Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/543a0e32-9c66-3abc-955e-e3cbab7b7c6e.roa
File:                     543a0e32-9c66-3abc-955e-e3cbab7b7c6e.roa (raw, json)
Hash identifier:          gSrUfMMAp6u8X5q/Li/bxNg7Q2insyyFKurqjvp1eFU=
Subject key identifier:   92:E8:5F:75:6D:7C:06:74:FC:C3:BB:5A:CB:63:60:A2:B7:62:E8:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476E00EF52BD2608B1C57E0500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/543a0e32-9c66-3abc-955e-e3cbab7b7c6e.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     396617
IP address blocks:        192.30.45.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:ef:52:bd:26:08:b1:c5:7e:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=8a850819-09b4-40f6-b5ed-6f7459fb365d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:2e:35:87:e5:ec:cb:ba:15:d2:5d:dd:2a:
                    da:1f:63:73:93:63:d8:20:fe:b6:ba:12:92:41:ce:
                    61:45:0f:19:f4:04:a5:91:d5:70:85:c1:98:32:87:
                    67:07:9b:fb:70:a8:e8:d7:1b:dc:97:63:e7:5d:3a:
                    b7:71:27:41:2a:1b:83:ef:4f:71:b5:bf:4e:40:28:
                    6d:30:b2:01:c6:77:7e:0f:ef:72:fd:40:14:b8:28:
                    be:a6:c3:20:e5:39:f8:c9:39:d4:95:05:e9:86:9e:
                    a9:6c:4c:1b:4f:a1:0e:02:fd:59:66:47:bd:9d:63:
                    ec:3e:0f:fd:cb:8f:f1:19:57:59:41:ee:b4:a7:df:
                    f8:7b:3f:8e:6f:f1:a2:9b:42:ab:90:6d:ba:26:90:
                    54:e0:79:fa:73:0a:9f:7f:93:51:a1:c2:cb:ef:11:
                    38:24:44:d2:4d:44:bb:d6:57:67:c5:94:6e:25:ec:
                    59:64:aa:70:fc:8f:72:fc:c9:94:0d:43:d8:af:2a:
                    56:12:52:cb:3e:46:d2:28:a5:3a:22:38:53:5f:f3:
                    56:cb:36:94:21:2e:4e:e0:1b:b0:e9:3c:1f:d9:44:
                    01:74:7c:c7:b7:dd:5f:b4:e3:79:c6:58:fa:d1:87:
                    88:6e:73:6b:6c:f3:c5:4f:83:c1:e6:ac:23:c7:4c:
                    c9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E8:5F:75:6D:7C:06:74:FC:C3:BB:5A:CB:63:60:A2:B7:62:E8:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/543a0e32-9c66-3abc-955e-e3cbab7b7c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c8:8d:0b:61:14:2e:79:72:93:78:d1:8b:5e:c2:a4:ab:e9:
         70:80:7f:5b:83:bf:31:72:3b:f4:0e:cc:ed:50:c9:f5:3d:4c:
         a0:16:e7:fe:24:41:ea:a6:24:8a:c3:52:a5:e4:e9:10:35:08:
         19:bd:de:48:e7:61:44:19:7a:95:c2:f6:3e:56:f9:eb:6f:cc:
         03:99:d3:e8:56:60:c9:79:ac:d7:3d:f0:ac:37:33:23:b3:27:
         3e:de:f9:16:0b:20:57:fe:6b:11:4f:40:7d:10:2d:8d:b0:8d:
         40:63:cb:19:b4:13:0a:3e:34:aa:49:80:87:35:79:e5:3c:f2:
         1b:2e:4b:b2:19:32:ff:f4:36:7b:8f:89:73:7a:dc:47:72:13:
         59:bc:c9:5a:8f:93:ca:72:47:83:5b:f0:0d:7f:aa:63:1e:53:
         0d:ee:7b:06:3e:fb:fc:34:88:21:2b:91:66:5a:95:cd:d1:82:
         1d:ff:fb:38:e4:f5:e6:48:2b:ef:0b:c7:a0:8c:2b:4d:9e:f5:
         43:5d:22:fb:35:79:a6:1c:bb:5b:6c:91:ba:54:38:ff:90:c0:
         4c:e8:cf:b9:21:76:8e:73:08:90:dc:b7:bb:8f:28:8c:5c:af:
         af:99:08:d3:cc:29:41:f0:d8:25:ac:6a:55:54:5a:98:b6:cb:
         d9:e9:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:03 2024 by rpki-client on console-ams.rpki-client.org