Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ea7d4c6-ddbf-3a19-b560-d14281de0d4c.roa
File:                     6ea7d4c6-ddbf-3a19-b560-d14281de0d4c.roa (raw, json)
Hash identifier:          5JSCSBu44LaL3e0efQdn5TA9Lv/wNDZBxXUZLlDOKi0=
Subject key identifier:   0C:7F:56:57:13:34:79:F3:B1:86:04:B1:BC:4C:DF:8A:94:A3:90:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D1497762AFEDA24B68C276
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ea7d4c6-ddbf-3a19-b560-d14281de0d4c.roa
Signing time:             Thu 24 Oct 2024 12:50:01 +0000
ROA not before:           Thu 24 Oct 2024 12:50:01 +0000
ROA not after:            Wed 22 Jan 2025 13:50:01 +0000
asID:                     396594
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:49:77:62:af:ed:a2:4b:68:c2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:50:01 2024 GMT
            Not After : Jan 22 13:50:01 2025 GMT
        Subject: CN=b347c1e7-54ed-472e-b9e7-02dda9b62e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:36:47:51:17:6e:83:26:6a:e9:19:ff:29:72:
                    63:00:b6:a8:67:99:96:21:3a:51:6a:01:af:ca:ac:
                    1a:ae:52:1a:19:72:4c:fb:35:d7:3f:9c:b7:3c:21:
                    f8:7a:ca:1a:4e:31:c0:f3:07:b6:6c:7d:cc:86:39:
                    15:16:85:4a:b7:51:4e:f8:c8:3b:b5:d0:b1:6b:80:
                    5c:9a:10:30:7e:5a:1f:a2:85:28:5e:e9:c2:15:bb:
                    a5:b1:68:45:91:c1:05:d3:7a:24:23:a2:9c:f8:bd:
                    4f:1a:46:8e:69:62:6b:38:0b:fe:07:9e:0d:90:ef:
                    f0:2e:c7:12:7c:f3:52:a8:3b:33:9d:07:1b:97:5d:
                    b1:40:0a:6e:88:38:d9:8c:5c:c2:35:5b:80:a7:76:
                    b7:6a:0b:b5:a7:60:56:d0:c3:ce:b5:ff:b5:8a:bc:
                    74:a9:e6:03:87:b1:9b:75:9e:fd:e2:9e:ad:fd:a5:
                    5e:86:a0:49:93:3b:8e:09:53:9e:71:b1:c4:ca:38:
                    e8:e7:62:d6:dd:8c:8f:a2:f3:54:f6:ce:95:da:be:
                    14:91:94:f0:f8:3f:3a:f4:28:5c:c0:21:1d:1e:c6:
                    6d:19:98:ef:6b:9a:cf:9e:2a:3f:f3:d4:83:f2:ef:
                    ba:e4:52:2b:ef:bb:72:d2:5a:84:c3:4a:25:38:38:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7F:56:57:13:34:79:F3:B1:86:04:B1:BC:4C:DF:8A:94:A3:90:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ea7d4c6-ddbf-3a19-b560-d14281de0d4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5d:cc:f0:03:b4:bd:cf:92:9e:d6:2e:ef:85:d7:ce:35:07:
         92:bb:b2:82:df:99:f3:76:71:68:ae:cf:d2:ab:08:84:60:6d:
         f2:d6:ab:36:9d:b6:cf:d8:57:f8:0d:d6:b2:ff:39:43:ef:6f:
         17:34:22:8d:78:a8:93:9a:b9:dc:81:37:8a:4f:74:a3:24:31:
         cf:4b:21:36:c8:aa:58:84:8f:2c:84:06:48:76:f2:8b:51:ed:
         92:ea:1a:03:34:a5:4d:d4:30:7a:7c:87:ad:91:b8:16:87:8e:
         44:d4:a5:6d:4f:15:54:02:df:42:bb:ca:ed:b0:20:55:b3:cd:
         a7:6b:55:fd:ee:21:98:87:ee:4f:d6:78:0d:d9:fa:4e:b0:79:
         d3:e2:d1:0d:5c:9e:fb:ec:b7:38:a1:ef:8e:13:fb:3b:7a:b9:
         37:40:e2:bb:b1:1a:76:e9:d1:f8:36:6b:39:e6:ea:7d:a4:80:
         27:b5:48:94:62:9f:11:50:70:73:d9:74:f8:75:f3:ca:a3:8e:
         5d:8d:66:8b:3e:18:e9:48:bf:a0:95:68:b5:be:70:b6:cb:90:
         98:74:be:51:4d:ea:e7:58:b4:9b:36:8b:27:d8:91:83:73:4d:
         f4:cb:87:6e:0a:2b:af:62:21:41:62:8b:38:56:46:7d:a4:88:
         f6:44:c1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:32 2024 by rpki-client on console-fra.rpki-client.org