Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30866ea6-a4f9-3715-9730-c0c8164b5c66.roa
File:                     30866ea6-a4f9-3715-9730-c0c8164b5c66.roa (raw, json)
Hash identifier:          9Q7Nee2bNV+Bu2ju9P46Kx/ci96QjXtutg1lhycPF9c=
Subject key identifier:   1B:B0:5F:9E:8C:4D:C7:C6:07:41:9D:00:F8:03:51:CB:0E:32:07:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C4A47848F5D59438BE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30866ea6-a4f9-3715-9730-c0c8164b5c66.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     397208
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c4:a4:78:48:f5:d5:94:38:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=18bc1ea4-5f2d-468d-b8fd-967a4cb9856c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:49:f3:72:31:e3:4d:20:ed:ee:78:98:98:
                    75:86:53:3d:a2:74:20:7c:b2:cc:b6:8d:42:de:6b:
                    b6:d3:f0:2e:5e:a9:67:14:4f:03:d4:fa:e7:47:8e:
                    5c:d7:91:fb:64:97:0d:b4:18:ff:3b:d2:ca:f7:94:
                    f6:69:0e:a0:e5:d0:31:f3:28:ec:5a:fc:ff:86:5b:
                    e2:10:66:8e:d1:9e:cd:96:9f:57:8b:fe:54:f3:6b:
                    5f:2c:d5:57:9f:f7:25:9f:58:18:75:06:f8:1b:f4:
                    62:52:f9:e5:61:98:92:3d:69:72:cf:70:4c:d4:bc:
                    2b:3a:99:9c:31:2d:43:b1:61:92:8b:f9:58:af:61:
                    b3:4a:a2:3f:a0:c6:a7:fe:1f:92:22:42:ec:71:39:
                    c9:7f:a8:6a:6e:78:66:d5:6d:91:85:c5:f6:62:d8:
                    a9:5a:45:99:e2:fc:39:d5:55:2d:d6:9a:d3:3c:da:
                    a2:cc:46:f2:17:65:4b:ec:95:69:46:db:2e:c5:be:
                    49:d0:0d:a1:56:71:fe:b8:7c:24:39:e2:c8:ce:cc:
                    76:51:3b:65:cb:22:92:89:2d:97:ea:64:ae:5a:ee:
                    da:e6:de:71:39:85:aa:a5:e0:1c:be:3d:81:6a:f9:
                    74:03:5c:d1:00:50:97:fe:ec:bd:49:a7:36:90:3c:
                    f0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B0:5F:9E:8C:4D:C7:C6:07:41:9D:00:F8:03:51:CB:0E:32:07:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30866ea6-a4f9-3715-9730-c0c8164b5c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:70:28:d7:55:b9:79:c9:4f:f9:53:e1:68:51:c4:91:31:b8:
         7f:ff:df:db:86:b6:be:eb:e8:cf:99:42:85:08:dd:90:f7:d5:
         82:c1:8d:06:a4:7f:ec:5d:eb:e7:cc:4f:a5:5c:ce:92:65:44:
         0d:41:c6:f3:df:b1:70:6e:78:80:14:b2:41:38:90:a9:94:1c:
         18:bd:71:92:38:2a:8e:41:8d:f1:19:95:95:1e:db:c4:ba:9d:
         13:8f:56:46:e8:15:6e:07:bb:9c:4a:ff:85:84:5a:0b:b9:cc:
         4f:00:06:55:d7:8c:4d:e6:3f:5e:4b:4a:86:6b:12:55:f0:a8:
         84:0e:a2:0b:43:99:23:a8:46:47:b6:12:82:0e:50:09:29:ae:
         40:95:ca:50:d0:b3:50:5c:e6:91:ca:e1:62:85:b4:e9:c3:e2:
         95:d2:54:0f:34:31:7e:ee:f5:56:56:f4:56:5f:c1:5f:fc:69:
         a9:e6:86:a3:bb:0b:b9:00:bf:85:1a:f9:1c:c0:fa:b6:6e:e5:
         21:aa:f7:0f:78:94:ba:15:44:42:76:19:ec:35:c1:67:5e:d0:
         ce:72:46:e2:c8:af:17:87:f0:47:72:f7:84:89:36:ff:3c:ec:
         ae:ef:26:b7:61:f9:96:e9:91:82:99:b8:3f:5b:0b:8e:e7:fc:
         37:84:9d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:26 2024 by rpki-client on console-fra.rpki-client.org