Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fd7bcde-1c74-3103-9017-2c9f0843cbbb.roa
File:                     2fd7bcde-1c74-3103-9017-2c9f0843cbbb.roa (raw, json)
Hash identifier:          LB0LIqzQ2wCIBktI9WFz1wnynljkZlJumHd4/6ShYQs=
Subject key identifier:   EE:CE:ED:38:D2:D5:68:0F:8A:8C:83:C9:71:A1:D4:F2:3E:D3:81:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A25D07CF423963B836500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fd7bcde-1c74-3103-9017-2c9f0843cbbb.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     396585
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:25:d0:7c:f4:23:96:3b:83:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=a73770dd-a919-423f-b9c0-25e4b893067b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:02:b7:de:b8:a9:de:05:4f:50:13:54:f0:39:
                    f1:14:8d:01:bc:64:4d:a4:49:51:8b:5b:b7:de:6f:
                    a6:2c:82:37:65:ea:14:29:82:c8:a5:bf:55:34:2c:
                    65:0e:3b:a6:d0:bd:8b:b5:e5:43:85:eb:2a:dd:0a:
                    3e:d1:60:53:dd:04:24:e1:ca:98:0b:a3:30:1c:29:
                    af:fc:8c:77:fb:74:92:5d:99:db:bf:5d:68:25:82:
                    84:c7:0f:8b:ee:b4:b9:63:91:0f:97:be:b1:cc:12:
                    49:9b:64:0f:b7:7d:cb:b8:26:2a:b6:3b:20:68:30:
                    50:7c:b8:b5:de:91:5f:88:1e:1e:01:ba:df:60:07:
                    38:f5:cf:b4:d0:2e:4d:93:69:89:82:2b:58:13:e2:
                    d7:b6:6f:bc:55:2e:a5:1d:27:ef:a2:bf:a5:65:26:
                    d3:01:8f:25:bf:66:c1:f9:73:d6:8f:ed:03:bd:7e:
                    79:b3:a7:42:88:dd:dd:9c:6d:ae:b6:c1:28:37:29:
                    bb:9e:68:01:a7:b6:0b:29:53:30:47:a8:9e:db:22:
                    15:88:6a:49:89:6e:10:63:ef:2f:bd:b7:32:08:2d:
                    be:ca:cf:54:fc:4a:a8:a5:0f:46:79:6c:e0:ee:ba:
                    be:bb:d0:7e:52:1c:a2:40:2f:e9:06:0e:f1:2b:52:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CE:ED:38:D2:D5:68:0F:8A:8C:83:C9:71:A1:D4:F2:3E:D3:81:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fd7bcde-1c74-3103-9017-2c9f0843cbbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a0:e4:d2:74:75:af:c2:2e:d7:0d:a3:14:08:d8:b8:b9:0b:
         19:d9:3d:43:a6:50:a3:3e:83:01:3d:9c:83:47:cb:7e:1d:66:
         31:1a:e8:1a:09:37:c7:b9:05:fd:af:5e:4c:46:5e:1d:b8:d4:
         fb:05:82:90:38:d1:e7:3d:bd:be:8a:a9:72:c5:88:b5:1f:8e:
         16:7a:ad:f8:ae:47:44:83:39:f0:a6:07:53:b9:cc:2d:0d:33:
         06:b3:bb:63:d0:fd:b5:8e:bd:a8:04:3d:c1:4e:f9:75:b4:1c:
         b8:ec:cc:44:bf:63:ee:29:7b:7f:34:d1:3e:3c:e6:c2:3d:85:
         ee:78:8f:f6:40:8c:ce:98:69:ea:03:76:5e:8f:ce:2f:57:6a:
         ca:2d:48:94:83:b0:48:43:28:cd:6d:3d:20:67:00:e0:7b:62:
         62:e7:ab:47:62:7b:77:5b:63:7f:9c:3a:de:9a:55:7f:a4:dd:
         48:66:41:c8:68:d0:55:23:4e:81:2d:7e:b2:f8:0c:ca:a9:ec:
         e1:f4:4d:09:3c:b3:18:36:80:15:cb:15:6d:6c:4d:27:51:6b:
         19:72:d9:9f:82:0c:24:db:12:e6:23:39:c9:e4:2f:95:18:ee:
         96:47:06:a0:f9:92:77:ba:25:fe:f9:e3:11:4e:68:03:98:9c:
         8f:c3:1f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:26 2024 by rpki-client on console-fra.rpki-client.org