Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb3520f-9a8f-31ba-937d-35b1b1636efa.roa
File:                     7cb3520f-9a8f-31ba-937d-35b1b1636efa.roa (raw, json)
Hash identifier:          T+XWPsbGw9LnxardDttCItudJZAhCjLYTJDYaqV2p/U=
Subject key identifier:   9A:D2:44:72:6F:49:7F:C3:AA:35:04:11:1B:1A:26:F0:88:CE:65:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C23D328BDEBE7765B080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb3520f-9a8f-31ba-937d-35b1b1636efa.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     397198
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c2:3d:32:8b:de:be:77:65:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=c299529d-b7a2-4d90-8377-b635db25295a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:23:4f:03:21:f4:a5:1c:8f:f6:d8:21:16:e6:
                    55:62:b4:21:ed:79:fb:02:c4:4a:6f:d3:e3:8d:c0:
                    9d:ab:b2:f1:76:92:81:e7:26:ac:1a:0e:38:db:a9:
                    7a:0f:05:8f:b0:d5:35:07:9c:d1:2f:60:c2:87:f3:
                    0b:38:de:f2:97:6e:31:17:12:f3:12:8b:84:0e:0c:
                    bb:1f:b9:98:f1:57:d0:c0:9f:f5:60:0b:7b:fd:bc:
                    ef:6f:97:64:ad:bd:6d:5f:7d:8d:36:94:f2:b2:5f:
                    bf:c9:45:6f:e5:1c:53:53:a3:18:8a:3f:8c:a7:0f:
                    28:56:1a:08:b7:e8:b0:72:f8:21:d7:22:d3:43:d6:
                    65:f2:dd:43:fb:ab:4b:61:13:0b:62:42:63:30:fc:
                    50:82:f0:6f:f5:87:23:d0:35:59:1e:31:14:61:54:
                    73:36:d5:ac:ca:ed:9a:80:b1:f3:66:f1:9d:51:da:
                    2d:16:0b:a6:a9:05:e1:a5:9a:18:9a:df:08:d1:78:
                    f0:0e:5f:d9:76:d7:e3:5a:73:93:18:ea:86:23:94:
                    36:6a:50:28:a1:59:67:02:f1:67:d8:d7:0d:6d:c2:
                    e9:87:dd:10:9d:1b:fe:a3:78:23:f8:df:26:dd:77:
                    d2:20:8c:d8:4b:eb:61:74:2e:42:dd:89:d2:0d:84:
                    19:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D2:44:72:6F:49:7F:C3:AA:35:04:11:1B:1A:26:F0:88:CE:65:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb3520f-9a8f-31ba-937d-35b1b1636efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:63:12:12:18:0f:c3:05:5d:b2:77:33:ef:63:d6:44:d0:d3:
         83:19:bf:17:83:5d:27:c7:f4:12:df:62:e2:6f:47:8f:f9:89:
         9c:c3:9a:13:a1:7b:25:6c:2f:90:1c:e9:ee:4a:e5:ea:3a:35:
         99:f8:64:06:0a:fe:70:b7:7c:18:1c:fb:a3:6d:26:73:2c:aa:
         78:8f:85:f6:8a:3f:02:2f:8a:ba:aa:5e:f8:c2:20:92:20:94:
         dd:65:52:f2:11:9c:2a:c4:0b:85:01:45:f7:5d:d7:cd:d2:8d:
         7a:6a:10:07:42:57:d5:70:48:06:a5:9d:c7:98:33:d5:5c:dd:
         18:82:18:aa:6a:da:4c:0a:d9:44:94:67:84:15:3b:01:34:5e:
         3f:ea:3b:a7:58:22:25:4b:d3:a8:a8:cf:76:91:2c:b9:44:f5:
         71:43:fc:e2:0f:6e:d7:5c:c2:82:cb:c7:92:91:ce:b0:8e:2f:
         eb:4a:1c:c4:bf:76:ba:33:6c:ae:94:fc:ac:a3:11:53:5c:b5:
         3a:03:68:26:d6:d5:3a:bd:09:3e:2d:34:a1:32:54:fe:a2:34:
         72:e8:87:6a:d4:99:9d:a2:34:13:30:33:8d:94:02:cb:e1:92:
         4e:16:6b:61:44:73:6a:b8:8c:ac:44:bd:f5:9d:9c:22:9f:6a:
         93:bc:90:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:06 2024 by rpki-client on console-ams.rpki-client.org