Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c1c628c-b3ae-3b38-80a5-1f5d8f38081e.roa
File:                     5c1c628c-b3ae-3b38-80a5-1f5d8f38081e.roa (raw, json)
Hash identifier:          MU1k2exRuTWvEqt1a4Lh13EcijZ2gSWmxzotGOUjiSY=
Subject key identifier:   01:6F:A8:EB:81:4F:EA:A7:7B:74:6E:58:96:EF:40:1A:07:BA:1A:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584787211B5D43E1176422BFC940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c1c628c-b3ae-3b38-80a5-1f5d8f38081e.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     397200
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:1b:5d:43:e1:17:64:22:bf:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=be1741a9-8b50-47f4-abdb-aecc90656ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:b6:d0:9f:20:36:cb:6d:08:d1:07:58:57:
                    7b:36:50:a0:31:99:e5:e1:90:e5:63:0d:e8:51:12:
                    29:30:d3:f5:f8:0d:f5:69:63:ee:97:af:ef:39:4a:
                    73:aa:b3:10:d3:3e:14:89:53:c9:88:13:44:bc:81:
                    33:fb:db:b4:0f:f5:6b:c3:be:1a:15:83:a3:36:4a:
                    81:71:7c:29:fd:a1:6b:97:e2:f4:54:90:12:3b:38:
                    39:60:a2:39:39:9a:fe:c2:47:29:d9:d2:5f:03:fc:
                    d3:56:c1:97:79:88:84:bf:e2:e0:48:80:bf:8a:8d:
                    7e:8a:2b:85:b5:1c:f2:7c:99:5a:4e:e4:4b:1b:85:
                    86:42:15:ac:90:5c:e2:61:2e:65:a7:c1:05:db:af:
                    4b:26:a0:5a:90:99:9b:e5:cb:bb:22:68:67:59:c4:
                    2d:b1:d4:eb:46:68:73:83:db:fb:43:93:6a:bc:41:
                    cb:31:c9:d4:72:62:6d:9a:fc:db:8c:98:e6:85:72:
                    91:d9:1c:83:9f:7c:c1:0d:75:f9:b4:7b:dd:a0:33:
                    a4:81:4a:a6:b1:8e:b5:d9:51:df:02:e1:d4:d5:0e:
                    2f:86:9b:41:dc:78:6f:d9:6c:8a:b9:da:ae:d0:0b:
                    13:10:66:67:f0:df:98:ed:42:c9:5c:88:8d:d3:f0:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6F:A8:EB:81:4F:EA:A7:7B:74:6E:58:96:EF:40:1A:07:BA:1A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c1c628c-b3ae-3b38-80a5-1f5d8f38081e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:19:05:47:69:fe:50:38:fc:d9:3b:c0:52:02:2e:1b:28:11:
         98:ba:d4:19:a2:f8:d4:5c:f4:69:38:94:00:7b:0f:2d:8e:74:
         0a:7e:c2:5d:d7:5f:c0:83:12:30:bf:60:02:fe:3a:aa:58:fd:
         ce:02:13:a5:b9:fe:8f:af:af:6f:a7:53:73:67:43:72:a1:71:
         f9:be:60:ac:44:d5:4b:66:45:fe:00:99:25:dc:ed:22:c1:31:
         4b:2d:f0:12:0f:f3:9f:67:c7:8f:62:66:af:86:f9:f7:67:03:
         22:b5:69:18:b8:42:4d:55:4d:83:29:0e:59:e3:23:8c:80:6a:
         cd:1a:aa:96:32:8b:78:25:63:f1:9c:11:75:f9:e7:e6:2d:10:
         9c:8e:15:81:59:6f:7a:d6:67:ab:ea:93:1c:4c:f0:8a:38:3f:
         c7:4a:66:ff:c7:a8:99:ec:ae:32:a1:44:37:8e:63:50:2b:cc:
         e0:d2:c1:54:05:10:c7:5b:a0:54:bd:e0:b6:dd:c5:dd:92:57:
         bd:84:34:55:25:a1:72:d6:7a:c3:1a:49:e8:d9:48:1b:67:01:
         e2:62:39:34:3b:c9:ca:e0:54:d7:98:6a:95:9a:5f:4e:50:60:
         6f:8e:ea:50:11:8c:f1:c8:e2:c6:f5:12:5d:61:24:a7:60:16:
         01:35:52:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:04 2024 by rpki-client on console-ams.rpki-client.org