Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988a3538-be61-39c9-a1cb-f7b48e5b1200.roa
File:                     988a3538-be61-39c9-a1cb-f7b48e5b1200.roa (raw, json)
Hash identifier:          tCKayaoqD+iCbRCODOH4NZFkuF/BKdJc7TYZFHvBs1Q=
Subject key identifier:   AB:08:E6:14:19:9D:E9:58:98:33:F0:EB:7A:0C:A5:F4:41:00:CD:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C65D2DC9139284582998
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988a3538-be61-39c9-a1cb-f7b48e5b1200.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     21313
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c6:5d:2d:c9:13:92:84:58:29:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=07d9624a-48b7-43ec-9771-d91343ad061b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f3:c6:21:7c:64:94:21:50:3a:7b:0c:dd:c2:
                    4b:38:a3:5b:dc:bb:29:01:5f:4c:3b:c1:3e:b6:d5:
                    8d:45:c0:ff:8a:24:3c:b0:e9:f5:11:4e:17:a1:3a:
                    56:98:37:f4:b9:93:39:ea:cb:50:5b:00:46:25:c4:
                    63:91:21:ca:57:48:65:b3:10:c5:30:28:80:10:41:
                    f4:de:38:6c:93:b8:d9:bb:3d:17:39:87:55:24:ff:
                    d9:b5:e3:32:e0:78:e6:24:2c:98:51:ad:fc:fa:e6:
                    be:36:ab:de:a8:b7:c8:57:4b:75:8e:3d:fe:37:27:
                    a8:24:f6:7f:f8:e8:51:b1:d4:e4:bd:d3:1c:34:1b:
                    fe:c9:64:34:c5:c3:93:71:5e:30:7e:9c:44:5d:6a:
                    c4:37:96:4d:e3:e2:b1:69:7e:a2:6d:fe:60:bc:fb:
                    68:94:2c:c3:5f:fd:7b:91:b8:7d:b3:68:08:b3:4d:
                    5d:c1:b8:f6:15:38:c0:08:cf:9f:a4:f5:60:a4:4f:
                    3c:f0:24:05:c5:67:e3:7b:66:f9:0f:23:26:7b:f5:
                    5a:9c:83:cf:0a:e3:07:50:8b:b8:32:e5:e2:d0:3c:
                    6f:a7:15:93:6b:f3:c7:83:2e:2b:a0:7d:73:bf:fe:
                    d0:1f:bf:f8:6d:dd:40:3d:9e:62:13:25:5d:26:ba:
                    d5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:08:E6:14:19:9D:E9:58:98:33:F0:EB:7A:0C:A5:F4:41:00:CD:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988a3538-be61-39c9-a1cb-f7b48e5b1200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6f:d4:81:3a:69:ba:7d:84:c5:1d:d6:36:52:8f:f8:6a:08:
         a9:24:90:51:e7:e0:6a:97:77:21:f9:62:2f:ff:e9:5d:3f:b1:
         c5:c1:e1:79:af:b4:4b:87:0b:ce:cb:83:14:3b:63:24:68:a9:
         2b:a0:6c:4b:9b:33:72:dc:6e:94:c3:c9:e7:72:06:0d:6d:e8:
         6b:32:78:3e:e1:f8:e1:1c:6c:b8:e8:07:fe:d1:1f:17:56:0e:
         c2:67:68:24:17:2f:87:e8:f8:36:89:dc:b0:92:57:b2:b1:83:
         67:ae:40:a7:55:84:cd:fe:15:e8:94:74:f0:49:fc:95:52:b4:
         67:8d:b7:86:b0:c8:6a:e3:2f:01:94:00:73:b4:f0:f9:7a:3b:
         de:ae:6d:78:25:64:82:2e:ca:c6:a4:c6:d9:1b:b4:c8:a2:c8:
         db:e6:1a:37:39:88:b5:e9:2f:fc:04:e1:c0:72:72:e3:8a:9d:
         7e:4a:f0:41:0d:b0:fb:c6:54:3f:d2:f5:8c:6f:0a:34:da:e7:
         a4:34:45:7f:12:8e:78:33:4f:31:8d:6b:6f:1c:8e:67:4e:2a:
         a7:04:60:76:b0:d3:34:fd:15:c3:0f:e1:2f:15:8b:52:5c:91:
         8c:d0:4c:bd:f5:9f:37:cb:16:a6:eb:e3:5a:56:0d:3a:f7:76:
         0d:dc:6b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:10 2024 by rpki-client on console-ams.rpki-client.org