Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f2a8003-4538-332d-ab47-9b6c9d473df2.roa
File:                     7f2a8003-4538-332d-ab47-9b6c9d473df2.roa (raw, json)
Hash identifier:          23Hq0VBSFRq/7Zv/3ZPo3XSLr1zTHC2dOGAE/6xdYnk=
Subject key identifier:   7D:53:51:55:5A:D5:4F:F7:D2:5C:87:CE:3F:00:DF:B4:D0:DB:A0:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A248772FC826FD20B8F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f2a8003-4538-332d-ab47-9b6c9d473df2.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     20431
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:24:87:72:fc:82:6f:d2:0b:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=c57c41f0-371d-4baa-86f0-63b089f625d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:95:7e:a1:2d:d2:e8:d8:39:d2:c3:3b:24:91:
                    cf:70:ba:a8:0b:fb:39:07:70:f8:e2:7a:3b:d0:40:
                    3f:c4:d9:a8:98:c5:d8:aa:a2:4b:b3:e7:59:47:32:
                    36:c5:9f:62:c2:33:f1:56:8d:b1:5c:b2:9f:59:06:
                    53:0c:f7:f7:41:89:93:f1:03:c8:0a:3b:eb:c8:24:
                    1c:95:67:20:29:9b:14:68:85:3b:6a:cd:4c:29:aa:
                    47:53:94:22:5a:3a:a2:e8:20:f6:b3:39:86:7b:ee:
                    a1:7e:46:8c:dd:f8:67:bb:f5:38:74:21:23:1d:2a:
                    12:17:2d:4b:35:2e:ad:2f:06:9a:8f:09:a8:0a:a3:
                    3e:db:c6:53:fe:38:66:ed:da:fe:a0:2e:b0:a5:72:
                    18:1e:17:b6:7d:45:54:4e:82:28:93:c3:77:fc:8d:
                    26:41:9c:ee:66:b5:26:94:6a:94:7e:09:f6:e5:81:
                    9d:08:80:a2:fb:31:0d:4a:d4:ea:9f:7b:75:01:0a:
                    76:c6:e6:30:7e:99:3c:fe:e4:6f:5b:be:91:7b:f1:
                    51:a1:db:b8:1d:d9:12:31:0f:65:ce:fa:9d:84:96:
                    e8:71:1f:4b:f7:5e:7a:4f:75:d3:e9:7a:65:31:9e:
                    ce:16:20:b0:5c:76:54:23:94:bf:a9:97:c6:5a:30:
                    8a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:53:51:55:5A:D5:4F:F7:D2:5C:87:CE:3F:00:DF:B4:D0:DB:A0:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f2a8003-4538-332d-ab47-9b6c9d473df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a7:92:1b:d7:7e:e3:21:17:9b:f9:88:f2:b5:01:98:fb:2c:
         ea:7d:4f:60:b5:93:f9:42:e7:a1:0f:3f:71:d3:75:33:cd:e1:
         2a:dc:6b:81:8f:23:06:7e:af:8b:e8:96:c8:19:f1:48:1a:0c:
         fa:c4:b9:25:06:f3:89:fd:f5:da:4e:11:85:74:34:85:81:96:
         27:21:05:eb:01:e6:55:c3:7b:2d:78:55:12:41:c0:53:a3:e7:
         bf:83:8c:03:1b:dd:70:3b:d3:fd:13:f4:a1:db:24:14:02:c0:
         f2:3a:63:56:cc:da:fd:66:05:77:bb:ed:32:29:0a:65:d9:0f:
         25:a1:ba:ba:ce:91:25:4b:e1:84:ee:63:b4:bc:23:fc:38:6c:
         ff:30:77:94:5a:26:77:2c:a5:fe:91:04:c3:7f:6d:6e:4a:af:
         07:91:41:d4:c3:98:c9:92:05:8f:e9:f9:08:bf:4b:eb:90:dc:
         7b:d4:1b:43:90:d0:3e:1e:8c:d8:27:3d:71:61:e8:74:7c:16:
         c4:e3:9b:71:ae:17:f6:d9:34:f4:a2:c5:3a:46:72:c8:7c:5f:
         7b:34:36:95:76:90:7d:4b:d3:a9:4c:fe:71:f7:a9:d1:94:1f:
         9f:e1:59:2d:6a:36:93:dd:5e:74:17:99:2b:5e:c5:30:59:98:
         04:c9:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:34 2024 by rpki-client on console-fra.rpki-client.org