Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6128aba4-2fe0-37b7-aae8-2f95d2babb92.roa
File:                     6128aba4-2fe0-37b7-aae8-2f95d2babb92.roa (raw, json)
Hash identifier:          Lsc6e0LYe6brpFAzXW1gLZbpGIvjzw7vA6HOTnhVo1Q=
Subject key identifier:   E2:4C:6C:BC:13:53:B1:77:B8:D3:69:C9:C6:40:B0:06:71:26:1A:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476E00EBEA84BD60CB578E9C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6128aba4-2fe0-37b7-aae8-2f95d2babb92.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     396574
IP address blocks:        192.30.45.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:eb:ea:84:bd:60:cb:57:8e:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=8464e64e-0764-4f90-90b7-8c3db98b39aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:30:d1:ee:9f:94:d2:dc:a7:27:23:b6:4d:4a:
                    0c:dc:96:3b:a4:1a:0e:bd:ef:ef:78:53:69:bd:83:
                    8d:53:aa:ba:cc:7b:6e:4e:c2:b0:f6:32:a3:3b:9d:
                    5c:3e:00:82:0a:b3:4e:44:90:f9:be:81:32:a7:b0:
                    7b:d1:ed:5b:4b:96:a0:4a:ab:ff:1c:bb:34:66:47:
                    18:9e:30:87:80:d8:c2:e0:43:85:00:2c:04:4f:b6:
                    9c:97:e7:a6:1d:1a:05:ce:60:17:1e:b3:f0:75:1b:
                    a2:ae:79:33:42:ee:fa:31:db:85:95:bc:b0:7c:35:
                    99:d8:e4:c2:3d:2c:77:63:1a:92:f3:13:85:d6:18:
                    ed:16:21:db:d7:f0:5b:21:1b:67:d1:4a:82:fc:f8:
                    4a:ed:75:61:b7:21:3a:d1:62:aa:45:a6:ba:a8:e3:
                    7a:aa:22:04:a1:21:57:32:5f:08:7e:60:82:11:bb:
                    f3:9c:90:c5:22:cf:60:74:91:3f:85:a2:6b:65:1a:
                    ed:96:45:30:55:2a:3d:ee:3d:10:68:4e:b8:b8:bb:
                    e5:5b:17:21:8e:44:b6:f6:f9:de:c1:81:4e:7e:78:
                    c6:8b:d6:dd:19:e8:68:9b:58:54:4c:20:ca:84:2c:
                    ba:3f:87:74:ce:74:53:0e:24:13:37:e8:d0:aa:9a:
                    ba:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4C:6C:BC:13:53:B1:77:B8:D3:69:C9:C6:40:B0:06:71:26:1A:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6128aba4-2fe0-37b7-aae8-2f95d2babb92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:2f:e1:8a:e7:07:86:7c:b5:07:7d:dc:f2:66:cd:fc:55:10:
         e8:fc:3a:76:03:b4:68:64:27:25:3f:50:13:ec:79:07:5b:28:
         90:10:4a:c3:5e:f9:ca:51:02:ae:df:5e:c8:6d:23:b0:66:4a:
         5d:d0:62:de:07:a1:21:95:15:bc:6e:6b:d7:0b:15:62:5a:2e:
         c0:c1:24:00:36:e2:43:7d:81:a5:c0:9e:54:3a:b2:31:8a:b8:
         b0:bd:cd:bc:47:4d:c0:9d:ab:13:a6:8d:d0:03:1d:ec:cb:c9:
         2d:02:9f:c7:e3:88:6c:77:32:12:ee:41:68:f3:77:a4:e5:2e:
         fb:91:34:c0:75:64:63:5c:cc:35:cc:16:90:4b:b4:cd:b0:3e:
         ce:e0:0d:98:2c:5f:25:3b:e8:8c:cd:88:5d:80:6f:b4:d8:07:
         fb:e0:45:e7:44:57:37:cd:f5:d6:22:15:6f:84:b4:d9:41:99:
         60:d3:ba:6a:52:24:e9:5b:d9:26:a5:fc:7a:13:b7:0e:7f:2d:
         ff:b7:4c:90:8c:63:a8:7d:71:c0:26:73:86:cf:77:03:79:35:
         ed:51:c0:17:6b:12:8b:e5:1e:b1:50:b6:d0:99:4e:ad:af:a2:
         ea:f3:b7:8c:7d:66:0a:21:28:a2:35:50:96:1d:20:1b:a7:be:
         72:f8:8b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:31 2024 by rpki-client on console-fra.rpki-client.org