Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/325418b4-a8bd-3522-a6b9-3974b428ea0a.roa
File:                     325418b4-a8bd-3522-a6b9-3974b428ea0a.roa (raw, json)
Hash identifier:          axKPk2C2BL3rqL6H1DVq1KmYL5UCGXp3dQmGcoZ20sE=
Subject key identifier:   6B:07:68:8D:32:E3:90:71:1C:7D:34:D6:D5:23:0A:35:6C:2A:59:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584787211F434A74EC2A227DC380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/325418b4-a8bd-3522-a6b9-3974b428ea0a.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     396590
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:1f:43:4a:74:ec:2a:22:7d:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=80b57f07-cb6b-446f-9800-a5f94a528099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a7:c2:bb:25:cd:7b:32:c1:c7:92:f4:1f:b7:
                    d5:52:91:40:07:8d:7f:50:22:45:0b:14:53:a0:45:
                    b7:84:bf:df:28:0a:65:9e:1d:13:66:05:89:64:ab:
                    65:53:f1:00:91:af:05:51:bd:a5:4c:4b:3d:8d:cb:
                    5d:b9:d3:c2:2b:e1:2a:dd:72:05:77:d3:6d:8f:8c:
                    04:da:2e:e7:9a:97:c0:f6:c0:59:41:b4:fc:92:23:
                    66:e4:a9:81:11:c1:96:5f:10:41:ef:ed:13:df:85:
                    2f:11:6a:a5:95:e2:6a:ab:cc:25:95:af:18:03:98:
                    32:bc:d7:9f:02:1c:91:a6:19:15:6d:b6:d3:00:14:
                    55:61:2e:ea:3f:92:85:34:9b:47:1c:cb:63:f1:3f:
                    a3:15:a9:4a:06:9c:ae:be:54:1a:f3:0e:91:5c:ca:
                    39:1d:82:04:33:3d:88:c3:e3:e3:6e:0e:e4:7e:d4:
                    07:51:6b:bb:d9:27:a8:82:9e:fd:ad:14:60:8a:9f:
                    ee:47:e5:70:70:95:2f:53:1d:ee:99:0e:fe:62:19:
                    8e:c4:2d:af:96:a7:36:bb:ef:aa:1c:e5:3d:f2:c7:
                    39:3a:10:de:9f:1c:f8:b7:58:cf:bc:ed:8d:6c:16:
                    a7:b5:6f:ac:43:ab:ae:9e:e4:df:6d:72:f5:a3:94:
                    e0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:07:68:8D:32:E3:90:71:1C:7D:34:D6:D5:23:0A:35:6C:2A:59:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/325418b4-a8bd-3522-a6b9-3974b428ea0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:81:38:e2:a9:9c:fb:0c:f0:b5:fa:eb:a7:9d:24:ab:b6:d5:
         f1:2e:26:df:0f:ff:06:31:29:70:91:e3:e8:ac:fb:bb:7e:e2:
         af:5d:56:4b:0e:9a:d0:3e:13:99:bb:7c:a1:a2:a6:14:c3:47:
         44:51:e4:8f:e8:cc:cc:d7:67:03:d6:84:c7:eb:14:12:98:ad:
         bf:d6:fa:01:e6:29:50:1f:ef:70:d9:37:13:13:e2:2e:c2:c8:
         a5:f5:d0:cb:8a:ce:71:63:7a:d0:9e:44:23:e7:d3:b3:8a:49:
         6b:d4:8b:12:2f:c9:6a:81:fe:0b:35:5d:63:20:a3:64:80:e2:
         b0:d8:ea:1a:6d:28:89:92:f4:3d:86:e2:c6:8a:fe:d5:55:d6:
         1c:c4:4d:8f:32:0f:92:22:9f:c7:a9:7a:a8:66:63:86:c4:47:
         d4:90:bd:da:4a:81:dc:22:4b:0f:b2:07:46:41:85:f8:d1:47:
         8f:14:83:5f:d2:c4:91:6e:08:84:20:2d:bb:4d:9a:60:3b:26:
         59:46:e4:83:9b:24:40:0b:f9:84:8c:7b:86:46:de:cb:2a:d9:
         54:86:02:f8:4e:fe:04:fe:35:2b:c6:b4:1a:c2:fe:0a:55:ac:
         71:c1:05:f3:2a:27:c3:f3:5e:3f:e7:ba:a2:d0:a6:73:bf:97:
         07:c4:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:00 2024 by rpki-client on console-ams.rpki-client.org