Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cc0afba-2d71-36f1-811c-71e8b84861f4.roa
File:                     3cc0afba-2d71-36f1-811c-71e8b84861f4.roa (raw, json)
Hash identifier:          QlPOs8MycPoXYVlQI4ydJdoIyn0qG64F3yE8VYW/gdU=
Subject key identifier:   FF:F2:36:5B:03:EE:87:99:C2:36:77:0C:F3:64:CA:88:75:28:9C:B2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476E00EFB7068D9546C38284C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cc0afba-2d71-36f1-811c-71e8b84861f4.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     396573
IP address blocks:        192.30.45.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:ef:b7:06:8d:95:46:c3:82:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=8c8b8840-cc0e-4f5a-a773-2873c64ff646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:00:6b:40:3b:87:23:60:53:66:11:b4:fc:41:
                    1e:4a:28:8c:23:01:a4:e0:47:ae:63:f6:c0:3d:f7:
                    40:a0:fc:64:22:00:1b:16:f5:7d:45:42:08:c2:d4:
                    43:55:fc:01:0d:2f:10:ac:01:a4:f5:02:71:4d:78:
                    d8:01:0a:e2:a8:b3:1c:00:46:e8:bb:59:61:3b:2d:
                    c5:75:c6:44:85:a5:15:ac:aa:a6:fb:0c:61:e1:48:
                    63:61:d2:a3:13:c4:05:53:bd:50:e4:3c:2f:ee:00:
                    58:91:41:f3:3b:16:16:ee:39:8d:b5:28:b2:20:52:
                    a5:20:04:ff:25:97:40:2b:6e:d2:67:01:3d:58:7c:
                    7d:16:f3:b9:70:65:c2:09:fc:57:10:7e:1a:39:46:
                    6d:4b:90:aa:18:35:d3:e1:b9:36:f5:fe:d5:11:b7:
                    59:d7:64:8a:41:e1:28:9f:23:ef:88:08:02:74:aa:
                    18:03:1e:44:8d:d8:18:c6:87:02:72:d1:b4:a6:48:
                    68:00:2f:9e:7d:6e:f6:c2:51:9e:09:46:01:3b:d7:
                    4e:ba:c6:41:9a:64:f7:55:66:32:54:19:e3:2a:5e:
                    6f:25:a8:d9:b6:11:e7:c4:de:8b:f2:eb:d5:c2:41:
                    cf:f4:8e:7a:47:73:92:df:8c:75:57:e6:cb:ba:58:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F2:36:5B:03:EE:87:99:C2:36:77:0C:F3:64:CA:88:75:28:9C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cc0afba-2d71-36f1-811c-71e8b84861f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b6:cd:67:ec:c5:96:1b:5d:cc:b3:df:e7:e3:fa:35:49:21:
         c9:47:78:87:bd:14:6d:42:6b:75:da:c5:97:88:15:29:24:b0:
         72:b9:cf:11:e9:ed:fa:c6:50:19:36:e0:66:ca:fc:a0:84:4c:
         b7:a0:e8:07:bf:7b:1d:40:8d:6b:a3:f6:c3:b1:ec:4c:4e:6a:
         38:f4:52:49:b3:44:6f:8a:2f:35:ce:67:ed:8d:40:bd:d8:28:
         2c:fa:73:47:f0:a1:99:c5:e8:4c:d9:5f:94:81:f4:de:e3:e0:
         2c:44:05:9f:90:c3:79:c7:b1:4e:ff:dc:95:d0:92:04:04:89:
         52:f9:06:5f:33:14:2d:3e:f3:96:dd:8a:16:b6:07:fd:8b:11:
         fe:e4:f2:8d:98:cd:40:af:f7:ee:b5:65:6f:f3:b6:81:0c:b3:
         db:f0:a5:77:70:5e:c5:0f:ab:42:73:42:40:bc:c2:f9:dd:30:
         a7:77:75:6e:4d:f7:f9:03:a2:8b:c4:9c:b8:27:f8:56:43:40:
         94:06:09:37:d1:54:98:85:86:66:ec:06:55:ca:0f:c3:6d:2b:
         a5:f0:3b:b5:58:18:1c:0d:1c:bc:7b:b1:12:df:66:cd:60:c1:
         e0:c9:d5:40:07:25:3d:9e:3d:d6:ea:5d:02:e2:05:09:46:c1:
         32:1a:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:27 2024 by rpki-client on console-fra.rpki-client.org