Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48b9aaa0-b2d0-324c-b7a9-bfa683aedd93.roa
File:                     48b9aaa0-b2d0-324c-b7a9-bfa683aedd93.roa (raw, json)
Hash identifier:          pa3uUZ3UxIuBMAgJAzSooNdvzlG4qpcESwl31cY8sSc=
Subject key identifier:   9C:6C:FA:E6:0F:20:13:05:30:11:50:89:24:A3:64:4F:02:A9:90:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A25C3754F58BAC583B8F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48b9aaa0-b2d0-324c-b7a9-bfa683aedd93.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     396599
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:25:c3:75:4f:58:ba:c5:83:b8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=243fb073-9c1f-443b-a7a5-52c9c1221017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:0f:fa:38:0f:15:70:1f:0a:95:fa:b5:8e:
                    5d:fe:f5:c3:bd:08:c4:b6:ca:97:b2:57:ba:15:c5:
                    5b:cb:fc:57:8b:f9:9e:ad:6d:8b:e0:f7:7c:09:df:
                    b2:83:d2:03:dd:65:94:1f:3f:7a:1e:b7:7f:37:9d:
                    fe:4b:c8:c1:9e:bd:28:56:58:7a:16:bd:c4:72:df:
                    1c:61:d6:7f:4e:6d:c4:fa:3f:b1:70:34:5a:bb:98:
                    f4:27:e1:1e:b6:d9:4b:30:f7:8c:53:16:bd:75:2e:
                    9e:fa:7d:84:47:a5:a9:f7:e2:20:8d:56:71:43:8a:
                    ae:76:ff:24:5d:93:6c:81:af:41:1f:74:af:46:fd:
                    fe:91:98:ad:10:90:68:c4:b3:61:95:25:2f:63:11:
                    d1:19:f7:4b:49:9d:c3:97:0e:0e:05:22:b9:ce:cd:
                    53:74:20:51:03:d5:ea:66:36:1d:8e:3e:5e:95:66:
                    c6:58:88:7a:4a:d6:18:a7:9a:04:0e:d1:7c:73:08:
                    da:0e:7d:47:e3:fb:6f:4f:e8:1d:16:1a:e0:72:2b:
                    36:96:6a:e9:8b:57:01:43:f2:ba:07:91:ba:00:c0:
                    41:b3:e8:0e:36:1b:10:73:53:5e:c1:92:fc:4b:6b:
                    fd:cf:d3:09:92:f0:42:22:58:c7:c6:ea:ae:12:cc:
                    08:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6C:FA:E6:0F:20:13:05:30:11:50:89:24:A3:64:4F:02:A9:90:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48b9aaa0-b2d0-324c-b7a9-bfa683aedd93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ac:87:f4:b8:75:59:16:39:80:49:80:d7:c4:e4:9a:58:bf:
         19:04:fe:f4:0c:eb:a4:32:49:2d:20:b2:2b:e9:ba:7e:75:bd:
         88:4d:ff:cd:4b:7a:f0:2e:0e:75:9e:7e:2d:70:34:0f:5d:a0:
         1d:b8:7c:c9:a7:85:4d:05:7a:28:e0:7c:5a:b5:25:28:02:3e:
         09:cb:95:97:8c:79:15:d7:cb:0c:02:5f:77:c8:14:ee:41:3b:
         aa:55:a3:ae:c2:36:f1:1b:7e:91:1d:a2:7d:46:f9:4f:56:8f:
         ea:1d:6b:cb:f9:97:28:77:93:78:99:5b:99:84:01:6f:45:9e:
         0f:3c:fd:22:41:b2:a8:50:cd:52:fd:b0:02:ad:0e:cb:03:e8:
         34:6c:a7:60:3f:5c:12:b6:10:57:dd:c4:d6:5f:dc:4d:7c:2d:
         a2:c4:2e:14:34:4d:a4:75:a5:bb:76:ae:10:db:95:95:87:16:
         6b:a6:7f:48:23:1b:11:49:59:86:1c:52:19:61:6a:18:e0:84:
         88:2f:8e:cf:9a:d4:8a:1c:d1:6b:13:da:36:31:08:15:37:88:
         09:5a:60:13:a6:31:d9:26:de:e4:ab:74:a0:35:dc:f8:72:7f:
         dd:fd:65:c9:9c:32:5e:be:2a:7a:19:f6:4a:85:51:80:03:e2:
         58:35:f0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:02 2024 by rpki-client on console-ams.rpki-client.org