Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d57b9d1-ede0-3be0-a7aa-ff6d6d8bf196.roa
File:                     8d57b9d1-ede0-3be0-a7aa-ff6d6d8bf196.roa (raw, json)
Hash identifier:          cbjDq2tEutuXF936XuNxlAI+GvW/FjfbWJtice33LU0=
Subject key identifier:   3F:7A:05:D8:54:2E:87:8E:DC:6D:4A:DF:F1:C9:9A:7D:41:3D:E4:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476E00F27594CAAB1018C50520
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d57b9d1-ede0-3be0-a7aa-ff6d6d8bf196.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     396566
IP address blocks:        192.30.45.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:f2:75:94:ca:ab:10:18:c5:05:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=ee4a2771-70db-4504-9759-c7fbbeef753a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1b:ef:3a:5f:02:ba:32:b4:05:16:57:71:4d:
                    73:cb:77:93:d0:e6:9b:04:17:b1:55:2f:47:1c:47:
                    ef:ee:cf:18:68:62:c9:53:bc:fe:f3:ff:ac:b9:76:
                    89:ff:2c:68:38:64:b3:86:2b:e1:da:f2:a2:01:33:
                    3f:71:d7:1a:e1:48:7b:15:fc:84:3d:17:09:d5:72:
                    06:2c:2c:52:f5:74:4c:7b:50:5f:f7:90:22:57:9e:
                    8b:f6:e6:d7:14:ea:0c:04:91:6e:27:a5:f4:8d:66:
                    63:63:cb:c4:24:af:21:0d:94:b6:59:69:bd:29:ab:
                    68:a0:a5:90:82:3d:4c:f8:f1:fd:dd:9a:d1:22:1c:
                    db:7a:e1:4d:0c:fa:b2:7c:83:a4:93:97:fd:d2:e7:
                    c2:2c:25:de:37:bf:73:3c:fa:25:93:05:8e:c6:98:
                    8f:82:14:9d:d4:91:01:58:f7:ea:80:ca:9b:d2:95:
                    9c:89:af:4a:70:ae:78:61:c1:07:f2:ea:bb:fc:d2:
                    fc:53:52:a5:99:fa:cd:39:c8:ea:00:7a:b8:d9:04:
                    8c:d4:bf:b8:1d:02:f4:23:cf:25:f9:83:bd:41:b3:
                    3c:ff:7b:1d:da:7a:4b:b6:c5:5a:96:9a:03:75:af:
                    82:c0:49:39:6f:b3:66:04:9c:12:75:40:a6:32:67:
                    b5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7A:05:D8:54:2E:87:8E:DC:6D:4A:DF:F1:C9:9A:7D:41:3D:E4:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d57b9d1-ede0-3be0-a7aa-ff6d6d8bf196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:fc:89:d3:60:ff:72:73:dd:b8:65:11:4e:6c:b2:5a:99:40:
         31:4a:8c:c2:4b:61:e6:75:95:38:e2:01:c8:09:34:59:ad:ac:
         74:c6:80:0a:a8:a5:9e:9a:80:91:99:a1:e0:17:77:4a:90:5f:
         c5:cd:bf:43:c2:86:70:15:c6:9e:c8:2a:04:33:f3:e0:55:04:
         7f:0c:e3:48:ef:1c:5a:76:00:da:63:91:bd:e9:38:c4:d2:3c:
         c7:59:d1:f4:ec:36:66:ca:0b:25:f6:2b:43:66:9c:81:2b:3b:
         9e:b8:63:d2:93:7f:5e:36:c7:1a:e1:26:34:7e:ba:1f:d4:36:
         1a:d5:ad:af:d8:b7:e9:f1:c3:9d:0e:18:cc:c2:ba:9a:85:f4:
         de:f1:8d:a0:ec:02:e6:bd:7f:a2:6c:7f:7c:35:dd:43:50:e1:
         4e:52:c4:15:18:97:00:ca:fa:65:14:9b:52:cc:66:f2:e6:5b:
         3a:81:31:54:27:0b:63:44:f5:23:6c:aa:01:16:c8:50:c9:3d:
         f8:11:bc:bc:68:23:2d:d2:ac:0c:3d:62:c2:cb:01:9c:2c:20:
         06:40:8d:81:dd:e7:fa:5a:e0:e7:d7:50:2e:da:81:55:77:4f:
         6d:5a:7a:dc:25:37:01:c3:30:d4:db:7b:cd:e8:2c:31:4d:cd:
         25:2e:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:08 2024 by rpki-client on console-ams.rpki-client.org