Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4098cbd0-9842-33a3-97e3-c1f33675af83.roa
File:                     4098cbd0-9842-33a3-97e3-c1f33675af83.roa (raw, json)
Hash identifier:          XUzQ2hQUI10xj9AFrB+zK6y4smLXtU0ufEHrZCLS4Is=
Subject key identifier:   CA:DC:1B:11:C9:72:75:BE:2B:C0:DD:1C:AB:57:F6:FD:E6:53:01:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A2235471CFE430E7A45A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4098cbd0-9842-33a3-97e3-c1f33675af83.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     396614
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:22:35:47:1c:fe:43:0e:7a:45:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=0e6ec75f-93c1-480a-b3c2-b9521c179a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e7:f7:bb:d2:b3:cd:87:d1:a0:29:a8:7a:4c:
                    4e:3b:39:76:9f:96:c0:79:70:06:e1:ca:3e:03:14:
                    7a:9e:f5:d4:9a:75:63:1d:99:85:1c:83:f0:2e:71:
                    18:3d:ff:b2:59:32:97:3e:c8:13:c6:f1:b2:e3:ae:
                    9e:fb:3a:df:b0:9c:eb:6c:f1:10:30:1f:e4:24:de:
                    07:49:69:b4:02:d2:0c:4c:0e:ef:ae:ce:a5:f8:d5:
                    d8:e9:d8:01:2a:21:5b:b8:8e:d6:a4:90:f1:b4:a9:
                    be:24:98:76:3b:1c:6b:97:f5:b1:14:65:80:ee:94:
                    5b:43:f0:a1:87:28:42:e1:0f:f4:3b:9b:8c:87:e5:
                    72:36:ea:42:0c:c8:64:5f:49:b9:e2:be:35:36:ab:
                    7c:3a:91:2f:4b:f2:70:ba:d2:93:63:b7:39:5a:82:
                    f3:1e:fa:b7:e1:f7:7d:d9:27:a4:8d:4a:f2:c0:e1:
                    c7:ef:c5:58:1b:f5:78:98:2c:60:af:3d:ae:88:96:
                    86:48:23:71:2a:9c:f1:43:5e:19:72:93:95:a8:24:
                    42:4d:dd:b0:9a:47:8d:c8:2e:3e:54:e6:3b:6d:9a:
                    ab:d2:17:9e:3c:35:7a:95:06:b9:94:8a:f3:8c:13:
                    dd:f7:24:29:f8:3d:78:3d:20:1f:d2:28:cc:bd:ed:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DC:1B:11:C9:72:75:BE:2B:C0:DD:1C:AB:57:F6:FD:E6:53:01:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4098cbd0-9842-33a3-97e3-c1f33675af83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:31:30:f7:7f:93:65:8d:ed:77:48:b0:eb:c2:2f:81:97:6e:
         97:9b:c0:0d:1a:ba:01:16:72:30:c9:d5:81:7a:1a:a3:17:c6:
         ca:92:6c:c2:a5:5a:f0:b4:65:09:e9:a9:37:85:69:bc:1f:83:
         8c:46:56:97:ac:90:f8:4f:be:d5:a4:6c:6d:f0:07:55:8c:64:
         26:88:3d:77:90:de:0f:31:64:74:dc:97:e7:0a:06:f4:f8:21:
         fb:34:11:03:06:b2:97:43:7f:d7:60:51:0d:3f:3e:aa:18:5b:
         1b:b7:3a:5d:b9:74:97:91:0d:12:b4:7e:36:3b:c8:53:05:e6:
         6d:bf:88:34:4b:ee:29:03:b7:88:51:85:ec:cf:f7:b2:20:38:
         ab:5f:a3:73:9a:2a:69:60:bd:24:8b:72:6f:02:66:13:85:d4:
         6e:79:22:8f:95:6b:3e:40:9a:d8:ee:ef:b6:3e:79:a3:fa:e6:
         e0:28:5b:07:4a:57:e4:cf:d0:86:a9:ae:70:bf:9a:c0:e4:f4:
         34:7c:98:74:b2:74:77:78:e3:62:3d:6e:1a:08:ab:7a:8c:85:
         e0:6d:31:10:ef:29:d8:b8:5a:2e:52:31:81:0c:5f:20:fd:4c:
         97:f7:8d:c9:fd:50:21:69:7e:0c:aa:38:e0:7f:62:3b:7a:26:
         60:95:1a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:02 2024 by rpki-client on console-ams.rpki-client.org