Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a15dab8-f929-3c24-b2c8-f01107dc71de.roa
File:                     8a15dab8-f929-3c24-b2c8-f01107dc71de.roa (raw, json)
Hash identifier:          mQLsdCkrJD5CCsSDAapnaoTVgzJyUq461xxJh9d4ULE=
Subject key identifier:   24:6D:74:7F:31:89:0A:08:56:8E:8D:D4:72:36:56:D3:C3:9B:46:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D141316CB1F3EEDC688180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a15dab8-f929-3c24-b2c8-f01107dc71de.roa
Signing time:             Thu 24 Oct 2024 12:49:57 +0000
ROA not before:           Thu 24 Oct 2024 12:49:57 +0000
ROA not after:            Wed 22 Jan 2025 13:49:57 +0000
asID:                     396569
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:41:31:6c:b1:f3:ee:dc:68:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:49:57 2024 GMT
            Not After : Jan 22 13:49:57 2025 GMT
        Subject: CN=890b7216-863f-4a3c-9302-be8d552eb3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:c1:6d:4e:54:11:1a:d6:16:d3:6f:be:d9:
                    ed:d4:3b:36:db:5c:04:38:14:f3:b2:00:55:a7:64:
                    c6:50:17:00:c7:4e:ce:f2:12:6e:3e:a3:f0:06:ce:
                    e3:ab:1e:78:42:03:e9:c6:cc:a5:40:05:dc:62:db:
                    8d:89:11:1d:5d:2c:32:79:dc:7c:03:8f:a5:71:d9:
                    ef:f4:b5:05:38:67:da:31:6e:d5:2f:5b:bd:97:65:
                    62:e5:32:10:a4:58:5f:69:ad:67:be:1f:8e:cc:1f:
                    c3:66:38:e5:d5:23:77:af:02:22:6c:7a:33:7c:a7:
                    33:ad:ce:54:80:bc:37:bb:e7:14:ba:75:6a:d3:10:
                    a1:c2:60:ac:0f:7e:3d:13:71:b3:61:d0:30:db:aa:
                    7e:e3:ab:9e:4a:c7:5d:ed:3c:38:a4:a3:15:40:b6:
                    92:3e:1e:c2:62:65:53:ba:d3:7c:86:0a:90:dd:b2:
                    7c:90:47:f0:00:84:0e:94:e4:b7:85:8f:34:c7:af:
                    4c:d2:e7:09:01:19:74:de:ca:17:25:0c:59:a7:04:
                    1b:9d:85:16:35:87:65:cf:40:b3:24:dd:d2:b3:25:
                    cf:16:fa:8e:df:d3:cf:9a:65:f4:a4:9d:59:4a:46:
                    d6:4e:74:14:5c:e5:2b:31:96:be:90:ea:1e:25:d8:
                    95:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6D:74:7F:31:89:0A:08:56:8E:8D:D4:72:36:56:D3:C3:9B:46:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a15dab8-f929-3c24-b2c8-f01107dc71de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:a7:4d:44:d7:de:ca:4b:4c:76:65:e1:6a:35:66:d4:0e:4e:
         fa:f9:0e:44:47:5d:1b:fa:79:ab:09:8f:d1:40:aa:32:ec:77:
         ef:d1:d3:97:00:28:ce:4f:a3:3e:3a:f3:36:f1:73:71:5a:b8:
         74:24:61:20:11:22:6b:31:33:66:f4:4d:be:d9:2d:fa:2a:02:
         bb:65:6f:62:c6:e2:f1:0d:95:30:a3:26:6e:6e:a4:e7:73:04:
         2e:e5:c3:d8:f4:e2:1c:1f:82:ee:0d:72:a0:f3:f2:12:c9:f2:
         05:67:e7:fb:58:d7:3c:46:2f:65:18:82:ae:01:9a:93:f5:3e:
         db:eb:d2:36:a0:65:51:96:a2:0b:e4:9e:02:80:79:e8:44:16:
         dc:3f:71:f5:f2:7b:75:53:fe:0d:a9:ee:de:2d:7b:fe:0a:45:
         d6:67:d0:05:76:18:25:dd:0c:5a:e3:b6:08:06:a8:78:d6:cb:
         e3:54:81:14:68:02:d4:7a:9c:4d:d5:37:da:4d:d5:40:64:d4:
         61:8f:94:5b:6d:9c:90:78:24:1f:0e:b5:b0:64:52:ee:6c:80:
         e6:f0:3c:fc:cb:f5:63:08:e0:09:ce:df:7d:7e:ad:03:9c:c7:
         bd:1e:b9:85:ca:06:55:e5:cc:bb:45:4a:c3:23:2e:25:29:cc:
         bb:d8:07:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:35 2024 by rpki-client on console-fra.rpki-client.org