Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/668d9106-4790-3961-a0b5-54323616406e.roa
File:                     668d9106-4790-3961-a0b5-54323616406e.roa (raw, json)
Hash identifier:          wLGz1oCNcOb6H35EYftjmT22MVvx3cTKP8YgC7kAj00=
Subject key identifier:   C6:54:BC:50:75:18:4F:03:5C:52:56:0F:8B:C6:2C:E1:C5:D6:9F:52
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D13487AD3951A389AA7880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/668d9106-4790-3961-a0b5-54323616406e.roa
Signing time:             Thu 24 Oct 2024 12:49:51 +0000
ROA not before:           Thu 24 Oct 2024 12:49:51 +0000
ROA not after:            Wed 22 Jan 2025 13:49:51 +0000
asID:                     396561
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:34:87:ad:39:51:a3:89:aa:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:49:51 2024 GMT
            Not After : Jan 22 13:49:51 2025 GMT
        Subject: CN=d9e1fdf8-9a5f-4774-8b5e-a4894f4e9fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:a7:1e:3a:2c:86:37:61:f1:9f:9b:4c:94:
                    d9:59:0a:72:f9:3d:5f:74:fa:ce:0f:46:d7:f1:84:
                    0d:dc:07:e1:dc:a6:8d:60:b3:ff:7f:41:76:50:a8:
                    b3:c9:bb:90:f9:f6:54:ef:f8:6b:c4:a7:96:94:10:
                    cd:89:22:85:a2:e0:1c:1d:e7:1d:4a:15:49:59:83:
                    f6:e4:64:50:7f:ba:9d:75:b5:42:d2:21:15:1c:d0:
                    ef:fa:75:95:5a:f7:04:17:e8:5d:1e:42:31:36:2e:
                    d8:89:4e:65:6d:a2:c0:9c:c5:a8:61:8a:cb:ce:1a:
                    07:50:dc:de:17:40:d9:bd:36:60:f8:1d:c9:c2:64:
                    f8:b0:d1:83:66:f3:2c:41:7f:6b:2f:43:10:72:45:
                    76:ec:a2:ec:50:27:51:6a:c4:20:6b:7f:6f:e4:3d:
                    26:86:fc:3b:b8:16:a8:23:5d:39:12:0c:21:8f:ef:
                    0a:7d:7a:65:ed:eb:02:0b:d3:a9:38:f0:7f:5d:89:
                    77:8d:26:17:6f:44:e3:7f:74:e6:84:7f:53:c9:80:
                    c3:e4:85:e1:cc:53:9b:fe:33:bf:f9:8c:9b:ed:5b:
                    7a:52:8e:47:0c:65:22:bd:d4:65:56:11:6d:5a:43:
                    ff:ae:7a:ba:e8:61:65:f2:9c:d5:0e:08:04:44:f5:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:54:BC:50:75:18:4F:03:5C:52:56:0F:8B:C6:2C:E1:C5:D6:9F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/668d9106-4790-3961-a0b5-54323616406e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9b:2d:78:5e:c3:cd:36:85:c4:21:54:39:19:e7:e9:11:ef:
         27:0f:90:55:d2:39:94:19:61:bc:61:92:cb:f3:ad:7c:ce:de:
         ad:a7:35:e2:e2:f2:62:f0:98:94:14:00:43:c0:61:a3:a8:9e:
         ed:0b:d6:b4:62:9a:c5:4c:f9:3f:6c:51:60:9b:ae:27:25:cc:
         61:db:79:6b:49:ff:41:68:b1:c7:f5:34:51:96:c5:4b:25:8b:
         54:f4:9a:5e:ec:b0:1d:50:ec:87:20:fb:99:a0:8e:a6:d2:c5:
         c5:04:48:c1:64:5e:f0:e2:e5:9c:92:ac:e8:03:c1:3b:70:09:
         50:8d:a9:17:f7:a8:5c:68:e0:3a:64:26:b1:2b:23:7f:f1:0b:
         85:3b:36:ed:d1:0a:a1:57:54:25:dc:86:10:ab:85:a5:13:a8:
         b3:77:b5:bd:1a:72:f0:c3:99:99:88:c9:4a:c6:17:05:2c:09:
         32:d9:01:6d:e7:b2:a8:11:d5:b6:8d:cc:a4:e3:ae:e0:2a:8d:
         e4:87:ff:01:1d:2c:59:9a:32:7e:1a:48:fe:43:3c:32:06:b9:
         b5:59:6f:f1:da:91:e0:25:44:dd:1e:a9:cc:34:b5:32:7a:5b:
         02:a4:cf:63:e2:75:c5:a4:7f:f7:8f:78:49:7a:89:db:d5:d8:
         cb:0a:93:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:31 2024 by rpki-client on console-fra.rpki-client.org