Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cd0cc8d-3825-3417-b428-160f7d534f0c.roa
File:                     5cd0cc8d-3825-3417-b428-160f7d534f0c.roa (raw, json)
Hash identifier:          AfYWfrkv4ZQfbRMUusdQWgofzK4iF3Na/QrVj6YDD3c=
Subject key identifier:   55:DD:91:12:7C:39:13:74:55:6B:AE:89:AE:1C:C5:0C:0E:0C:43:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584787211B082CAFED8998B2BD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cd0cc8d-3825-3417-b428-160f7d534f0c.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     396545
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:1b:08:2c:af:ed:89:98:b2:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=87c8cd2c-6fad-4604-9e11-978479601bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cd:59:e4:d7:8c:f2:65:73:87:6a:ca:a4:17:
                    f7:74:7a:29:b4:ee:3c:60:85:9e:0b:0e:ba:f6:6c:
                    9e:e9:ca:2a:e9:17:d3:ef:48:fc:20:87:fd:ea:3c:
                    4d:9f:2c:9c:97:3a:4f:75:13:8d:6f:6d:5a:73:35:
                    3e:93:d3:24:9a:96:3e:37:a0:03:01:1b:af:f8:1c:
                    3e:5b:3f:27:da:92:9e:95:78:69:72:2d:23:33:28:
                    3c:1a:82:03:d0:9e:ce:1f:35:b4:33:d1:dc:b5:f7:
                    8b:8c:1f:27:96:f7:d0:49:be:01:a2:17:df:22:50:
                    3b:e1:3a:79:01:4b:6d:e2:40:bd:e4:c4:a3:8a:49:
                    b2:36:4e:06:80:13:18:f4:81:e6:89:27:c4:3f:cf:
                    c4:4a:a9:f2:e5:4a:11:c1:a2:52:1a:ea:ae:bf:3c:
                    09:c9:cb:a2:a2:20:22:58:82:6f:9f:5b:bf:cf:08:
                    ae:fc:29:12:fc:8a:ac:96:70:20:96:e9:95:f2:16:
                    79:ff:42:e2:7f:2c:87:cd:2d:41:f1:22:be:35:24:
                    3f:54:93:7a:99:0b:52:3d:f2:2e:c9:33:1a:43:b1:
                    b0:a0:c8:1f:18:a8:a2:d8:53:7d:be:80:df:a9:39:
                    b8:db:80:32:f6:ba:0d:ea:3c:7f:d7:f4:f8:bf:96:
                    a5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DD:91:12:7C:39:13:74:55:6B:AE:89:AE:1C:C5:0C:0E:0C:43:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cd0cc8d-3825-3417-b428-160f7d534f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:9b:4c:e4:10:28:10:aa:88:8d:c0:27:95:44:fa:aa:e7:6f:
         c4:6f:51:b2:a0:9a:c2:6d:73:b2:88:07:68:1a:51:1a:00:a1:
         a8:e8:5f:43:f7:0a:82:97:af:0d:9b:cb:2f:01:7e:e0:60:14:
         59:75:8b:50:a9:a2:8e:51:df:cd:59:a1:6c:a1:60:5f:05:05:
         b2:77:9e:a8:78:5f:9f:84:10:63:bf:e9:1e:8e:6a:58:b5:a0:
         5b:32:5a:c4:88:a4:75:ab:04:28:a7:82:7c:12:94:7d:d0:51:
         3b:a4:7d:06:c7:94:7f:6b:13:36:d5:43:41:90:0d:b7:ce:3e:
         4c:64:88:d7:76:a1:d2:3f:db:49:1a:e3:48:cb:ee:e4:6a:aa:
         c5:af:7b:ca:82:2a:ee:7e:c5:88:aa:cb:7e:e3:3a:2c:9a:54:
         ec:d5:5f:7a:26:a1:69:88:eb:03:c9:b8:03:c2:dd:ad:dc:68:
         77:c9:ad:4c:09:4c:a4:49:40:6e:7e:45:c9:76:d8:4d:5a:47:
         03:13:d9:2c:fa:ba:bd:f9:fc:ba:bb:e6:ab:4b:01:cf:7c:48:
         16:3b:56:93:1a:8a:b2:7d:0b:a3:d9:3d:40:d2:3a:d2:e0:4f:
         39:ae:de:e9:f4:cf:c4:d8:d2:ef:74:4d:74:b7:6e:f2:d0:0c:
         23:cf:11:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:31 2024 by rpki-client on console-fra.rpki-client.org