Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fa38549-8fc1-3c6e-892f-a2b5f386cdc6.roa
File:                     7fa38549-8fc1-3c6e-892f-a2b5f386cdc6.roa (raw, json)
Hash identifier:          y8K8rhQV6zGx8Sws/sbYXD4XdbZgP3vCnMdILDUefdg=
Subject key identifier:   C3:AD:1B:A3:5D:3A:77:3E:00:05:AB:A8:A2:7B:1D:A9:94:EA:3D:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B3EDBB201BB555B720703EE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fa38549-8fc1-3c6e-892f-a2b5f386cdc6.roa
Signing time:             Tue 29 Oct 2024 14:08:39 +0000
ROA not before:           Tue 29 Oct 2024 14:08:39 +0000
ROA not after:            Mon 27 Jan 2025 15:08:39 +0000
asID:                     397205
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:ed:bb:20:1b:b5:55:b7:20:70:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 14:08:39 2024 GMT
            Not After : Jan 27 15:08:39 2025 GMT
        Subject: CN=3039c7e5-1da2-4446-bdc9-12f5ffe939c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:53:f9:66:6c:37:d2:9f:18:2d:e3:1d:29:24:
                    67:d7:1c:71:ff:7a:09:d1:cd:84:82:3a:03:87:88:
                    16:cb:83:51:84:8b:48:64:8e:0b:c9:fb:97:c2:4e:
                    58:2e:43:50:81:18:c7:94:0c:7e:7a:fd:2e:02:f5:
                    7c:73:fc:57:00:3e:52:9c:17:ef:c8:5a:37:9e:72:
                    b9:2b:15:66:a2:81:1a:12:f2:da:9b:a1:ef:19:55:
                    1d:a6:1e:be:c7:79:17:7b:5d:4a:0f:37:b3:fc:be:
                    0f:5d:3e:9a:60:27:9a:0e:7c:37:81:c9:dc:af:22:
                    f5:81:d3:30:38:f0:75:8b:f5:18:92:99:a6:55:c2:
                    05:57:ec:6b:b9:b3:9f:ce:8d:96:b6:4f:d5:47:20:
                    3a:5d:34:05:6c:02:2e:fd:33:e4:ba:8e:02:86:73:
                    f9:c2:d7:ed:ee:9a:01:80:f6:f2:87:38:be:1e:db:
                    ff:6b:9b:bd:22:95:a5:c4:39:be:4c:65:03:6c:88:
                    8c:61:df:fe:21:b1:d9:01:28:cc:05:e9:c0:c0:98:
                    a8:e0:39:78:1e:1f:b8:73:be:e3:a7:55:e8:9c:18:
                    10:4e:af:73:8c:92:e7:51:bc:91:56:3c:4f:5b:17:
                    66:5e:55:5a:ab:85:d3:8a:4f:81:0c:ae:78:eb:b0:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AD:1B:A3:5D:3A:77:3E:00:05:AB:A8:A2:7B:1D:A9:94:EA:3D:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fa38549-8fc1-3c6e-892f-a2b5f386cdc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f1:28:02:f3:de:3d:6f:dd:da:fd:02:ad:6d:f3:82:15:7b:
         bc:73:0d:bf:99:66:a6:37:bd:cb:00:f6:0f:f7:b6:3e:f6:8c:
         b6:fc:52:8c:ff:d1:62:25:b1:21:26:fc:4b:58:a7:37:22:af:
         13:11:39:8e:1e:cb:38:72:f8:54:2e:08:63:4f:08:e2:06:19:
         d9:dd:3d:79:f0:6d:d0:de:cc:75:d0:e3:36:65:e0:d2:a5:f8:
         b1:2f:75:cc:05:09:b9:4f:ec:ff:f7:e5:6b:a2:a9:04:4a:b8:
         44:4f:95:b9:6f:c5:b7:a2:de:a6:ed:cb:a6:09:06:a5:cf:f6:
         35:e0:24:46:ed:99:16:97:eb:44:2f:71:97:8a:8d:b4:aa:ec:
         84:e9:0a:7a:39:79:10:6a:db:16:03:1c:e3:ad:a3:b8:86:36:
         4f:1b:0a:44:dd:66:9a:7c:f7:9f:fb:f9:44:83:b8:83:cc:ce:
         f6:08:cc:70:bb:a2:e1:4b:30:3f:28:56:b8:b0:7f:43:ec:be:
         6c:6c:16:cf:18:c4:f6:2b:1c:36:d5:fb:5e:df:f0:ac:06:f9:
         15:84:4d:24:67:89:df:26:20:24:ad:8f:72:01:e1:14:40:4e:
         08:fa:00:b4:2b:6c:61:63:9c:b5:ca:2e:a0:ff:8f:6b:fb:0e:
         0e:bd:10:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:07 2024 by rpki-client on console-ams.rpki-client.org