Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d1f0739-3114-3697-9e83-edf815f7a4b5.roa
File:                     4d1f0739-3114-3697-9e83-edf815f7a4b5.roa (raw, json)
Hash identifier:          6sbOuDEveZi8sfu1/SNjf+i2bn9NAG5EbquZ3PPFgtA=
Subject key identifier:   D1:B4:FE:5A:A3:1D:05:4F:E7:80:74:DB:67:EF:6A:E5:EA:58:4B:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CFD4D2080F2719C053470540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d1f0739-3114-3697-9e83-edf815f7a4b5.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     396617
IP address blocks:        192.81.185.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d2:08:0f:27:19:c0:53:47:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=22e3bc30-2d81-4f9c-970c-b7a14755a83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:13:e9:36:64:de:04:85:05:d5:a3:f8:64:4c:
                    36:1c:80:20:3b:19:7c:a1:2f:12:ac:51:ef:86:e5:
                    d2:48:95:bb:0a:36:62:d5:74:7a:47:24:5d:1f:1b:
                    d1:3c:1a:b9:16:f8:20:b3:69:dd:59:44:a9:42:24:
                    d9:bd:ee:3f:9c:f2:46:61:48:00:34:74:72:5b:fb:
                    6f:87:5c:ea:21:5b:b7:e5:5c:1c:c4:c0:de:5e:ea:
                    b5:bf:78:75:83:33:4b:4e:3c:2a:7b:d5:77:95:25:
                    91:c6:03:9e:99:8d:0c:7f:48:8a:09:89:70:40:76:
                    2a:a9:fa:6d:96:e4:4b:ed:d0:62:5b:33:f6:25:df:
                    25:8a:8d:86:30:86:a6:ed:8c:5e:56:d9:8f:60:50:
                    cd:01:28:47:dd:e3:6f:6e:37:61:1e:40:c7:40:12:
                    45:0f:6d:c2:3c:2f:49:b3:88:a9:37:99:25:d8:fc:
                    e7:16:d3:4a:4d:d4:bd:81:d0:08:ef:3e:50:7e:39:
                    d1:5b:33:c6:f2:47:96:6e:b1:c9:f9:1a:af:16:03:
                    d3:7e:d3:d6:20:f3:2f:89:13:e1:c5:f7:e6:cb:44:
                    56:a6:67:4c:fd:14:cb:99:57:56:10:7e:8e:b2:2c:
                    ac:97:cb:3e:04:83:ac:b2:e9:5e:87:72:e0:88:be:
                    dd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B4:FE:5A:A3:1D:05:4F:E7:80:74:DB:67:EF:6A:E5:EA:58:4B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d1f0739-3114-3697-9e83-edf815f7a4b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c0:1d:fd:cf:e0:4c:ae:f9:20:ba:bf:91:5d:68:07:d7:50:
         fe:cd:16:0e:cc:a0:de:be:ab:97:a1:21:5e:a7:05:19:ed:38:
         6c:fb:78:88:02:4e:8a:14:f2:1a:d4:7e:bc:40:44:8a:5a:af:
         a4:84:b4:89:c7:4d:3f:12:e0:ef:ad:06:d5:eb:0d:70:3a:62:
         cd:92:7d:d5:9d:6e:19:30:1e:fc:b4:f8:42:3a:e6:2f:23:2e:
         9f:42:c6:14:bc:3a:6d:0e:d1:ae:e4:d3:10:fa:75:5d:b8:d4:
         72:a2:63:18:e8:3b:46:d9:84:13:24:2b:cd:fa:6c:51:1a:3e:
         a3:5d:ce:3b:60:24:59:f1:57:6b:e0:3c:09:99:eb:68:ef:cc:
         f5:d3:5b:30:65:ed:9e:fc:67:cb:ba:b8:9b:2d:3f:60:d5:4d:
         4d:7c:28:36:8f:e5:a9:ea:d1:87:05:36:b4:be:99:2e:8c:79:
         55:e1:69:d6:37:81:36:37:1d:96:d6:91:cb:2b:4d:d0:22:bb:
         a6:46:b9:5d:e0:e7:34:3f:45:ca:18:60:0e:66:a8:5c:4a:b9:
         fc:53:ba:9b:80:03:41:93:fd:66:65:ac:7c:c5:8f:9c:09:2d:
         f0:5e:5b:77:5e:d7:16:c6:65:41:31:db:13:26:42:1f:8b:82:
         b8:43:d7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:29 2024 by rpki-client on console-fra.rpki-client.org