Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e98fc06-df3d-3a48-9148-2a8d9c569746.roa
File:                     6e98fc06-df3d-3a48-9148-2a8d9c569746.roa (raw, json)
Hash identifier:          jE4R/1vasFbQXBDZxrqa5LeAJfOaiEK2w0YAJqkhCgw=
Subject key identifier:   96:74:55:ED:14:25:07:BE:85:8D:58:53:E4:19:39:19:9A:86:24:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A23693ABEAB58A2FFCE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e98fc06-df3d-3a48-9148-2a8d9c569746.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     396580
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:23:69:3a:be:ab:58:a2:ff:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=ffb0d167-f088-488e-840b-057c9ecfab01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f6:14:4f:e5:7b:3a:b0:2a:35:50:f6:ad:80:
                    67:b3:8b:fe:ff:65:73:18:3e:8c:64:a8:40:67:05:
                    e9:60:6f:c2:e1:6b:99:65:f9:74:b7:98:54:36:96:
                    12:bf:f8:de:9e:ad:77:c2:d7:2b:15:ea:22:43:f2:
                    3c:fb:33:fe:54:bf:f3:25:07:f6:11:bd:15:10:13:
                    10:84:5e:ad:4c:61:0c:24:c1:d4:2a:62:f4:e4:02:
                    ae:52:81:06:f1:4a:22:99:a1:1c:65:15:96:af:58:
                    02:5e:7f:ef:08:7d:da:4f:5a:8b:e1:9d:c6:7e:f3:
                    bf:65:7c:48:6e:0f:a3:62:4a:05:80:7f:c1:96:0b:
                    b4:14:0e:a8:81:86:b8:b4:59:2f:ad:b0:55:25:fd:
                    5d:4d:5e:b0:e0:c3:87:7e:f4:ec:9c:3c:42:14:5f:
                    71:2f:a1:dd:26:a1:17:21:e0:a6:d7:99:50:3a:10:
                    bb:23:d8:74:54:27:6f:df:1d:73:f3:71:48:71:fc:
                    b5:4c:77:a2:e3:91:b2:02:f1:d2:4d:3c:95:00:21:
                    ed:46:d2:36:67:a4:cb:10:f7:c5:31:73:73:11:db:
                    35:44:50:5d:18:8a:c1:91:d1:34:3e:9c:0a:a5:ad:
                    0f:2a:f8:fb:6b:8d:40:3c:d9:6a:0a:4a:64:ff:5d:
                    32:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:74:55:ED:14:25:07:BE:85:8D:58:53:E4:19:39:19:9A:86:24:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e98fc06-df3d-3a48-9148-2a8d9c569746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f3:68:77:88:82:40:ea:53:84:15:f3:27:5f:ae:75:8e:db:
         ae:76:8f:7b:8b:2b:6f:79:e2:90:16:4e:ed:4c:dd:84:76:04:
         11:1b:df:ad:2d:d8:30:23:e0:24:a3:87:50:12:9c:48:a7:69:
         45:86:0d:3a:6f:02:4f:95:ec:dd:93:27:ad:99:6b:b9:11:a4:
         ae:10:23:23:2f:ad:ca:16:b7:9d:ff:0d:94:88:c3:fd:b0:57:
         c2:c4:76:4f:a3:44:a4:46:c2:27:5b:b5:35:29:9d:e0:97:0b:
         e7:03:f3:92:fc:cd:ce:ce:3d:77:8d:b3:a9:a2:64:b7:b2:df:
         c8:80:f2:35:d4:d4:f5:7a:da:ad:83:e4:e7:d0:bd:99:0e:44:
         1b:ec:52:31:39:fd:e4:49:59:55:14:96:d1:16:3c:1b:80:91:
         31:85:69:58:74:e4:0b:c0:16:26:5d:30:e7:0b:20:de:7a:ec:
         5f:90:07:5c:9a:5e:b8:25:74:23:ec:44:e3:c5:a8:32:c3:18:
         6d:4c:6e:79:08:87:fd:49:76:47:07:0c:f5:83:27:0e:1d:94:
         c6:de:bc:e3:a7:23:5f:e1:de:92:ca:fd:4f:53:1b:93:b3:64:
         17:66:49:24:cd:f9:81:16:cf:be:f4:27:59:ed:a2:1e:56:ec:
         99:fd:ee:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:32 2024 by rpki-client on console-fra.rpki-client.org