Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a1f6eed-01e6-3a88-b0db-65da18bce451.roa
File:                     7a1f6eed-01e6-3a88-b0db-65da18bce451.roa (raw, json)
Hash identifier:          0/gUVfTO2oIzcAdikFLFsFpVkgeYqlUh8QKzhnWPKVo=
Subject key identifier:   91:E6:29:36:ED:36:50:19:CE:DD:68:C6:0A:9B:53:AB:E6:4F:73:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A25815E8B48CC40095700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a1f6eed-01e6-3a88-b0db-65da18bce451.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     397205
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:25:81:5e:8b:48:cc:40:09:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=fd36fd92-d605-432a-872d-c9a52ad1228b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f6:2b:19:fa:d6:5e:82:64:76:62:63:2b:ea:
                    0d:30:97:0b:ae:f6:8a:43:26:aa:71:20:cc:80:e3:
                    a7:a4:79:6f:12:08:66:ae:af:5b:e0:ac:7b:ba:9b:
                    aa:e7:5f:bb:c2:0d:e2:80:8c:14:91:82:61:18:a0:
                    99:57:de:1a:2c:60:91:2a:22:76:cf:de:38:43:cc:
                    58:36:47:83:79:11:2f:90:be:50:f0:66:01:49:25:
                    c9:b7:7a:d9:39:4f:32:62:28:dd:e8:b9:6f:88:63:
                    15:80:ad:f6:ff:11:b2:59:03:1b:fb:c3:2c:9b:b8:
                    fb:e0:cf:ab:dc:ff:90:8c:79:0d:bd:9c:16:40:ad:
                    38:5e:b2:f5:e1:0c:7a:77:1f:83:20:3c:b8:ec:fe:
                    c3:b2:db:de:3a:0c:e7:ce:cd:bb:d8:db:9b:c2:e7:
                    29:28:65:a2:50:2b:c6:24:0c:ce:ba:12:10:50:60:
                    47:29:ca:9e:37:85:c9:3e:01:ef:b4:27:88:1e:dc:
                    be:e3:95:4f:8f:a6:cf:82:61:d3:18:37:99:c2:a0:
                    20:ca:b2:de:20:f0:98:20:9f:15:17:4d:d7:8e:e4:
                    ef:65:0b:78:ec:02:b0:2e:22:39:1f:42:2a:85:7c:
                    65:23:69:c9:37:37:2a:84:52:fe:43:11:e9:d3:04:
                    49:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E6:29:36:ED:36:50:19:CE:DD:68:C6:0A:9B:53:AB:E6:4F:73:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a1f6eed-01e6-3a88-b0db-65da18bce451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0b:79:9c:b7:43:8b:74:d3:3c:10:f8:a8:2a:ac:de:5e:40:
         a9:57:56:b1:35:d7:05:33:73:61:90:2a:c7:d5:f8:78:ed:ea:
         60:18:a6:97:78:25:cc:d9:3d:3c:c1:0b:d1:31:e9:62:11:93:
         ac:16:31:32:ef:6f:e2:45:47:19:71:a9:0f:68:c5:0e:8f:5e:
         3b:6a:0d:22:41:0b:b2:eb:e4:48:0b:43:ea:84:88:19:a4:85:
         c6:d8:16:6f:6a:12:33:e2:48:7b:4e:d0:26:1e:c4:21:35:a4:
         48:8a:fe:24:d5:d7:05:87:3b:05:b0:99:86:39:13:6d:2c:40:
         0f:9f:34:c1:91:8e:5b:6c:14:cd:ca:5f:27:48:aa:4e:c0:6e:
         4a:c1:c5:5d:e4:03:63:d7:e0:9a:bb:04:38:92:71:6b:85:3b:
         45:0a:28:a6:4e:6b:3e:67:de:3e:c7:23:19:6d:99:97:a7:ae:
         68:6c:0f:8a:0f:86:26:69:d4:66:9c:d7:ca:cd:10:c5:34:1b:
         e3:82:95:bf:24:45:4f:3e:6f:14:02:68:87:99:2d:b1:fa:b1:
         fe:eb:54:65:56:47:14:93:1d:ef:3d:3b:88:b0:d6:22:e4:c9:
         51:93:82:e8:03:84:fa:ab:67:eb:06:13:a6:3a:d6:bc:f0:7d:
         75:46:05:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:06 2024 by rpki-client on console-ams.rpki-client.org