Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afea061-aa6c-3640-8d75-8d7ea093f7f7.roa
File:                     3afea061-aa6c-3640-8d75-8d7ea093f7f7.roa (raw, json)
Hash identifier:          Xa7z/F+KDoUc48j58Qp5J6CIR5axZ/6kL8akz6umLL8=
Subject key identifier:   1B:B7:81:15:0E:98:E0:CE:5B:91:28:AC:34:0C:EA:BB:FB:24:B8:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476E00F76A1BDFDAF7D92CA580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afea061-aa6c-3640-8d75-8d7ea093f7f7.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     397197
IP address blocks:        192.30.45.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:f7:6a:1b:df:da:f7:d9:2c:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=a03635b8-d6f7-45ba-b8f0-57d149bacaf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:37:e5:86:42:26:3d:04:35:63:a4:88:26:24:
                    eb:45:78:8c:1b:d7:01:bc:52:d8:aa:a2:b8:f0:9b:
                    3b:d6:9d:de:40:83:b8:55:17:4f:cd:74:b4:94:51:
                    40:fb:4d:22:a6:fa:a2:07:cd:d5:0b:c0:63:43:72:
                    46:d0:11:d7:ca:5c:88:22:6b:e0:45:58:b3:2d:f7:
                    f1:97:31:47:9d:bd:4d:3e:ee:58:95:33:6c:18:c3:
                    a8:74:cc:bd:b3:8f:4a:8f:63:ba:a5:f9:84:ed:d8:
                    9c:2b:84:59:f0:6b:c6:c5:29:fb:38:0d:ef:b5:ca:
                    a0:8b:00:e2:fc:ad:8b:86:8e:78:f5:d0:91:3c:b0:
                    2d:56:0d:f7:4c:2c:56:3b:ee:0e:ba:76:7e:c6:65:
                    79:d3:56:63:77:40:13:d0:bf:5d:0b:23:1a:7f:3b:
                    9a:09:c6:9d:24:06:4a:67:53:26:af:1a:6b:b9:a5:
                    ee:20:a3:7d:a9:c8:10:1e:3c:db:eb:c9:c2:2c:05:
                    f9:c4:d0:45:26:52:64:86:9e:bf:32:7c:1e:01:2c:
                    a0:85:a2:07:6b:bc:ef:84:c0:5e:11:55:62:89:a5:
                    ef:8a:cc:03:2e:a8:f2:80:80:ba:4c:13:ac:7a:65:
                    d7:a3:55:a9:be:91:a6:d6:8f:f6:8d:79:8e:5c:df:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B7:81:15:0E:98:E0:CE:5B:91:28:AC:34:0C:EA:BB:FB:24:B8:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afea061-aa6c-3640-8d75-8d7ea093f7f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:78:ed:b7:30:52:8d:45:b0:2d:8b:2d:d4:70:1e:4f:8d:86:
         09:6d:35:96:e0:e8:ae:56:1b:27:df:3c:dc:d8:8c:a3:58:c4:
         39:49:d2:65:77:7e:3e:8f:fb:f4:30:7e:99:de:44:99:28:99:
         02:94:1e:9c:e3:5c:49:52:2f:cc:63:1b:d2:bf:a1:64:89:4c:
         53:e3:3a:4e:8f:17:2a:e5:d4:76:2a:53:25:f5:5b:34:64:db:
         30:4c:c6:33:06:d8:60:65:d7:78:76:3d:c6:b0:2d:f4:13:de:
         62:57:7a:a6:29:10:2d:80:f0:c8:09:ed:5b:d4:d2:7e:2d:88:
         51:53:5a:ae:4d:24:19:a7:35:52:ab:7a:f5:70:25:5a:23:70:
         f9:68:d6:0a:f8:74:44:1d:d9:20:2a:7f:cc:ff:72:02:fb:04:
         24:cc:d1:b2:38:39:33:ad:21:22:70:cf:fb:6b:71:41:bc:ed:
         2e:9c:ff:23:d7:98:13:fb:ba:e7:dc:19:03:a0:04:f4:81:b5:
         84:39:67:ca:94:03:c7:9f:57:7a:c6:02:9e:89:20:b8:13:fe:
         df:8e:95:c7:c2:55:3c:78:88:77:9c:6b:f0:4c:62:73:3d:46:
         5b:36:3e:b1:d0:e2:ad:86:ef:c8:86:1d:02:dd:f9:7c:f4:77:
         24:2d:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:01 2024 by rpki-client on console-ams.rpki-client.org