Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fbd6987-cb77-3827-bb14-43a223ccb83a.roa
File:                     5fbd6987-cb77-3827-bb14-43a223ccb83a.roa (raw, json)
Hash identifier:          5H9tpxfH23GpEvgtYAOYQWyUs9kugfl+LsO3Sd9DlgY=
Subject key identifier:   8B:BE:45:29:98:2B:5E:8E:64:5E:C2:E3:C8:7F:33:A2:86:B8:15:43
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B9871AD0182A6CAAB8ED0F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fbd6987-cb77-3827-bb14-43a223ccb83a.roa
Signing time:             Thu 31 Oct 2024 14:16:43 +0000
ROA not before:           Thu 31 Oct 2024 14:16:43 +0000
ROA not after:            Wed 29 Jan 2025 15:16:43 +0000
asID:                     396586
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:87:1a:d0:18:2a:6c:aa:b8:ed:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 31 14:16:43 2024 GMT
            Not After : Jan 29 15:16:43 2025 GMT
        Subject: CN=5e2b438c-2d99-4e7b-b2c3-925fd5d82e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:69:34:91:3d:d7:24:4d:69:60:78:c0:45:26:
                    b0:be:3f:f0:4f:46:d3:dd:77:9b:02:be:c7:0a:ba:
                    ad:f2:fe:1d:f7:7f:23:bb:1c:2a:28:72:db:9c:dd:
                    da:43:c7:fc:3e:69:2f:30:af:57:2f:2e:57:b0:89:
                    22:f0:b2:42:93:df:6b:ef:b4:45:e4:7f:7c:c6:c5:
                    7f:96:d2:8d:db:95:4d:b0:fa:51:75:67:b1:f1:3a:
                    36:c5:6a:d6:1f:30:67:42:53:1e:c5:52:ef:94:7f:
                    fc:e6:d7:7d:58:3e:78:d4:3b:51:38:d4:1f:3c:c5:
                    1c:4e:f5:14:37:83:3e:34:0d:da:70:d8:3b:82:2c:
                    9f:82:18:e3:e6:6a:af:a9:17:72:48:b7:12:a3:60:
                    99:c0:c0:ce:96:95:35:e0:ae:63:5d:e5:1c:19:a8:
                    ec:9d:bd:06:8e:d7:3e:06:c4:88:9c:26:1f:6f:ee:
                    9f:5d:97:a2:87:67:d6:e8:7c:aa:4e:4b:29:96:41:
                    ba:28:d9:26:80:82:c8:8f:1d:91:3b:63:ad:29:c6:
                    2c:b5:ef:60:be:53:3f:a1:4f:70:6a:df:c8:6b:69:
                    a7:83:b6:73:fa:e1:c4:cc:25:93:73:53:eb:68:af:
                    53:20:be:c3:da:b7:12:c7:d6:83:5b:fd:e7:d4:2c:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BE:45:29:98:2B:5E:8E:64:5E:C2:E3:C8:7F:33:A2:86:B8:15:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fbd6987-cb77-3827-bb14-43a223ccb83a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:76:37:8b:81:ae:11:06:31:08:f0:66:8c:2f:a0:ea:b6:64:
         90:ea:e5:b4:bd:92:bf:c4:a3:94:17:d5:60:0b:31:44:23:90:
         dc:04:98:56:60:b4:a6:8a:5f:3b:89:b7:be:1b:8a:f7:59:9c:
         30:79:36:e8:8f:9d:30:f9:fc:93:ee:b0:73:06:26:a0:08:9c:
         70:45:1f:57:94:de:d1:d6:04:66:4b:54:23:ae:eb:bb:6d:f8:
         57:a0:0d:21:6c:37:96:98:68:fb:32:9a:65:fd:41:29:c7:5c:
         be:67:d6:be:f8:f0:f2:3f:81:dc:22:fc:86:e3:5c:35:f7:d1:
         e4:96:b5:53:41:0a:fe:2d:60:15:2f:eb:3d:14:96:70:16:42:
         cf:08:58:e6:ae:c3:65:9f:d8:cd:7f:e5:d9:81:59:dd:85:5a:
         5b:5d:14:6c:d9:a7:d0:7a:20:a1:e7:99:fa:ef:f7:62:43:d8:
         27:f7:07:67:94:d5:75:f0:8f:dc:02:c8:d1:4e:f0:01:5e:84:
         d0:20:59:c7:11:b7:97:62:22:08:65:90:51:a7:2d:c2:69:3b:
         92:e5:03:dc:35:54:cc:7c:03:75:40:79:1e:61:28:83:05:06:
         85:62:0b:07:8c:41:88:0d:34:23:67:2a:38:18:0f:f4:96:66:
         00:a9:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:04 2024 by rpki-client on console-ams.rpki-client.org