Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2db0efca-9ba7-3f6f-a9e0-ce783a909460.roa
File:                     2db0efca-9ba7-3f6f-a9e0-ce783a909460.roa (raw, json)
Hash identifier:          pohsoZwkWG/AYlI8jQCMPf7ISzidaAJ/fxQ0DXUvKSM=
Subject key identifier:   F3:A1:40:7B:8F:9A:47:C9:13:D8:D3:C3:7B:43:D7:F0:F3:B9:68:2D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476E00ECE2CBEA738F31A13300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2db0efca-9ba7-3f6f-a9e0-ce783a909460.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     396543
IP address blocks:        192.30.45.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:ec:e2:cb:ea:73:8f:31:a1:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=0e493ba0-d6c8-4dd5-bc18-984601daae62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:92:8f:cf:86:77:59:bd:91:e5:df:7a:cc:
                    61:95:53:b9:30:12:29:5d:9f:44:61:b9:0b:33:36:
                    60:83:55:14:5a:13:dc:65:05:a3:0b:63:24:d6:25:
                    e6:21:3b:d6:99:76:01:0a:e5:fe:e9:4d:15:59:91:
                    70:88:c0:f0:a2:c5:49:3c:52:80:88:8b:9c:61:e3:
                    b8:db:bc:af:b1:b3:5a:e9:9d:b3:a1:68:3c:b5:1a:
                    9c:80:88:81:e3:2a:28:8d:6a:de:c5:6d:59:63:17:
                    7f:41:8c:2c:72:23:48:e6:50:38:aa:43:7f:ae:ac:
                    03:ab:1a:7a:57:bb:f9:20:ec:9e:dc:69:9f:40:fb:
                    60:86:7b:0b:7e:bf:1b:7b:43:59:24:4f:cd:bb:c8:
                    85:5e:e1:6c:bc:2d:3c:28:ee:83:4d:c7:09:df:a0:
                    dc:2f:82:89:97:5e:f4:0a:3c:48:6b:0b:01:8e:db:
                    0a:ec:96:6c:05:34:8e:24:c1:c0:86:0b:76:0a:27:
                    1d:2a:6b:1b:57:d5:38:f5:0f:25:94:6e:73:3e:6d:
                    df:16:10:de:e5:bc:15:83:95:15:c7:1d:54:58:90:
                    a0:fb:0b:e3:4a:d3:e3:39:41:2a:88:94:22:23:9d:
                    86:b8:7c:57:87:fb:9f:d6:f6:b3:ec:dd:9d:0e:43:
                    78:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A1:40:7B:8F:9A:47:C9:13:D8:D3:C3:7B:43:D7:F0:F3:B9:68:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2db0efca-9ba7-3f6f-a9e0-ce783a909460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:47:7e:aa:49:12:e1:62:6b:4a:9a:23:4e:92:43:b9:f8:f1:
         7b:04:02:bc:8a:f2:be:d5:ba:3d:ba:b0:b4:ce:35:8f:f8:5f:
         52:8a:19:2b:8e:94:d0:60:79:57:24:70:68:7a:5a:b0:2e:33:
         0c:74:9a:62:cc:bc:23:a3:15:54:ce:83:92:f2:b5:20:bb:48:
         26:ca:f2:5c:58:f5:a9:08:d4:63:f5:34:f7:be:6c:e9:c8:cd:
         ee:ac:00:c5:34:8b:82:a4:15:91:50:40:7f:eb:46:7a:7a:2c:
         8b:0c:94:ec:7f:95:a4:53:2c:5d:fc:96:26:c9:82:02:9e:be:
         2a:70:76:74:18:ba:3c:66:07:4b:ed:2b:01:26:48:72:18:2b:
         27:32:a3:ee:2e:01:69:4d:71:8a:a7:49:50:73:3e:77:db:ea:
         2c:d3:ce:f3:7f:99:8d:a1:3c:7b:fa:62:a7:3e:de:d6:1e:f1:
         ba:0e:4b:9a:11:f7:c5:95:e4:fb:bb:f1:20:f6:58:98:29:27:
         d8:60:04:e2:a7:c0:4a:13:f6:c5:f7:d4:6f:e7:77:ea:fa:31:
         e3:ee:ae:07:e3:fd:21:80:0f:26:68:50:e2:89:6c:34:ee:24:
         fa:81:58:25:52:d7:8b:20:c6:e8:c3:ff:85:00:9b:5c:60:e7:
         18:d3:4c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:59 2024 by rpki-client on console-ams.rpki-client.org