Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e1d795b-722c-3c57-a4a2-c2e8f7f07d88.roa
File:                     6e1d795b-722c-3c57-a4a2-c2e8f7f07d88.roa (raw, json)
Hash identifier:          OZT6ztoys/2szH5FN6pqv/YQqHm+/KSiaBHRSqUWJPQ=
Subject key identifier:   F9:5F:E7:8D:62:EA:A1:16:F9:26:69:BF:0F:EA:71:AD:E6:47:0A:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B987138ED3079489CE2EAC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e1d795b-722c-3c57-a4a2-c2e8f7f07d88.roa
Signing time:             Thu 31 Oct 2024 14:16:39 +0000
ROA not before:           Thu 31 Oct 2024 14:16:39 +0000
ROA not after:            Wed 29 Jan 2025 15:16:39 +0000
asID:                     396583
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:87:13:8e:d3:07:94:89:ce:2e:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 31 14:16:39 2024 GMT
            Not After : Jan 29 15:16:39 2025 GMT
        Subject: CN=10868522-4752-4fde-b1b4-850226d2fb80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f6:7d:3d:b2:9b:05:10:0d:e9:d0:f7:ec:07:
                    11:9c:1f:d4:0c:6c:a9:9c:2a:4e:1c:82:d6:7f:82:
                    2a:92:a9:34:74:d1:c5:12:82:3c:a2:86:19:63:eb:
                    20:38:27:6f:5f:e0:c4:d9:ab:4e:96:a0:12:1d:1f:
                    83:b7:8f:5c:ba:80:68:f6:2d:62:a6:c8:a4:01:7a:
                    3e:ab:68:5b:ef:de:73:db:d7:67:f7:b3:dc:07:4a:
                    41:9a:c6:2a:25:66:2e:6b:19:a2:f4:6c:d1:b8:8a:
                    e1:2e:ef:9f:26:ea:8c:b2:fa:52:31:dd:3f:c4:c5:
                    a0:a4:71:b5:9b:ca:9e:0f:92:bf:2c:dd:b4:4e:f0:
                    51:aa:75:c1:c6:c5:02:2d:12:43:a4:56:85:f9:bc:
                    1e:52:e2:ee:6f:9b:fe:49:0a:53:8e:8e:29:e3:a3:
                    63:ad:36:9e:3b:4a:eb:2d:6e:73:90:93:89:22:c0:
                    37:82:f6:93:6a:c8:f2:5a:f4:a8:91:5f:ec:87:b7:
                    dc:9b:ba:51:1d:f4:d2:3c:0e:53:79:61:05:35:8b:
                    97:71:eb:03:2c:f0:ae:ac:73:30:a6:c3:23:98:f5:
                    dc:bd:b7:ef:bf:15:60:c0:b1:a7:18:57:7f:98:a7:
                    8e:07:26:49:d5:8a:1b:98:de:d0:03:ef:fe:49:6c:
                    e7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5F:E7:8D:62:EA:A1:16:F9:26:69:BF:0F:EA:71:AD:E6:47:0A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e1d795b-722c-3c57-a4a2-c2e8f7f07d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:8e:61:83:56:e8:d8:61:ad:60:52:12:47:01:80:df:b0:a7:
         57:55:6d:47:c2:61:84:bc:58:9d:14:f0:2c:31:42:76:3d:69:
         90:a9:f9:96:ae:f1:85:2f:40:9c:6e:58:67:c0:3a:aa:31:fb:
         fb:f4:06:3d:cb:5b:d3:44:c0:3b:68:61:e8:2f:62:41:3c:fd:
         39:cb:2c:27:b5:6e:a5:6a:68:58:c7:4e:93:f7:9e:9b:e4:42:
         e9:cc:8c:70:7d:f4:20:cd:bd:0c:62:9c:9c:1f:cb:fa:b6:25:
         09:ad:bc:b8:9e:93:f1:17:37:54:fd:8a:a4:50:09:bc:66:18:
         d1:62:2c:cd:9c:a4:e0:ae:fa:79:f2:05:4e:e1:9c:68:a4:bc:
         1f:14:e9:9c:c3:2b:12:71:da:c3:b8:00:98:a6:5e:3d:ce:86:
         86:a7:dc:6e:24:a5:35:4b:1e:90:fe:0f:05:a9:46:2e:df:00:
         7b:f9:a8:2b:b7:a5:84:45:e2:f6:c5:34:91:ee:db:2f:d7:2d:
         07:6c:e5:fa:0a:f4:f1:d5:35:1b:20:f4:9f:7c:2f:f7:08:93:
         52:fa:ed:23:77:63:0b:3b:a1:e9:dd:bb:fd:50:87:8d:93:0e:
         e7:5f:77:52:56:d6:01:ce:74:72:54:3c:0d:ce:68:59:64:7b:
         a5:d5:d6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:32 2024 by rpki-client on console-fra.rpki-client.org