Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7de29125-8290-3ff1-becd-76c7718b7ca9.roa
File:                     7de29125-8290-3ff1-becd-76c7718b7ca9.roa (raw, json)
Hash identifier:          PCFoIer80CeOn1ibVOZ/AGQPFs0QtOYXhSDfcn6+1Sc=
Subject key identifier:   55:5E:D3:EC:55:9D:20:4A:D6:DE:C6:2A:F9:A1:DC:FA:29:07:C8:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C0CFD08FB2CA5FD01700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7de29125-8290-3ff1-becd-76c7718b7ca9.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     396609
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c0:cf:d0:8f:b2:ca:5f:d0:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=6a3631d1-d728-4268-bd71-388c3c9c7a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:77:fe:a3:9b:4b:34:44:c0:a5:df:22:23:8d:
                    0c:e4:30:89:b8:db:47:93:37:9f:f5:04:15:73:5f:
                    5a:3f:19:97:95:32:62:d0:24:75:64:e4:ca:9f:8a:
                    4d:10:26:76:81:88:a8:dc:ca:1e:e0:bc:15:1d:51:
                    44:6a:b4:50:e8:0f:0f:39:eb:95:e1:0a:35:ba:47:
                    f4:49:80:31:e6:31:ca:f3:65:39:3f:22:08:24:13:
                    db:64:91:8d:e1:0b:1e:e9:9f:de:0e:8f:11:88:65:
                    9c:f8:1a:0d:98:96:1a:f6:60:48:40:93:67:67:63:
                    26:d5:5f:93:df:75:33:2f:0f:d2:e9:fd:0f:0c:a8:
                    4f:80:1a:99:d6:06:19:c2:df:0f:c6:47:62:e6:ac:
                    9d:15:ca:22:94:b2:d2:95:8b:74:12:20:11:60:71:
                    6b:43:61:ab:2d:2c:34:4c:dc:d8:94:fb:28:8d:90:
                    bd:2a:7d:56:6b:7e:da:2b:06:54:c3:e2:0a:57:af:
                    55:b7:66:f1:91:ec:4d:9f:85:0d:cf:55:e5:45:c1:
                    d4:a2:b1:af:c5:00:83:60:25:55:2d:78:f2:de:b0:
                    90:63:28:f3:83:df:f6:35:32:16:7d:5f:d2:56:f6:
                    6a:88:c1:b1:f5:0a:3c:87:ac:34:71:ac:b9:fc:09:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5E:D3:EC:55:9D:20:4A:D6:DE:C6:2A:F9:A1:DC:FA:29:07:C8:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7de29125-8290-3ff1-becd-76c7718b7ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:cb:ce:32:6a:45:e6:28:14:d8:a5:61:94:fb:23:9a:ea:d5:
         25:bf:e7:22:5a:2d:63:26:ae:b3:62:dd:3f:d4:46:cf:87:91:
         d0:f7:6b:c0:ed:40:b4:3d:aa:56:d5:84:f2:87:3a:1a:2a:7f:
         87:96:3f:00:e4:35:55:0d:91:96:d4:e0:27:7d:b2:d1:e7:1d:
         a8:65:11:7f:2d:38:3d:02:a4:1a:8b:ee:d8:04:5d:42:87:e8:
         79:15:24:e2:67:06:07:4e:8b:21:1f:46:15:48:39:de:c9:05:
         b8:3d:b9:c9:d5:a9:f3:b6:3c:c2:e2:cd:1f:15:9e:80:88:11:
         8d:ab:92:b4:88:f9:9a:2c:80:73:df:bf:0b:af:4a:46:49:74:
         69:f0:19:3a:82:56:01:28:3e:29:12:4d:e9:12:e0:d4:90:06:
         b3:99:7a:6d:c3:61:75:55:76:2c:d3:ba:f5:9d:ce:04:49:e0:
         0c:4a:1b:24:cd:d7:43:b1:b3:94:a3:37:6f:3c:5c:42:a4:2f:
         2f:ee:38:d4:aa:bc:54:0f:8a:74:2b:27:54:ea:b3:dd:8c:fb:
         76:7c:0a:f0:20:24:17:95:04:2c:0e:4e:1c:17:56:f7:07:e6:
         a8:37:51:4a:9e:08:f0:ab:92:2a:68:88:47:74:96:ea:91:bf:
         25:30:c0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:06 2024 by rpki-client on console-ams.rpki-client.org