Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29ba006e-e7bf-3c21-b21a-2f1f1d55a4cf.roa
File:                     29ba006e-e7bf-3c21-b21a-2f1f1d55a4cf.roa (raw, json)
Hash identifier:          nyrMHNJQVQ+ByjtAMRmp6Kv7tkkeuy60y3u2CnclS+Q=
Subject key identifier:   B1:1E:43:21:F8:39:7C:42:7D:FF:65:55:CB:79:A6:67:C7:2F:31:1C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584787211F6713269E256319FD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29ba006e-e7bf-3c21-b21a-2f1f1d55a4cf.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     396616
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:1f:67:13:26:9e:25:63:19:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=c0e6fb8a-d6c7-4a3f-aefa-bf4325169e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:dd:6c:e2:96:cb:4d:ed:53:96:8a:cf:7b:
                    e3:61:f8:c2:44:79:88:35:5c:e3:06:b0:b6:4d:72:
                    79:36:65:56:b1:e1:4f:6a:6e:5c:3d:ac:eb:b3:68:
                    3c:ed:7c:30:f3:c3:7d:aa:1b:52:c8:26:06:a6:89:
                    cb:0a:91:67:20:27:6d:f6:fb:a0:fb:f7:55:ad:37:
                    8a:11:89:68:10:41:2e:08:2b:79:ed:a9:85:bd:b2:
                    34:f1:e4:6b:75:6c:c9:24:c2:4b:39:ec:e8:37:8a:
                    7c:f1:83:df:31:88:03:2b:80:b0:3e:b3:85:25:6b:
                    6d:f0:94:2c:07:3a:e7:98:5a:2d:a7:7b:0f:bf:64:
                    43:f9:b8:d4:50:55:1a:3c:1e:49:12:f4:d4:f0:0a:
                    40:a5:f4:17:32:b5:21:e8:5e:11:e6:9d:e0:88:8f:
                    64:01:b5:82:e2:73:03:6f:4d:a4:ca:4c:2c:03:31:
                    91:00:0d:d1:83:5c:09:44:26:76:c6:71:1f:24:85:
                    6d:13:45:d3:64:54:b6:32:34:bb:51:f7:b1:86:21:
                    66:b8:50:18:8d:33:92:21:36:05:af:e0:42:be:39:
                    3b:0e:e1:da:71:f5:5d:40:d9:ff:d3:f4:21:02:39:
                    8f:81:1d:5d:6b:48:3a:de:a8:10:93:43:bc:c4:9e:
                    bb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1E:43:21:F8:39:7C:42:7D:FF:65:55:CB:79:A6:67:C7:2F:31:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29ba006e-e7bf-3c21-b21a-2f1f1d55a4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:15:42:49:23:1b:fd:e7:79:f7:4a:0d:22:64:ad:65:e2:f6:
         1c:7e:39:31:cf:07:b1:fe:91:d4:3d:1b:bd:98:b6:59:02:b4:
         f9:ef:45:05:5f:e7:d8:35:a7:d0:15:d3:3e:ff:90:98:d1:81:
         5e:f8:cc:cf:65:97:2e:42:f2:fe:a2:ae:dd:9b:08:37:a7:6e:
         52:76:79:b0:6c:f7:5c:13:79:8d:7f:83:e7:0e:a5:00:06:a9:
         dc:b8:81:50:20:a4:80:59:b1:99:c1:17:f6:c4:c2:93:f8:eb:
         07:b1:06:bc:e9:a9:9b:0b:8e:7a:ee:da:c4:11:44:66:08:c9:
         4a:7e:bf:e5:ea:9a:28:96:cc:76:6e:ab:ff:a7:af:75:e7:15:
         44:95:68:de:40:fc:83:8b:91:e6:f0:53:42:99:78:2c:2a:37:
         c4:49:4c:24:cd:9c:22:51:ae:d0:e0:65:09:17:b6:46:cb:e2:
         4f:e5:03:ac:bd:11:4b:94:29:20:80:4b:27:42:7a:0a:52:a2:
         b3:3f:d7:4d:55:d1:17:a0:ce:bd:1a:8f:5e:2d:27:a5:64:bf:
         24:18:b8:b4:7c:0c:3d:36:2f:f5:55:9c:04:48:23:71:eb:26:
         fe:13:d5:5a:ed:e3:61:4d:9c:e7:6c:d9:40:ea:65:83:56:e4:
         2b:35:ea:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:25 2024 by rpki-client on console-fra.rpki-client.org