Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c3e3eda-ee83-3a31-9bba-0f40c259e89d.roa
File:                     8c3e3eda-ee83-3a31-9bba-0f40c259e89d.roa (raw, json)
Hash identifier:          QK9XBhVZ4b91B2wZDYFC31wZ4XbofWe9YenaMEElk5c=
Subject key identifier:   0C:9F:9F:DD:77:87:E1:96:52:B8:CF:EA:60:5B:CA:A3:5E:32:56:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A2573C78B0F503A617900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c3e3eda-ee83-3a31-9bba-0f40c259e89d.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     397207
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:25:73:c7:8b:0f:50:3a:61:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=43270069-3b21-4c72-953d-11a29c6ba20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:64:26:fe:ea:3d:2a:0a:46:a1:58:86:b3:
                    3c:29:cb:d2:7e:85:2d:66:79:62:07:55:32:25:f6:
                    95:70:06:2a:25:3c:34:1a:3b:df:50:58:02:ce:f4:
                    31:2b:48:3a:85:13:ee:d2:7b:28:6b:7a:36:8e:3b:
                    20:e9:33:55:de:7f:09:6e:ae:e1:45:f2:8d:a0:21:
                    ce:51:28:1e:11:85:2d:2d:e7:90:48:74:3f:58:8b:
                    04:01:8c:f2:7b:7d:fe:72:d1:58:cf:13:44:03:2d:
                    90:3c:c1:79:b8:94:fb:2b:47:8b:2f:19:10:6a:0f:
                    f6:98:5c:28:3a:a4:e0:20:ae:80:4f:c8:fe:62:7c:
                    bf:34:a5:e8:08:3b:fd:2a:c7:b0:9c:c2:90:b1:ad:
                    a5:2d:d8:ab:72:5a:9b:1b:6f:65:7b:fd:da:dd:c1:
                    28:14:08:54:1b:bd:27:c7:08:64:81:fd:b6:b5:f8:
                    da:df:41:51:d1:3d:1d:8d:56:f7:87:9b:e0:8a:97:
                    85:9f:f9:55:21:56:7a:86:ad:71:29:b9:61:17:f2:
                    6a:28:1d:dd:3a:7f:56:5c:95:20:34:f2:0f:2c:e9:
                    3d:1a:36:1b:58:b0:e2:59:16:ba:bb:11:97:ec:c0:
                    8c:3f:a7:4b:45:f0:b2:66:45:04:6c:2f:a3:ba:e8:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9F:9F:DD:77:87:E1:96:52:B8:CF:EA:60:5B:CA:A3:5E:32:56:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c3e3eda-ee83-3a31-9bba-0f40c259e89d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:84:a2:a1:55:e4:06:17:02:42:60:fb:4e:3c:e2:46:b6:a2:
         a1:c0:d2:d6:b3:fd:75:f7:bb:c0:2a:2d:4e:8d:73:53:93:a6:
         94:07:99:86:b0:85:4e:1e:d3:ca:99:99:91:53:4c:66:8c:eb:
         5e:ff:18:ca:38:70:10:8b:5d:74:73:26:5d:39:1c:b0:2f:58:
         69:a3:1b:32:04:90:51:c3:d1:8e:2c:0e:61:6f:c4:60:3c:f8:
         7a:59:3b:a9:de:1e:9d:8a:e7:c2:2c:ac:45:35:98:2c:5a:24:
         47:32:43:6d:97:60:af:1c:69:f1:fa:cc:01:5a:37:d1:06:fb:
         60:a9:c7:eb:01:25:52:0d:1c:99:16:44:c2:3c:ed:81:c4:a9:
         96:f0:d2:b6:54:86:93:c2:73:92:cd:86:5f:f5:73:b7:58:b5:
         bf:bc:a6:e2:1a:76:78:c3:52:74:4d:6c:25:73:c1:be:cb:fd:
         bd:51:90:69:d7:b9:f8:9a:21:09:62:a2:e4:9e:e9:87:03:24:
         89:f1:a8:b0:04:37:b4:72:d2:ec:c1:35:67:5b:44:fa:f6:12:
         ba:40:86:67:24:f6:da:6f:93:44:29:1f:f4:4b:90:32:e1:95:
         49:eb:0f:98:b0:7d:2b:11:62:c3:62:17:f4:bc:2c:0e:15:3c:
         58:8c:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:08 2024 by rpki-client on console-ams.rpki-client.org