Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/444f2ee3-78b6-3f90-81ce-957671047ee5.roa
File:                     444f2ee3-78b6-3f90-81ce-957671047ee5.roa (raw, json)
Hash identifier:          ZrkaB30dJmTzGPPh12aB/S97ZLCTuK2gvR91oJnZ6/k=
Subject key identifier:   D1:B2:4A:62:C5:F4:C5:A9:AA:6A:FC:B2:2E:1E:DA:E7:C0:30:B3:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A2026E49C6559C7B28CA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/444f2ee3-78b6-3f90-81ce-957671047ee5.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     396577
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:20:26:e4:9c:65:59:c7:b2:8c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=15add764-ca0b-4f1f-9233-81dfe1710caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:53:95:56:d1:82:49:9e:4a:b0:66:6d:2d:
                    6c:e7:65:3c:4d:1a:90:55:4d:b0:2f:e8:c5:5f:b3:
                    47:d9:f9:77:83:60:85:90:67:41:18:aa:33:ab:4f:
                    f1:59:96:d0:40:23:d0:9c:7d:89:54:1f:ed:2c:64:
                    e7:c0:45:50:3f:4f:9b:55:bc:7a:7d:ae:1e:50:fa:
                    57:ad:ce:60:cb:84:e4:07:e3:1a:8a:96:12:cc:0b:
                    1b:97:eb:b3:1a:d0:5a:69:a4:d8:17:94:4f:8f:cf:
                    2d:28:09:f7:87:a8:5f:66:56:4c:a3:32:a6:17:27:
                    d2:8e:63:94:6f:10:3e:e2:a7:b3:62:69:0f:57:b1:
                    a0:7f:4c:d1:8a:b6:b3:c5:fd:a4:58:e0:b6:74:9b:
                    05:78:ea:f1:bf:59:ca:f7:9c:a1:3b:38:09:5f:47:
                    15:a9:af:9a:b4:a1:6d:bc:4e:09:11:8d:0b:77:ff:
                    a7:e9:f4:f2:86:bb:71:86:ab:91:cc:de:fa:f4:be:
                    e4:2c:a4:3f:98:78:97:7d:18:69:24:ae:6f:8a:37:
                    08:71:e9:8e:46:fd:f5:2c:86:91:8a:91:fc:0a:28:
                    88:88:6c:10:69:36:69:79:67:40:89:a4:7d:ca:00:
                    63:11:a9:ca:47:87:5f:01:1f:bb:db:b8:aa:ed:aa:
                    0e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B2:4A:62:C5:F4:C5:A9:AA:6A:FC:B2:2E:1E:DA:E7:C0:30:B3:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/444f2ee3-78b6-3f90-81ce-957671047ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:03:2e:91:8f:05:0e:98:4e:e1:b5:fc:79:a9:b2:d6:3f:80:
         38:62:60:55:aa:f0:76:48:5f:b7:3c:a5:0d:a0:be:fe:4e:cb:
         f0:6e:37:82:87:c2:c6:c0:94:7d:a7:b3:af:97:ea:c9:c2:b6:
         eb:1d:8a:d1:96:52:34:a4:a0:80:42:12:58:6c:79:94:6c:51:
         cc:80:1d:9d:c8:00:fe:f3:f2:53:f0:d8:dd:22:4d:1e:20:66:
         b7:47:ae:4a:14:29:d3:b6:3e:77:a7:97:4d:f1:21:1a:ee:ea:
         52:a1:6d:90:5d:8c:d4:df:99:05:d0:61:92:2a:cc:b8:08:90:
         65:01:ed:af:0a:ab:0b:f4:ee:62:6a:8e:85:d0:29:cb:0c:e5:
         8a:90:d3:bd:9c:91:88:00:08:c1:49:65:7d:80:81:85:16:b0:
         65:ba:cf:d9:7f:b6:11:05:87:51:1a:44:5d:76:8d:1a:82:ec:
         cf:45:c7:36:89:af:9f:ee:8b:d3:19:eb:3b:0a:eb:30:1b:3a:
         20:98:68:86:15:12:a4:0c:05:5b:af:53:4d:5c:8a:13:98:a4:
         cf:68:0f:00:26:12:87:45:06:52:f3:4f:f1:29:0c:c6:b4:c6:
         b1:21:90:f5:2a:4c:73:61:83:fe:eb:a3:b0:4a:f8:7d:61:d8:
         6c:35:a8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:28 2024 by rpki-client on console-fra.rpki-client.org