                    21:74:f3:70:e0:7b:73:73:0f:4a:2f:37:6d:c3:02:
                    8f:d9:87:24:bf:39:21:f8:01:1c:55:2b:22:b0:9f:
                    74:16:ab:b4:60:22:31:a1:66:64:cb:6d:b3:a6:04:
                    cc:ca:1c:df:41:0d:a0:51:36:cc:94:a3:ae:6b:be:
                    0c:3f:73:62:05:90:95:b9:44:04:4e:08:dd:7f:73:
                    94:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CA:2B:39:B0:D9:D9:EA:48:55:74:6C:A9:8F:4C:AC:AB:EF:82:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/237f5aa8-35e2-3829-9805-24462e624262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:00:07:38:e4:70:f8:a9:11:56:53:3d:f0:46:69:45:f8:3c:
         22:21:fa:44:54:45:c5:fe:d5:d9:53:2c:fd:ae:ca:3d:40:86:
         43:d6:11:91:a1:f3:9e:4c:74:6a:53:0c:20:3f:ec:b8:93:e6:
         ee:c6:0c:33:f7:5a:83:ec:be:55:aa:cb:a7:29:b3:ee:29:f3:
         76:2e:d3:b0:cc:b5:0d:37:09:3a:de:52:5f:77:c9:5b:51:9f:
         19:96:4b:0c:d9:4e:d8:4d:95:99:ad:60:39:28:66:73:c6:73:
         37:08:46:3d:21:b2:10:ae:8f:be:9d:d4:bb:db:29:a0:91:a1:
         7c:36:ca:76:55:2f:28:f3:97:12:01:59:8e:17:eb:7f:34:64:
         9e:54:f1:30:27:bb:5d:ba:c3:ff:51:a7:34:25:58:d8:9b:9f:
         f6:12:c3:bf:ae:6c:19:3b:b1:8e:b2:67:27:8d:d3:fd:ed:c8:
         48:f2:0d:4a:94:c9:78:64:42:96:96:41:d7:8f:1f:fa:04:c1:
         2e:75:09:6e:60:d1:40:b2:3f:78:69:f7:a7:3c:99:9f:f2:e2:
         e8:f9:56:f9:94:0b:6e:33:43:f2:fa:0d:5a:2e:7c:c0:a8:57:
         20:a3:ec:1b:bd:38:5b:cf:7a:30:c6:24:b5:20:9a:c3:4f:cc:
         33:2a:32:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:25 2024 by rpki-client on console-fra.rpki-client.org