Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56851f60-e76f-35d7-9c58-d23db15d7e4d.roa
File:                     56851f60-e76f-35d7-9c58-d23db15d7e4d.roa (raw, json)
Hash identifier:          qYCI10NvC6SmM/fspgcsSfdWAE+gREW65evj6fG7VZo=
Subject key identifier:   25:55:21:46:98:C2:40:41:E2:E5:69:52:51:B7:8A:29:62:BF:94:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476E00F36C40F7D0A85F7704C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56851f60-e76f-35d7-9c58-d23db15d7e4d.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     396570
IP address blocks:        192.30.45.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:f3:6c:40:f7:d0:a8:5f:77:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=c232e45b-6353-4cd7-9e64-45ca1e3667d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:cd:e2:71:2f:f0:b4:e7:a2:d4:37:4c:4d:
                    7d:de:70:75:57:66:53:68:15:e1:33:41:92:84:66:
                    f9:d3:b9:a0:cc:f3:97:80:39:9b:3c:1f:c1:4d:fa:
                    bf:d7:2d:d1:95:a7:b9:b2:2b:f0:0e:56:9b:e5:e4:
                    91:69:f3:b0:f4:47:ff:f3:2d:76:89:f1:11:f1:a2:
                    6d:40:db:bb:a7:e6:5e:d6:0a:f8:83:a0:ee:ff:42:
                    a3:83:34:0d:21:9a:cf:ea:d5:1a:6b:51:55:59:f8:
                    87:5c:2b:66:c9:c5:fc:d3:c2:ae:98:e5:78:4a:c4:
                    12:eb:64:78:43:28:2d:2a:59:99:6d:cf:67:4b:9d:
                    fe:20:c2:aa:ea:b6:bf:f0:05:04:f0:98:1b:56:3b:
                    a6:fd:9f:6f:1c:f7:40:28:1b:1e:49:2c:0d:67:5b:
                    99:05:6e:9b:9a:5d:f2:cb:ae:b8:19:10:4c:49:66:
                    c7:53:7f:56:d2:be:56:8d:1f:71:6b:68:da:06:08:
                    47:39:ec:45:89:5c:b3:61:b1:93:4f:76:5f:94:26:
                    a0:f7:e7:30:30:6f:4a:87:b6:20:99:21:73:46:0a:
                    e8:61:10:1e:43:4d:6f:24:15:85:6a:1f:a6:2f:c9:
                    71:b1:7d:c7:a8:7b:3b:eb:dd:b0:7f:cf:22:75:d6:
                    e8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:55:21:46:98:C2:40:41:E2:E5:69:52:51:B7:8A:29:62:BF:94:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56851f60-e76f-35d7-9c58-d23db15d7e4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b5:3a:6c:e5:f7:3d:c8:62:4d:a8:e7:3b:20:03:66:29:bd:
         21:62:31:9c:95:53:1f:70:bc:85:ca:23:83:bb:67:84:76:e0:
         16:e6:85:d6:89:f4:be:f1:be:0c:62:cc:67:11:96:03:77:7c:
         3f:9c:22:93:54:3b:2e:e6:6e:9a:0e:f9:c2:9a:d9:7d:55:00:
         e0:2d:97:58:cb:7b:f8:01:99:54:89:5d:d3:83:d2:95:89:91:
         dd:89:0d:b4:d2:c8:45:09:eb:0b:23:76:89:0e:c6:e2:10:90:
         74:c0:46:da:d1:50:78:6d:98:1b:1e:aa:e9:af:2a:4a:54:7e:
         b6:b5:33:f3:a1:42:ab:eb:ca:99:6e:0d:87:1f:45:59:5a:93:
         fd:58:60:52:10:3d:40:7d:f6:65:64:96:f5:03:8b:06:bc:32:
         d0:84:0b:3b:d4:4a:1e:ef:69:6f:64:ba:31:52:2f:0b:5f:92:
         af:a5:73:e7:b1:2b:63:76:d9:d4:a6:a8:83:31:35:6e:66:58:
         47:73:fd:8e:96:4b:7d:56:30:0d:0c:62:fb:b8:e0:dd:a8:55:
         bd:6e:17:ec:d1:dd:90:16:8b:9e:13:bd:2f:2c:55:90:ff:11:
         d4:b1:83:7e:e9:b9:fa:9b:39:78:65:e0:b5:71:08:6d:41:be:
         7a:05:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:30 2024 by rpki-client on console-fra.rpki-client.org