Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/832ee527-dad3-39d1-98ec-3a4f2ae8c284.roa
File:                     832ee527-dad3-39d1-98ec-3a4f2ae8c284.roa (raw, json)
Hash identifier:          njnsOFFV+W19kcsE/KWpc1/CJu7cxAIpOXBDymYqxJM=
Subject key identifier:   ED:B5:9D:4E:CF:D7:84:11:E3:BC:A3:3C:A3:C1:C8:57:AD:D5:44:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C883FC5B53666A027400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/832ee527-dad3-39d1-98ec-3a4f2ae8c284.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     396568
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c8:83:fc:5b:53:66:6a:02:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=67f9e196-1695-4fd2-8378-1dc8038469ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3a:dd:b6:d4:8f:2c:13:5d:ec:14:d9:fb:79:
                    e8:23:46:78:15:bf:66:c1:a6:51:e3:e5:b3:25:c7:
                    67:53:86:25:b9:1b:ce:2c:63:7e:21:11:47:df:35:
                    7d:5d:4a:ff:d8:bc:34:1d:66:ca:11:7c:3a:58:c3:
                    47:1e:f6:aa:2c:c3:06:f7:c8:81:0b:4c:04:04:81:
                    cf:99:34:c0:d8:8f:cc:60:f8:af:ef:07:5c:f0:be:
                    60:fc:e9:5c:60:01:3d:6a:13:7d:0e:42:53:4e:2b:
                    d5:32:9a:2f:72:e6:03:84:d4:d9:33:e2:e7:e6:71:
                    bb:18:94:b3:d3:02:59:b3:90:d0:45:dc:33:a1:ac:
                    20:1e:32:97:57:6f:49:37:40:26:7d:fc:9b:fd:c7:
                    c0:0a:29:72:a1:ef:45:a5:1a:2c:d1:7d:34:82:e4:
                    3b:ca:60:ee:39:6f:d3:0a:0d:29:8b:69:c5:a7:bb:
                    46:fc:9f:2a:0a:aa:eb:d3:f8:84:5f:47:56:a5:0f:
                    00:a2:a0:3c:7e:b9:2d:cf:36:70:2c:ca:c8:1a:b4:
                    8a:8b:5b:56:e0:77:18:8b:76:cd:3f:71:6e:9f:cb:
                    5c:86:4e:8f:a6:b0:ae:49:5c:fb:61:f9:a8:f0:29:
                    cf:5e:7a:43:01:4d:23:98:21:39:2d:fb:94:23:1a:
                    80:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B5:9D:4E:CF:D7:84:11:E3:BC:A3:3C:A3:C1:C8:57:AD:D5:44:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/832ee527-dad3-39d1-98ec-3a4f2ae8c284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:b9:72:4d:b4:5c:09:d6:18:90:07:9f:16:43:b5:86:b9:03:
         5b:97:71:75:1e:cc:3c:95:f5:33:54:57:b6:dd:e6:14:a5:07:
         5b:95:11:9f:cf:5f:d0:62:a7:1d:3b:32:c3:5e:70:49:61:b2:
         3b:c8:3e:0e:a2:e0:6c:6a:54:e9:9a:56:08:5d:9a:c5:9d:fb:
         6c:49:e2:74:a0:46:ea:f0:57:66:1c:e2:31:00:17:56:da:d5:
         fa:dd:3c:0b:b9:6d:6a:72:a5:dc:91:6b:83:c4:53:23:73:ec:
         31:f3:a3:12:18:a1:db:fb:c9:23:a3:13:c3:26:61:b9:51:c6:
         6f:e3:21:eb:79:92:92:a1:69:bb:f5:62:1e:0b:e2:50:a8:97:
         88:93:54:f6:66:f1:e7:f7:25:c6:df:f6:de:4d:bc:2f:2a:f4:
         a4:f2:d0:a2:2d:a2:c7:b7:87:e0:ee:92:0f:ef:11:c5:99:12:
         67:2b:34:9c:e6:95:2a:04:90:d6:fc:a3:1e:2b:1f:8b:5e:1b:
         b1:3e:f2:fd:9c:22:42:1b:e9:f8:3d:75:a2:37:c1:08:f8:a4:
         44:a3:df:42:e9:fe:ce:b6:ef:33:56:81:6e:91:b7:23:c3:a5:
         3b:1c:58:57:6f:64:3c:ce:63:9e:63:f8:a0:b2:2e:39:98:27:
         a5:40:77:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:34 2024 by rpki-client on console-fra.rpki-client.org