Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9447c60c-74af-3a13-871e-ccaf19026512.roa
File:                     9447c60c-74af-3a13-871e-ccaf19026512.roa (raw, json)
Hash identifier:          q7ylO5V0DVW2Q+n5d7+begzLbQFM/xClrXJBR6GNmAo=
Subject key identifier:   3C:7E:75:6A:FC:3A:76:EB:E5:20:A8:33:41:AF:D3:EC:02:73:C7:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476E00F62821D13AE0CD476080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9447c60c-74af-3a13-871e-ccaf19026512.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     36621
IP address blocks:        192.30.45.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:f6:28:21:d1:3a:e0:cd:47:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=5bfbd663-5fc2-4c85-93bd-6eef7f6ec3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:79:ed:0e:01:9e:d9:c8:6a:08:41:8c:da:82:
                    4a:13:16:e5:08:7d:ba:cc:d9:9e:43:2c:75:97:6a:
                    dc:aa:46:3e:c8:4b:2c:3f:61:90:35:93:43:28:e1:
                    7e:53:26:90:5c:48:cb:f7:db:a7:7d:30:1b:61:f9:
                    c7:e6:df:d4:78:01:64:40:f0:cf:77:6c:03:bf:4d:
                    4b:90:0f:14:41:49:ba:c6:3d:d0:e3:39:33:74:52:
                    d1:78:ae:ab:8b:4d:cc:b0:cc:a4:0a:f3:11:3f:e0:
                    96:0d:e1:8f:4c:86:3f:b4:90:1d:f6:9e:0d:9f:ca:
                    75:b9:09:78:0d:f0:99:a6:1f:42:8d:aa:43:9d:cf:
                    c6:51:51:89:a4:f8:df:95:2f:bc:4e:9a:8a:a0:60:
                    e8:fe:c6:d8:85:0c:95:8f:5b:23:f5:90:fb:b7:2c:
                    0f:9f:2a:26:b1:bc:13:17:68:81:f0:ad:af:37:be:
                    0d:8b:ad:c5:f5:25:02:35:d8:af:0b:f0:fa:8d:95:
                    cf:2e:40:7a:17:97:28:f3:cd:58:a4:82:7d:64:ef:
                    8c:02:84:72:d2:6c:75:fb:a4:72:c6:a9:0b:85:d1:
                    a2:9a:19:06:d1:1b:f5:15:ad:c7:e6:b1:84:fa:c8:
                    b4:4f:31:6a:34:3c:60:8b:7a:e2:c7:f8:28:3b:e9:
                    6e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7E:75:6A:FC:3A:76:EB:E5:20:A8:33:41:AF:D3:EC:02:73:C7:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9447c60c-74af-3a13-871e-ccaf19026512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:bc:b3:38:09:67:11:77:3a:73:42:90:ce:0c:c9:5b:15:28:
         f0:74:22:98:06:f9:55:ed:85:d4:48:04:3c:d8:4f:d0:91:fa:
         8d:02:29:c1:05:3f:90:b8:58:78:45:2b:4e:68:cf:64:53:58:
         ed:c5:62:68:96:a2:b0:39:e3:45:e8:55:55:d1:94:40:9a:13:
         93:a2:73:49:53:c1:1a:de:12:42:27:2f:28:83:09:5d:6a:8f:
         3d:17:d8:fe:b2:cb:68:5a:6d:a0:fc:f1:8f:70:33:dd:98:2c:
         66:6e:4c:55:20:72:d2:54:0d:03:2f:04:b1:6a:85:f9:da:76:
         b1:77:d0:cb:f5:d1:ac:ef:fd:58:05:ea:d1:aa:ab:d9:56:53:
         80:78:59:70:6f:6a:57:52:f2:97:46:c0:40:a1:78:46:fe:b7:
         f7:b0:90:6c:a7:54:a8:df:f8:a8:12:7f:09:b0:47:02:86:1c:
         a9:dc:2a:7c:67:75:cd:09:cb:87:1a:0b:66:3d:c8:df:94:a3:
         e3:e1:84:e9:9e:75:45:2d:12:e0:21:6d:fd:00:e0:97:9a:b2:
         c1:8c:fd:4d:98:99:e9:6a:65:f7:5d:24:9f:13:a3:a0:1b:d8:
         fc:66:9b:88:fd:e8:e2:78:c4:0c:32:7b:24:b6:a5:a0:63:45:
         43:71:1f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:09 2024 by rpki-client on console-ams.rpki-client.org