Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77272389-0f6f-3901-a75e-638ceb409ad8.roa
File:                     77272389-0f6f-3901-a75e-638ceb409ad8.roa (raw, json)
Hash identifier:          OmHZJkqboFfXLubY79DwAO64n0QhuTSV8M6CxZm9nnw=
Subject key identifier:   7B:8C:37:16:E0:AD:1E:25:D5:C3:C5:67:A3:5F:1F:AB:62:BF:2D:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A25FAC6493FC1ED862540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77272389-0f6f-3901-a75e-638ceb409ad8.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     396610
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:25:fa:c6:49:3f:c1:ed:86:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=b31cf5e1-56ec-49eb-b0f2-9e30eb75b5db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a1:fd:37:6a:31:89:72:7a:f6:4c:74:cf:ba:
                    de:26:d7:28:22:7e:45:a9:82:76:df:52:48:7a:eb:
                    c8:d0:39:8f:e5:50:87:84:1c:03:66:9b:12:d7:e9:
                    9d:0c:7e:41:31:06:ea:8d:38:67:6d:ea:8a:58:8d:
                    30:51:35:21:53:2a:23:a4:d3:7b:d5:4b:76:56:8d:
                    b4:47:12:9a:9d:c4:df:fc:ca:f3:ef:4b:12:e7:68:
                    c8:fc:58:b9:91:08:51:f8:e4:93:30:24:ee:0e:1f:
                    5d:95:68:6a:0b:c3:92:6d:5a:ac:4d:83:e7:2b:07:
                    17:4e:e9:ae:4e:7e:73:d7:f7:ba:e7:4f:db:3d:0c:
                    61:55:55:b0:b2:61:b5:a9:63:39:e4:30:67:80:a2:
                    dd:58:0b:46:cb:b0:65:07:b7:1a:51:8e:20:ac:41:
                    a9:d3:a1:2a:79:aa:fe:5e:55:f3:49:c7:7d:f0:a2:
                    e6:f0:c1:1d:56:88:f2:24:0e:b4:cc:2e:8a:db:b6:
                    bc:9f:17:98:6a:a2:60:72:b9:ce:07:d9:5b:54:9f:
                    06:42:bb:09:9b:b7:ad:c9:2c:9d:14:c7:52:0a:5a:
                    ae:af:c5:1d:e0:22:7e:6c:b4:c0:fa:3e:f2:19:3e:
                    ae:94:04:db:f0:a6:9a:7f:54:ed:92:3d:46:c6:b1:
                    8b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8C:37:16:E0:AD:1E:25:D5:C3:C5:67:A3:5F:1F:AB:62:BF:2D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77272389-0f6f-3901-a75e-638ceb409ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:90:4f:6b:e5:73:d0:48:54:52:3d:98:9c:be:fd:a2:6f:2b:
         9a:65:5f:a3:fc:92:10:3b:98:63:76:e7:a4:52:e0:61:a9:fc:
         0a:9b:0b:24:2e:02:72:44:8f:72:16:da:aa:6b:c0:7d:c6:e0:
         6b:41:35:0c:9b:69:8b:3e:7d:b3:43:77:a8:f2:44:53:e3:3b:
         82:51:00:0e:11:2e:45:59:96:fe:84:f6:2a:bd:4c:ce:83:81:
         c3:f5:80:0d:66:3f:c3:40:03:1a:32:5e:d3:1d:f4:86:82:dd:
         bb:70:0c:15:36:00:bf:a8:f6:a9:67:ee:5b:13:5a:fa:7e:2c:
         cd:08:7a:5a:f5:58:eb:48:3b:11:96:d2:52:3c:fe:a9:3a:e2:
         72:2a:f6:ba:19:50:05:80:fa:25:6c:a8:61:e0:d5:78:a1:ba:
         de:77:43:61:0e:65:a0:f3:ce:39:a4:4d:a2:1c:b2:e1:fe:77:
         46:87:50:f1:b7:9c:a3:b2:9c:1a:aa:e5:53:5b:a8:14:c8:e9:
         75:e6:36:5f:af:46:f4:49:ee:df:50:ba:90:1a:74:6a:b0:e0:
         6c:33:b0:fd:d9:e9:71:76:60:02:7d:35:eb:5d:0f:21:6c:0d:
         23:f3:af:f9:aa:97:09:85:08:8a:53:93:83:79:34:5e:27:4e:
         c6:e5:d4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:06 2024 by rpki-client on console-ams.rpki-client.org