Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/761ac2a5-635f-38de-aec9-afddd0c067d2.roa
File:                     761ac2a5-635f-38de-aec9-afddd0c067d2.roa (raw, json)
Hash identifier:          tIwqAxsMWnJMzN75ktijM9+af8KfytZ+Umm6XpVEinE=
Subject key identifier:   BC:FF:40:9D:D5:F5:86:2F:69:04:D9:05:9B:52:53:C1:7F:B0:9F:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847872115322073E8B098B73100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/761ac2a5-635f-38de-aec9-afddd0c067d2.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     396589
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:15:32:20:73:e8:b0:98:b7:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=82dd5639-d44b-415a-8020-f814c4b55cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:29:38:05:e4:de:b0:04:98:34:fb:cf:3c:
                    ad:95:fc:e0:22:3c:39:44:c5:47:5b:7a:7b:e9:c1:
                    8f:aa:c3:c4:e3:97:d6:77:e0:c8:07:e6:07:ff:dd:
                    30:39:64:72:28:da:63:8c:b6:aa:b1:4f:b2:14:86:
                    32:04:72:81:b2:f0:d7:01:84:1c:56:ec:c5:cb:87:
                    60:5d:74:10:03:e0:7f:0b:2b:2d:27:13:fb:70:c0:
                    dd:37:13:ea:8c:62:1f:d1:83:be:73:34:a8:c2:73:
                    d7:7d:45:3d:bb:0a:b0:4f:ce:31:f2:86:6a:ab:0d:
                    b1:9b:e9:c0:de:4f:d8:9c:3f:21:a9:36:39:31:88:
                    09:28:80:58:08:84:13:9b:56:1a:77:58:32:3b:af:
                    c1:f8:47:cd:2b:f1:20:d5:b3:69:ea:4e:fb:b3:49:
                    e8:90:48:33:b2:14:87:64:69:f8:9c:a8:8c:6a:a4:
                    86:26:c7:bb:b8:d1:00:eb:60:cd:dd:71:49:d9:f1:
                    fa:25:ee:83:2d:08:2a:c9:08:7a:c3:7f:69:08:8c:
                    35:27:09:5b:81:79:0b:78:a5:66:9a:68:bb:af:72:
                    ea:6f:81:c0:23:71:5e:bd:c4:b2:2c:29:50:cd:0a:
                    af:ee:9f:ea:94:15:d8:4d:dd:c2:f2:ae:4f:98:11:
                    17:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FF:40:9D:D5:F5:86:2F:69:04:D9:05:9B:52:53:C1:7F:B0:9F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/761ac2a5-635f-38de-aec9-afddd0c067d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a9:35:78:84:be:e9:51:e0:ca:e9:fa:0c:6a:2c:7b:19:54:
         93:cb:b7:46:a4:54:c0:99:24:f3:39:e2:b0:72:17:ea:d9:65:
         14:71:1f:86:37:ab:2c:6a:e7:9a:41:1b:7e:85:60:73:2b:b4:
         37:59:5c:b6:85:b4:d1:78:50:94:90:56:ae:06:2c:02:5b:93:
         c3:1f:8a:76:e6:62:25:d5:39:0d:e2:e2:11:a5:e2:be:c1:16:
         4f:d6:f3:0b:24:4f:26:62:c7:73:a9:01:1b:15:b4:21:2e:cc:
         8d:93:52:5a:7d:d5:05:29:37:a9:c0:3f:5d:e1:ea:cc:ef:3f:
         9b:dd:d8:b3:ba:c5:f8:a3:52:63:a9:14:d4:90:cd:37:13:c6:
         ae:70:77:a9:dd:44:bb:70:3b:4b:18:22:1d:e0:86:48:76:f0:
         8c:10:a6:ca:89:fd:cf:d5:d1:70:57:28:f5:df:dd:2c:3f:ec:
         b7:4d:98:4a:82:13:21:19:e3:0a:4a:e8:74:71:63:66:1a:54:
         cb:95:0b:4f:a3:d3:46:54:fd:8b:aa:17:92:78:fc:90:d1:cd:
         27:10:58:40:c6:09:6d:39:09:b7:38:4c:01:8d:4b:1f:b9:10:
         1d:2f:55:07:44:ae:50:48:99:01:85:30:a4:f2:40:62:fd:61:
         b3:90:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:06 2024 by rpki-client on console-ams.rpki-client.org