Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f4e0245-e6da-3e42-a585-d5c1af3b32eb.roa
File:                     3f4e0245-e6da-3e42-a585-d5c1af3b32eb.roa (raw, json)
Hash identifier:          2iOjQlFQaj889TsX3LNuZjQ+I243qBKqYXlWglQ1tHs=
Subject key identifier:   9F:5A:61:49:C8:5A:38:6F:E3:AA:C4:E0:23:63:1B:5C:70:33:D0:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B3EDBB5907A9A86F94CC1CE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f4e0245-e6da-3e42-a585-d5c1af3b32eb.roa
Signing time:             Tue 29 Oct 2024 14:08:39 +0000
ROA not before:           Tue 29 Oct 2024 14:08:39 +0000
ROA not after:            Mon 27 Jan 2025 15:08:39 +0000
asID:                     20362
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:ed:bb:59:07:a9:a8:6f:94:cc:1c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 14:08:39 2024 GMT
            Not After : Jan 27 15:08:39 2025 GMT
        Subject: CN=dd9a5822-6bb3-4dba-a352-ade9d5d8e8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:88:91:19:1c:45:9f:6c:3c:b8:d6:5f:8e:
                    6b:37:b4:66:20:8e:ae:9b:ad:41:42:35:3b:9f:d7:
                    d0:74:60:dc:09:49:d2:8d:05:7f:80:87:ab:b0:94:
                    d9:01:76:89:fe:14:77:59:1c:72:ec:42:0d:17:dd:
                    8a:04:29:db:f3:30:4b:27:c5:32:36:35:db:06:81:
                    a2:32:c2:59:fb:74:8a:24:b1:48:c6:4f:56:04:e9:
                    fc:98:6e:7e:c3:53:5f:ba:0f:fe:21:bd:82:71:10:
                    39:8f:bd:7e:3b:18:b0:a7:28:3f:23:4e:05:62:c1:
                    da:ed:5c:1f:a4:d4:76:57:0a:33:b8:01:dd:91:77:
                    40:3e:9c:82:a6:c1:c8:73:9b:63:9f:83:86:aa:04:
                    08:33:e0:55:e8:0f:ed:38:55:1e:df:81:2a:de:77:
                    61:49:d3:67:9b:72:3d:3e:be:39:9f:84:d7:c5:ab:
                    14:01:38:b0:a0:21:c3:8c:22:1e:cd:0a:ca:8b:e5:
                    15:91:c4:ec:86:0a:44:2c:53:7e:e4:b0:55:1e:d9:
                    9f:c9:e0:24:e0:4d:22:26:25:09:ac:e1:e2:dd:48:
                    8b:5f:2d:8a:33:86:41:4c:f8:45:22:4c:79:e7:49:
                    bd:37:24:aa:3a:96:16:9b:cb:4c:fc:64:ea:30:8e:
                    77:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5A:61:49:C8:5A:38:6F:E3:AA:C4:E0:23:63:1B:5C:70:33:D0:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f4e0245-e6da-3e42-a585-d5c1af3b32eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:7f:ef:a7:3f:ca:28:ce:6e:5c:74:f2:fe:dc:3f:e3:d4:63:
         8a:94:fd:0f:cb:2b:a6:f3:67:2e:b8:14:76:3c:b0:a6:7f:a2:
         e3:4d:d0:0e:53:77:b1:70:f4:e0:d7:ba:1d:95:76:d4:f5:20:
         4e:f0:6c:82:f9:78:50:a9:93:89:ac:10:0f:09:5f:f0:d8:94:
         d3:a7:d2:76:81:74:01:e1:0e:d7:5a:58:bd:84:55:49:a5:f3:
         78:19:10:c2:91:14:3e:0b:3f:5c:fd:1d:f2:76:dc:26:0c:c9:
         31:a7:e3:76:41:0e:fb:0d:4a:e7:22:c8:14:c3:ef:95:49:bc:
         71:22:33:04:8d:cd:8a:c4:96:07:16:8d:29:27:6f:3d:f8:b5:
         29:97:5c:c8:51:68:0c:c0:f3:0f:c7:ba:d2:4b:26:a3:c0:4f:
         6a:aa:25:7e:27:c3:73:85:61:be:ef:da:2f:d8:5b:f8:bd:63:
         8b:af:d2:ad:71:41:c0:19:a0:8b:5e:f0:58:dd:e7:41:b5:71:
         74:1b:e9:fb:56:6a:30:17:6a:4d:21:d8:f0:f2:af:52:bc:d3:
         c7:39:76:97:16:50:d1:51:97:42:60:e7:71:99:32:db:90:31:
         b1:46:13:b0:8f:81:9d:b4:aa:75:75:0a:6f:78:e0:f1:c5:41:
         ae:8a:74:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:02 2024 by rpki-client on console-ams.rpki-client.org