Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26f3353a-7bec-3f19-9101-6895bb3e1f3d.roa
File:                     26f3353a-7bec-3f19-9101-6895bb3e1f3d.roa (raw, json)
Hash identifier:          /uDRghDqmI9bAEygjpGbiMm6MJi4/LdSFAl1PBiJDKs=
Subject key identifier:   DA:18:FD:CB:07:C6:1F:8D:5A:BF:FF:F2:57:4D:8D:AB:FC:FB:3E:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B3EDBC233E9582B17F8D0140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26f3353a-7bec-3f19-9101-6895bb3e1f3d.roa
Signing time:             Tue 29 Oct 2024 14:08:39 +0000
ROA not before:           Tue 29 Oct 2024 14:08:39 +0000
ROA not after:            Mon 27 Jan 2025 15:08:39 +0000
asID:                     396565
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:ed:bc:23:3e:95:82:b1:7f:8d:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 14:08:39 2024 GMT
            Not After : Jan 27 15:08:39 2025 GMT
        Subject: CN=b85cc98a-2edb-4685-8f00-a6ac62dce852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:9a:79:ac:7f:d2:88:ad:76:83:65:9d:eb:
                    ce:a9:d7:e7:c6:ca:a4:79:4d:33:1d:ee:9e:84:5a:
                    1e:13:de:93:b2:6f:97:cc:29:10:88:5d:e9:65:ae:
                    d5:87:68:b3:5d:b0:9e:9d:72:b4:1b:17:c6:21:7e:
                    7d:05:58:d7:0d:bc:79:19:16:19:09:69:93:0b:65:
                    47:04:af:cb:98:82:dd:6c:62:7a:1f:00:18:57:bc:
                    cf:7a:84:f5:ce:2b:eb:44:06:d9:78:98:fb:a7:ee:
                    38:03:b1:2a:d3:dc:2e:12:96:fe:66:37:0c:d8:88:
                    cb:99:6e:12:d5:7f:4f:2c:4e:f3:4b:e1:33:5c:fc:
                    35:f7:26:82:ff:c5:87:ee:0f:26:a0:52:9e:01:94:
                    97:dd:99:30:e9:5e:36:1a:7f:cb:c4:01:96:fa:0a:
                    32:8e:49:3f:9b:d8:da:7d:56:62:9b:3c:68:40:32:
                    43:e1:4b:cb:fc:26:be:46:5f:a8:49:f4:72:56:12:
                    5d:fe:aa:e6:1c:bb:2c:7d:aa:58:0c:fa:61:7f:c3:
                    82:f2:ae:16:b5:c7:95:e9:4e:6b:8f:ed:2c:38:f2:
                    ec:4e:e2:dc:7d:a1:08:5c:22:3d:ca:da:7f:e8:8a:
                    70:60:c2:c9:ad:f0:48:4e:e7:b6:e1:f4:8f:2e:2a:
                    c5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:18:FD:CB:07:C6:1F:8D:5A:BF:FF:F2:57:4D:8D:AB:FC:FB:3E:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26f3353a-7bec-3f19-9101-6895bb3e1f3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:25:d9:b9:40:ce:d0:1c:60:e2:ac:80:3e:41:19:03:d9:90:
         ac:2e:b3:fa:84:f1:4b:a9:28:a0:19:99:a1:6c:91:78:5e:12:
         25:c0:26:20:ba:57:19:c7:88:ba:60:1e:00:9c:e5:7e:37:ab:
         9c:3e:4f:d6:e1:7d:45:bd:21:6c:4e:ab:e1:1d:fa:59:b1:67:
         ce:d3:a4:22:87:f8:40:39:9f:c1:04:74:8f:02:9d:76:ea:9d:
         b8:22:57:b4:d2:71:24:c5:5d:17:09:06:fc:11:10:89:81:c9:
         1c:53:d2:ec:87:0b:a0:af:fb:f2:be:4e:34:2c:e4:c8:22:77:
         c2:42:89:d4:7c:05:d0:e0:78:4b:19:c8:2f:a2:72:aa:59:d0:
         1a:27:c0:0f:98:6f:31:37:a7:2f:92:d8:d7:17:e5:5e:6c:f9:
         24:2c:a3:8e:5a:ff:ab:e9:9e:e7:64:4a:d9:0a:fa:95:6d:ce:
         22:62:ca:8a:5b:b1:80:77:87:a8:ed:3d:7c:b0:91:d3:02:35:
         b1:f4:65:72:34:24:6c:0f:ef:59:fc:0c:c3:75:c3:f9:63:b1:
         90:ce:f5:f1:59:b6:26:60:fc:15:54:55:f5:17:2a:89:27:24:
         ca:4a:36:d8:0f:c6:07:38:f2:7d:c8:d3:b3:f3:c9:c1:53:76:
         41:65:44:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:59 2024 by rpki-client on console-ams.rpki-client.org