Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7156a667-1ce3-3d4d-b5b5-63d46fe00324.roa
File:                     7156a667-1ce3-3d4d-b5b5-63d46fe00324.roa (raw, json)
Hash identifier:          XHbAQRTZcCHgfqSKC2lfjNXim7cRj2ZYXT2rjRByiOM=
Subject key identifier:   AA:65:BA:C5:0F:76:F6:96:2E:EC:14:D8:04:41:44:89:B0:72:41:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476E00ECB429A655E2A94A4A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7156a667-1ce3-3d4d-b5b5-63d46fe00324.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     36632
IP address blocks:        192.30.45.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:ec:b4:29:a6:55:e2:a9:4a:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=b4bbfdfb-e55b-47dd-a299-9abb892e1899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:3a:44:65:83:ea:aa:ae:93:53:4c:3c:f8:
                    0b:08:9f:b4:3a:6e:ed:0f:2a:03:ce:98:d2:41:52:
                    63:6e:b0:a1:eb:bd:07:80:8c:71:6e:4a:fd:81:51:
                    93:c0:c7:ef:42:69:cd:63:39:80:70:19:a3:25:82:
                    42:a6:53:b0:0e:1b:72:dc:42:2b:dd:3c:df:4c:17:
                    69:c2:d0:e2:9f:a6:a7:96:e8:58:c5:d6:89:07:c4:
                    d5:4b:41:e5:87:72:e5:92:dc:db:15:34:b8:12:72:
                    28:0e:ef:f7:cf:31:e7:99:c4:53:46:cf:59:e5:4f:
                    ed:24:75:b2:8a:c4:78:17:6f:cb:05:88:25:f3:bc:
                    e3:c2:f2:b0:e0:bc:fc:a6:7a:cc:12:3d:ab:38:b8:
                    bb:fb:1c:ae:7b:2c:58:93:b7:eb:07:5c:ba:02:3e:
                    b9:fa:3c:d4:17:ab:26:c1:77:16:ab:cd:0b:29:47:
                    82:5f:0f:f6:7a:e5:5b:61:ad:ca:48:bf:92:f0:b8:
                    a9:6a:c0:68:21:bf:15:9d:55:13:5c:0e:cb:0d:18:
                    02:c5:06:d2:b3:de:7f:56:b7:34:07:1f:82:03:55:
                    7d:1b:9c:5d:41:5f:cb:9a:ce:b1:91:b2:71:38:16:
                    6e:b7:aa:23:8f:c3:a5:f6:b2:35:ed:62:d2:77:10:
                    ec:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:65:BA:C5:0F:76:F6:96:2E:EC:14:D8:04:41:44:89:B0:72:41:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7156a667-1ce3-3d4d-b5b5-63d46fe00324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:91:3c:02:39:50:47:c8:c5:6c:97:76:e0:57:05:84:56:72:
         71:6b:be:34:15:fd:79:9c:6c:c0:d8:e2:d9:eb:35:bc:57:d6:
         a8:f4:69:3b:26:82:b6:06:ce:f3:7a:22:97:e9:ec:e1:a9:c1:
         5c:a0:27:bf:f3:85:fb:3f:99:4c:6d:2e:37:ca:43:15:af:bf:
         b6:69:29:18:7c:fd:22:93:f8:5f:d3:38:54:f1:2c:68:53:b1:
         eb:4d:5c:3b:de:6f:44:fa:97:0b:94:26:2a:c4:2c:bb:24:24:
         de:41:06:93:a4:c9:80:cf:ef:7f:d0:b8:5c:c7:80:f1:7c:77:
         48:73:23:d2:73:01:01:81:fe:18:de:5e:65:02:01:af:26:d8:
         6e:a5:bb:80:2d:99:d6:53:6f:e5:6f:43:2a:37:c4:ae:6c:da:
         b4:4f:3e:b9:78:9c:03:a3:7e:c0:90:43:d5:b7:12:e6:e0:5d:
         ca:73:07:b3:f7:0b:42:9f:62:d4:5b:af:1d:ac:ca:f7:78:d8:
         9c:d6:b1:11:5f:58:e6:e0:05:71:30:45:2d:ea:1b:08:d3:52:
         61:20:0b:f1:ad:fa:c4:1e:1f:6a:e1:90:bd:6f:c8:92:1b:e7:
         31:b9:d6:f9:20:17:c4:8f:38:77:32:dd:3a:c3:2b:e4:53:14:
         8f:c0:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:33 2024 by rpki-client on console-fra.rpki-client.org