Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/388b87e9-5953-3d76-b455-2ffb4a0b5a1f.roa
File:                     388b87e9-5953-3d76-b455-2ffb4a0b5a1f.roa (raw, json)
Hash identifier:          loWofKYVG06AN4Nqfhgvw5QqJ+zXFereP2/vs+DwNoo=
Subject key identifier:   1F:D2:10:86:02:E6:8E:0E:D4:44:E2:B0:0C:8B:5F:AF:2A:50:74:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CFD4D02C121B2EF1D2603E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/388b87e9-5953-3d76-b455-2ffb4a0b5a1f.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     396612
IP address blocks:        192.81.185.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d0:2c:12:1b:2e:f1:d2:60:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=7a15468a-1ee0-4b59-b5ec-d040b27b77d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f1:ff:4d:74:a3:ec:78:ee:de:d8:c4:41:5a:
                    f1:fc:36:60:71:da:ef:89:fe:9c:a2:ea:fc:aa:87:
                    8f:74:99:c2:57:c3:e5:53:43:cc:aa:dc:a3:1f:12:
                    72:39:6e:17:b1:e6:2e:be:f7:32:09:5f:3b:f8:bc:
                    ee:7c:03:c9:e5:51:55:47:fc:4f:93:e3:1c:30:c2:
                    3c:77:78:40:78:a1:85:54:16:1c:ab:d7:89:e8:a6:
                    62:ae:82:9b:ea:08:4a:f2:46:fe:fb:1f:64:98:5a:
                    91:c3:01:68:67:e4:74:c2:56:04:c9:a6:37:2a:09:
                    0d:e2:63:2e:47:37:66:9b:4a:b0:f7:1f:2b:72:d2:
                    38:46:86:22:fe:a1:29:dc:97:ab:06:f4:bd:ee:30:
                    5e:48:10:e2:25:2e:9e:36:95:7e:89:81:3b:c9:2d:
                    9b:18:84:7d:4d:89:a8:1e:93:24:16:6a:28:2b:ca:
                    85:68:46:5a:ce:96:b0:5a:11:f0:dc:53:cd:3d:2d:
                    d3:da:f1:bd:a6:06:04:32:31:85:8c:6b:0d:d1:5b:
                    ed:68:23:31:92:c7:59:c4:39:e8:a4:d7:0f:ec:03:
                    83:cd:df:19:e6:c5:8f:c0:22:00:66:c5:35:e0:6d:
                    ee:0c:ac:2a:97:25:b1:47:f5:25:ad:f3:e9:8c:98:
                    73:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D2:10:86:02:E6:8E:0E:D4:44:E2:B0:0C:8B:5F:AF:2A:50:74:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/388b87e9-5953-3d76-b455-2ffb4a0b5a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a6:c6:38:e2:2c:59:9f:e4:f4:e7:e7:ef:0a:9a:09:18:8e:
         fc:2a:25:d7:a3:ab:00:3c:e6:a4:ee:31:23:31:6b:75:45:eb:
         95:cb:59:af:bb:89:ad:ec:5e:79:92:2b:d1:6f:d9:c2:c9:25:
         72:7c:5e:f7:4e:9d:3a:a8:f7:b2:4b:86:22:76:3f:23:e7:ba:
         45:ce:f0:fb:8b:c7:54:3a:a4:f2:84:8c:18:bc:b3:f2:51:fc:
         a5:a9:eb:eb:8a:76:6c:af:d1:3a:b1:ab:a6:bf:6e:8b:b1:44:
         d5:48:86:f6:72:80:f6:89:b3:c3:99:54:45:29:01:16:f8:1f:
         86:40:7d:5f:69:8a:5c:02:85:a1:d1:26:3f:94:51:a8:fe:fa:
         cd:e5:fc:32:2b:b6:46:fe:61:ff:27:42:72:5a:b8:63:b7:df:
         8d:c0:49:6c:23:84:0d:e0:fb:b6:72:18:48:b2:1c:f4:2b:57:
         01:55:c2:46:90:05:68:ea:ac:25:c3:6c:11:c8:c6:93:48:00:
         94:18:b0:ea:e7:a3:54:d5:be:aa:7a:1c:d2:39:91:bb:61:eb:
         33:91:cd:1b:21:1d:f2:f1:72:91:76:5d:8f:c9:3b:8d:33:58:
         63:d6:cd:b8:fd:1f:58:93:72:f8:0e:d0:47:15:7d:27:bb:06:
         ec:f7:4b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:27 2024 by rpki-client on console-fra.rpki-client.org