Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bb948a1-c395-3358-99ad-00802b6ca3fd.roa
File:                     5bb948a1-c395-3358-99ad-00802b6ca3fd.roa (raw, json)
Hash identifier:          Pj+B9StwQxEQhpCgQDNgl3e4tRd07mBF8ZAipH8NGcM=
Subject key identifier:   10:53:04:CE:A6:38:46:4D:DB:C8:33:BA:74:D7:70:09:B2:EA:DF:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858477EBCBFBDB063A48525447800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bb948a1-c395-3358-99ad-00802b6ca3fd.roa
Signing time:             Thu 10 Oct 2024 12:52:06 +0000
ROA not before:           Thu 10 Oct 2024 12:52:06 +0000
ROA not after:            Wed 08 Jan 2025 13:52:06 +0000
asID:                     397208
IP address blocks:        192.42.176.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:bc:bf:bd:b0:63:a4:85:25:44:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 12:52:06 2024 GMT
            Not After : Jan  8 13:52:06 2025 GMT
        Subject: CN=384d7ba9-d7ca-4f85-a6b6-410b05629fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:0d:ef:d2:07:ad:3b:18:0c:d4:96:83:43:
                    b5:58:5c:8d:68:da:07:c8:4b:18:8f:86:92:4d:6c:
                    58:17:b5:8a:f3:61:82:b6:3f:42:b5:75:a2:86:7e:
                    01:49:86:6b:ec:b1:1d:d4:1a:70:fe:df:df:93:0e:
                    53:f7:c2:af:f4:c7:20:b5:07:ae:7a:ed:5e:41:b0:
                    a3:4d:19:07:6c:da:81:38:18:39:42:95:e2:f3:a6:
                    b2:2a:87:5e:ff:66:d0:33:b2:e9:fb:fd:c4:90:fe:
                    8e:20:4a:4d:09:ce:f8:b8:3f:f7:c1:e6:b8:7e:c4:
                    96:13:ba:8f:97:e3:0b:08:59:37:db:01:01:27:c5:
                    71:32:1a:45:91:c0:01:53:a2:23:40:8c:12:5c:f5:
                    41:ef:00:be:d6:d7:7f:56:5f:a4:bb:81:c4:4f:33:
                    20:a7:97:84:65:d8:cd:5b:e5:13:15:48:0b:f9:9c:
                    da:88:70:15:97:6e:20:3d:a3:be:a2:11:bd:dd:4c:
                    20:82:9a:43:34:0e:0c:79:cf:a5:b7:77:f8:1d:dc:
                    bf:05:90:ed:24:f5:e5:6b:80:4b:74:b1:80:54:a4:
                    dd:e5:87:7d:15:39:42:78:09:34:d8:8b:28:2d:c8:
                    fb:13:61:fc:0e:d0:f3:9d:d9:67:3e:67:fe:bb:f0:
                    68:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:53:04:CE:A6:38:46:4D:DB:C8:33:BA:74:D7:70:09:B2:EA:DF:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bb948a1-c395-3358-99ad-00802b6ca3fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:94:af:a8:be:df:8f:03:be:91:ce:33:64:00:12:ec:e7:02:
         a1:a2:b2:0a:66:85:bc:42:dd:f8:c9:52:19:b3:a1:25:8f:32:
         62:54:81:f7:3f:e8:f8:9d:c9:cc:7d:ee:a6:e8:bd:b2:48:ed:
         40:77:c8:63:4a:5c:5e:25:46:c3:a0:11:56:75:b5:6a:ec:54:
         b2:77:f2:92:6c:7e:bd:85:12:76:33:30:20:36:e3:06:86:67:
         36:d4:6c:20:89:92:27:ce:d3:ba:e0:06:fa:84:87:7e:f1:d2:
         ee:40:35:c6:aa:c4:47:7c:d0:c6:61:75:79:d6:53:54:e2:bd:
         cc:72:1f:34:1d:6b:e5:fd:5f:4c:1f:74:25:2c:19:64:84:27:
         44:8a:32:a0:ac:5b:4a:29:9f:bd:52:62:9f:19:ea:54:35:06:
         ff:1d:6e:06:94:08:f0:91:1a:f5:0a:c0:9c:fa:56:7e:0b:9e:
         74:5c:90:c5:aa:ad:ac:1d:9e:7c:e5:57:33:58:e4:f9:95:27:
         4f:ee:e4:e5:de:0b:f1:0d:75:b0:bd:79:a3:37:d8:a8:c7:66:
         c0:f0:53:f7:69:4b:53:1d:95:1f:d6:e2:3e:f1:c0:f6:53:cb:
         e5:86:c0:93:bc:83:06:19:78:13:f6:04:5d:69:72:67:ea:23:
         b8:24:b5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:04 2024 by rpki-client on console-ams.rpki-client.org