Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7795ffee-b76b-3a10-b1a3-007f64432e56.roa
File:                     7795ffee-b76b-3a10-b1a3-007f64432e56.roa (raw, json)
Hash identifier:          a4woHhUSsXSMCEnrUqyekBrhMddzW28xbnd47DA6zz0=
Subject key identifier:   89:3C:80:3C:E7:3E:D0:C2:FD:03:73:82:ED:ED:51:7E:F8:09:EA:52
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858478721199D7DC12B16824F16C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7795ffee-b76b-3a10-b1a3-007f64432e56.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     396613
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:19:9d:7d:c1:2b:16:82:4f:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=52278857-8c4b-49a8-83df-8d43820f5eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8f:40:0a:f2:e7:30:c8:80:67:6f:9d:72:9f:
                    b7:5b:72:7f:7a:27:c0:6c:f9:89:34:75:b3:ae:6c:
                    f0:1e:b1:10:7b:c2:cc:66:81:b8:eb:cf:08:ee:35:
                    34:19:e7:bd:6b:ff:09:23:49:4c:ab:e6:19:3d:b0:
                    ea:e3:34:28:60:f2:00:92:0d:43:19:2a:61:61:bc:
                    38:00:64:50:5c:13:c3:04:b1:b7:5a:07:97:76:78:
                    89:b9:b5:a3:25:72:a5:d6:c4:93:9b:88:e7:ba:ea:
                    f5:84:12:0b:bd:99:0d:b9:66:7b:32:93:04:54:a1:
                    e0:85:01:54:30:51:7c:93:35:5d:ad:8a:42:8b:de:
                    fc:61:b8:56:c0:fd:2d:af:1c:85:cf:64:2c:d3:0c:
                    40:af:30:b7:72:41:ea:32:1a:a0:2f:85:52:81:92:
                    70:a4:7a:ba:e4:e8:9f:3b:48:51:b2:b1:5f:4e:7b:
                    4f:f5:40:33:0f:d8:d4:fe:10:cf:01:19:47:ae:19:
                    9f:e7:c4:a1:d6:6f:b0:35:c1:95:a6:88:02:9b:31:
                    43:65:bb:32:24:37:05:2a:12:18:2f:15:65:88:45:
                    b9:e7:08:70:2b:db:52:65:68:2a:c7:23:bb:76:c9:
                    3b:34:07:46:db:8d:59:e2:10:9e:3e:2f:08:24:ce:
                    21:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3C:80:3C:E7:3E:D0:C2:FD:03:73:82:ED:ED:51:7E:F8:09:EA:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7795ffee-b76b-3a10-b1a3-007f64432e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:56:05:79:31:f7:d5:c2:ad:bc:80:02:43:dc:80:7e:9f:33:
         79:a0:52:bb:35:ac:dd:77:15:cb:23:bc:b1:79:26:20:b5:4d:
         a2:8a:28:77:89:74:fb:f7:33:ec:a9:14:d3:2d:96:b8:42:7e:
         b8:b8:25:b2:77:44:eb:95:f0:1b:57:c0:2a:f7:e5:50:34:23:
         54:8a:f7:b2:c8:f9:e7:00:53:42:00:ec:7e:1f:5e:76:99:96:
         0b:18:67:63:04:00:be:b6:75:2a:e6:c4:8f:75:22:4b:05:ce:
         94:1d:25:01:10:0d:e7:58:e5:25:47:a8:ed:76:83:23:cc:d2:
         fe:d9:d3:03:52:e4:fa:46:a5:da:fa:77:38:2a:f4:ad:2b:22:
         8f:37:a4:8d:a7:5d:e6:e0:e5:8d:1a:cc:f7:aa:04:37:78:6b:
         dc:b6:b1:99:da:80:95:9e:35:47:a4:1f:ab:ae:9f:57:da:5c:
         7c:30:0b:de:58:0b:e1:23:52:ab:94:4f:4f:d8:97:3b:7d:f4:
         61:6d:84:8c:d9:fa:4d:46:19:d3:ca:26:e9:87:28:bf:af:9d:
         85:94:c7:25:6b:c9:cb:d6:24:c3:11:4a:13:0d:eb:8e:f3:3b:
         3a:bf:3b:27:aa:ca:56:cf:99:b5:75:71:cf:6b:ab:d6:1a:e1:
         83:72:92:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:06 2024 by rpki-client on console-ams.rpki-client.org