Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/699ee14e-2e16-355d-832f-5e515173ef61.roa
File:                     699ee14e-2e16-355d-832f-5e515173ef61.roa (raw, json)
Hash identifier:          Rs5+1hZm9T26z1ruZhY0TYGZdXs2f0AI7xYPjTXAsU0=
Subject key identifier:   35:BB:07:92:50:2A:04:11:23:59:BB:0D:D3:DB:3A:F9:8E:B1:80:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D138B05A8F1B9BB2750D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/699ee14e-2e16-355d-832f-5e515173ef61.roa
Signing time:             Thu 24 Oct 2024 12:49:53 +0000
ROA not before:           Thu 24 Oct 2024 12:49:53 +0000
ROA not after:            Wed 22 Jan 2025 13:49:53 +0000
asID:                     396564
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:38:b0:5a:8f:1b:9b:b2:75:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:49:53 2024 GMT
            Not After : Jan 22 13:49:53 2025 GMT
        Subject: CN=c8223904-2195-48a8-bcea-5e5f984f4f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f4:f5:bd:bd:34:4a:2c:aa:11:82:4b:a6:c5:
                    89:bc:f1:5e:2d:ae:a9:34:2e:e8:de:a5:75:65:f5:
                    d0:a9:5c:ec:8c:be:d3:d2:af:e2:84:df:66:73:e3:
                    44:3c:10:aa:be:ca:20:d2:35:c5:72:13:a4:99:18:
                    43:a1:d4:75:80:10:eb:78:9b:2e:aa:d3:6d:46:56:
                    f9:07:18:ec:52:73:b2:9d:3d:d0:f0:aa:ed:ae:90:
                    80:18:9a:32:71:04:cb:48:de:19:46:76:92:2a:83:
                    ef:fd:b4:35:cc:f5:b1:65:f0:ff:fa:48:ff:dd:bf:
                    9d:40:c4:76:43:96:40:3f:8a:3b:2f:da:aa:00:5e:
                    c0:a3:eb:2b:7b:40:63:da:24:67:29:eb:bb:b9:17:
                    88:3e:75:81:f7:32:6e:f0:31:56:00:4d:af:32:ec:
                    00:b2:49:82:06:a6:53:e8:51:0a:df:38:6a:c1:75:
                    f5:54:60:b1:26:ee:ad:bb:01:8f:3f:c5:c9:df:05:
                    1b:eb:9a:db:02:f0:01:f0:73:6d:a7:6f:37:ce:0a:
                    a3:40:2d:72:96:23:3d:df:61:e9:78:ac:02:b3:87:
                    eb:b7:6c:a6:96:de:e6:f7:7b:0c:c1:d0:54:62:1c:
                    85:ca:81:90:86:7c:a2:96:80:85:94:95:3d:5c:f4:
                    ce:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BB:07:92:50:2A:04:11:23:59:BB:0D:D3:DB:3A:F9:8E:B1:80:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/699ee14e-2e16-355d-832f-5e515173ef61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ab:f9:11:e6:bd:bc:7f:2f:9a:2f:a1:26:3d:d6:39:c8:a7:
         5a:7c:47:48:f8:c4:8f:9c:3a:a1:f4:58:d1:1a:b9:61:45:27:
         83:35:66:ba:3d:ca:34:c1:83:ec:cc:c7:22:e2:40:9e:17:b7:
         e6:93:27:2c:3c:de:7a:44:d0:1d:20:0e:8d:32:84:0d:59:c0:
         f3:64:44:86:03:aa:23:0e:5d:dd:cf:20:4b:d8:e0:8c:23:7f:
         1c:3c:fb:2a:3c:2c:21:f8:91:bd:c6:2b:39:e8:06:4e:cc:54:
         c0:86:54:6f:56:4f:07:cb:53:8a:a3:5f:ec:cb:77:6b:25:f4:
         42:97:bd:d1:23:bb:0d:4e:1f:c1:d0:52:7a:6f:dd:e5:85:5d:
         54:fa:50:5a:57:be:5c:d3:52:b3:e7:d7:26:25:b5:bd:81:00:
         5d:12:13:34:14:20:4e:bd:d3:4d:c3:4f:49:56:5e:0a:77:81:
         f9:50:8a:23:94:c0:d4:18:b3:f0:48:77:88:e7:5e:cb:5a:3a:
         92:90:70:f5:50:1f:fb:40:ca:67:24:2a:a0:ef:30:15:c0:56:
         bf:c4:1a:84:19:08:41:0e:7e:fb:86:7e:ba:05:88:9f:72:c6:
         8e:83:69:5c:91:ce:11:57:b9:cc:c1:67:c9:6f:da:4d:2c:68:
         a2:3d:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:32 2024 by rpki-client on console-fra.rpki-client.org