Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67cbebac-17d5-3929-b4d2-359890a2d8d6.roa
File:                     67cbebac-17d5-3929-b4d2-359890a2d8d6.roa (raw, json)
Hash identifier:          CVaPySQF74k0Wx/sRIorvdL/BB0Al7I6bh2jetfpx4M=
Subject key identifier:   A2:BC:BC:7C:B6:F6:15:B9:F2:AC:9B:99:89:4E:E4:0F:15:DA:08:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B9871909C9B7D72543870640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67cbebac-17d5-3929-b4d2-359890a2d8d6.roa
Signing time:             Thu 31 Oct 2024 14:16:42 +0000
ROA not before:           Thu 31 Oct 2024 14:16:42 +0000
ROA not after:            Wed 29 Jan 2025 15:16:42 +0000
asID:                     36627
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:87:19:09:c9:b7:d7:25:43:87:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 31 14:16:42 2024 GMT
            Not After : Jan 29 15:16:42 2025 GMT
        Subject: CN=ef24189d-07d0-4eae-bf8b-0cc7cdf5b767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:68:77:77:28:b3:4c:51:c2:c5:21:55:1e:
                    6b:b1:bb:38:ea:4b:50:43:4d:87:23:42:67:38:b5:
                    ae:24:1f:9b:39:56:6c:27:ab:b4:de:20:83:99:51:
                    da:78:4b:2c:2a:0e:2b:2a:53:08:47:f7:8f:35:78:
                    9a:66:9c:22:dd:bb:11:49:9f:2b:1a:a8:a7:6b:61:
                    a2:35:c1:46:b9:9f:33:80:1a:c4:75:83:44:6a:42:
                    d3:7e:6a:88:52:ae:de:56:0c:e3:1c:db:0b:37:5d:
                    08:c0:3c:41:1f:77:7a:ff:9c:14:35:54:24:9f:40:
                    77:a0:fe:d5:cb:36:21:7c:cf:6a:3d:22:03:0b:f4:
                    83:32:78:d7:7b:e8:f3:0e:18:c3:ea:56:91:4b:e3:
                    e0:13:82:9a:35:e1:01:eb:9b:ed:c2:96:d9:3b:8e:
                    b6:c6:74:16:1d:77:0b:29:9b:8d:e4:ea:c4:17:86:
                    a4:91:27:9c:8f:56:0b:99:c7:b8:d3:18:8b:06:6f:
                    c7:bd:7a:e9:4b:ee:37:20:57:0b:57:01:80:3a:53:
                    05:d8:15:42:c8:14:ac:f9:cb:2b:42:33:c1:96:3e:
                    95:ef:f1:b8:26:23:2c:22:12:3f:4a:cf:ff:a4:94:
                    e7:88:1a:67:ba:00:76:f5:65:0e:54:2a:29:b9:5b:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BC:BC:7C:B6:F6:15:B9:F2:AC:9B:99:89:4E:E4:0F:15:DA:08:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67cbebac-17d5-3929-b4d2-359890a2d8d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:68:7b:6b:2c:95:03:6b:27:48:45:75:fb:cd:0d:ac:9f:15:
         47:0e:f7:a9:40:57:50:83:12:6d:19:fc:56:e7:21:ae:35:bc:
         62:b8:90:cc:77:05:7b:f8:55:d6:51:5d:10:ce:26:14:08:57:
         1d:9d:1c:7d:f6:ea:fd:68:f1:f2:dc:66:98:f2:d4:86:32:86:
         d7:f8:ca:5a:fb:36:c5:01:ce:31:fb:d3:e3:89:1c:7f:89:b3:
         84:33:89:f0:37:06:7d:75:4e:af:b8:fc:85:dc:31:57:97:06:
         dc:69:75:97:09:3f:8d:38:41:76:cd:64:71:1d:a4:38:b4:d6:
         e9:14:50:b8:86:fb:f9:28:f4:4c:cb:73:d1:40:4f:11:34:76:
         c0:5d:b5:53:b9:58:c4:14:cc:1c:f9:5e:1d:3d:d6:d7:96:6c:
         0e:17:e3:ef:7e:ef:3c:53:bd:ea:8d:ce:76:9f:15:ea:a1:d5:
         53:17:3a:ae:ae:2a:d3:cc:1a:88:85:16:96:bc:cd:10:1d:fa:
         8a:6c:7b:6c:af:5a:f0:c6:a4:7f:d1:b3:a3:33:22:8e:90:ea:
         c5:f2:64:25:b1:74:75:27:86:ca:de:b9:c8:26:30:32:a7:af:
         fd:d8:9d:b9:b6:24:0f:fa:72:11:0f:12:92:4b:1f:63:55:f4:
         7d:56:9c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:32 2024 by rpki-client on console-fra.rpki-client.org