Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3328cac1-ee96-3bd4-b0ab-f8d5ffec55c1.roa
File:                     3328cac1-ee96-3bd4-b0ab-f8d5ffec55c1.roa (raw, json)
Hash identifier:          Vmu8emZ0KKf1f2SBggILCm3iWcXLCpItxdDYgtrgxaI=
Subject key identifier:   2D:C8:9E:E5:6E:B5:72:43:B8:C9:84:06:1C:16:78:41:02:E6:EB:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858479516865AB89CEC50B4E4FD60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3328cac1-ee96-3bd4-b0ab-f8d5ffec55c1.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     396826
IP address blocks:        192.153.247.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:86:5a:b8:9c:ec:50:b4:e4:fd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=e1c4e526-226c-47f4-9f5b-76aff08834a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:81:b9:fc:aa:e0:cb:a3:f8:8e:2d:16:b3:0c:
                    cb:91:25:6f:a2:bb:c3:db:90:d9:49:20:c4:57:65:
                    6a:24:d5:13:b4:97:37:79:97:96:dc:62:07:99:7e:
                    25:29:2e:88:45:34:aa:04:f8:36:d7:20:19:00:2e:
                    67:85:46:8f:0d:90:94:17:b9:24:c7:9c:f6:00:7a:
                    15:5b:6a:ee:ff:82:0a:98:65:1a:e7:98:e2:85:12:
                    e7:52:89:25:d1:22:cf:b8:9f:db:c8:01:b8:22:21:
                    f9:16:87:02:23:ad:50:41:cc:34:5a:bc:a8:91:89:
                    4e:8c:12:ec:a6:a0:aa:ae:ac:d1:2a:42:c1:d6:b5:
                    19:71:16:04:0b:b0:dc:c9:83:77:d2:8f:79:8c:87:
                    bb:20:82:d3:25:b7:77:09:6d:9d:e9:bc:69:64:5d:
                    4d:f2:f5:2d:2d:9a:6c:eb:25:21:9d:9f:32:22:d1:
                    93:ee:44:39:f6:0a:16:f0:68:aa:2b:0e:9e:4c:b4:
                    18:1e:6b:fc:1a:fc:90:c5:c3:83:6b:f9:4f:d7:ca:
                    92:e7:39:bb:be:e1:b5:53:94:e3:27:69:e6:f3:fe:
                    cd:d9:b4:7a:05:b7:35:7e:99:b8:48:7a:bc:df:52:
                    84:10:d4:8a:b8:da:b4:03:34:0b:b2:92:b3:90:95:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C8:9E:E5:6E:B5:72:43:B8:C9:84:06:1C:16:78:41:02:E6:EB:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3328cac1-ee96-3bd4-b0ab-f8d5ffec55c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c6:1b:18:57:80:44:91:23:31:15:e3:af:5a:a8:d6:0e:13:
         61:11:9d:d8:1a:01:6d:4a:e4:e5:c3:a9:07:d0:e7:f2:bc:ad:
         c5:8c:6a:b2:76:fe:0f:3f:85:fd:09:c8:99:84:14:7f:41:29:
         2c:0f:de:4e:5e:fc:fc:29:03:3b:5a:c6:51:bb:c5:fc:88:4c:
         a4:14:38:a0:80:fe:98:3c:09:3a:b7:55:70:73:7e:e0:e8:2b:
         22:e9:da:fd:f4:c2:42:64:b2:be:6f:66:84:e0:d0:92:03:bd:
         6a:c5:53:d3:2e:b0:10:c4:33:52:78:4a:f7:e8:7a:81:25:e9:
         d2:72:9f:2e:69:4b:f5:e6:65:38:5a:f6:01:86:03:a8:71:84:
         ed:fa:79:44:e5:5b:f2:07:97:55:9b:ac:5a:9e:08:f2:a6:d6:
         ed:22:06:3f:2e:60:22:e6:1f:d2:f5:8c:70:9e:cf:36:9c:07:
         74:37:e7:b6:4d:83:f4:4e:4a:8b:d8:20:a5:78:32:c5:bc:d5:
         f3:0a:33:57:60:8d:64:18:f8:8d:0b:55:b8:1c:d8:69:03:d7:
         0b:f3:0a:f9:3c:83:4c:a4:54:16:e7:77:af:bf:aa:e7:d6:8e:
         e0:66:c9:84:a6:f6:96:f3:5f:8c:ec:99:8e:3d:92:9c:4c:ff:
         33:39:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:00 2024 by rpki-client on console-ams.rpki-client.org