Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98cb52bc-dd21-3f5b-a72a-55390f74a5ee.roa
File:                     98cb52bc-dd21-3f5b-a72a-55390f74a5ee.roa (raw, json)
Hash identifier:          jxm4foY4JmHXN/Iy1rqnxXsYyyg/u0RuJ3JK24nzM70=
Subject key identifier:   A9:47:17:F8:C0:2F:AD:C4:57:B2:BF:52:2D:8F:FD:58:3A:EE:C9:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476E00F508412B6D757AEE1100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98cb52bc-dd21-3f5b-a72a-55390f74a5ee.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     396608
IP address blocks:        192.30.45.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:f5:08:41:2b:6d:75:7a:ee:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=54bd8554-6b9d-4021-8788-c2f31c78c8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:69:0a:b5:3b:9a:96:0c:d7:da:09:01:80:0d:
                    3c:3d:37:5b:0c:68:61:af:67:ac:ac:4e:8f:01:9f:
                    7c:1b:20:be:f1:3e:66:cc:72:f2:c8:4d:45:8f:78:
                    88:e8:2d:3d:b7:da:1e:3b:c3:27:82:5a:95:ca:0d:
                    ee:9f:15:ce:a3:27:b8:0f:3b:c5:5f:3a:67:8b:c3:
                    ad:29:1d:b2:33:11:69:f6:df:94:26:e3:d2:85:5b:
                    fd:51:4d:a7:ee:13:1f:e6:0c:6b:66:21:8f:90:d2:
                    b9:ce:6b:07:60:a0:eb:64:80:f6:47:b8:6a:c3:6e:
                    8a:dc:2c:4d:6d:15:fb:4e:9a:4f:c1:78:cd:2e:35:
                    35:08:f8:9b:71:0d:07:6b:c4:cc:6b:0c:fb:82:0f:
                    44:cd:3e:68:fc:9c:ed:66:cb:90:60:b6:da:8c:81:
                    a0:eb:2b:78:be:e8:91:78:58:86:89:33:98:e3:f7:
                    e3:df:e0:9f:21:51:e6:4a:0f:cc:83:9f:d1:b7:bb:
                    27:f1:e6:c8:f5:ac:58:ab:99:ec:c8:47:30:fe:4b:
                    46:6c:aa:88:0b:34:2d:00:7b:ea:37:67:40:04:0f:
                    16:75:59:8a:9e:56:90:32:37:91:cc:0e:92:cc:6a:
                    d7:78:ed:97:65:34:87:8f:d3:b1:c7:8b:52:42:7b:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:47:17:F8:C0:2F:AD:C4:57:B2:BF:52:2D:8F:FD:58:3A:EE:C9:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98cb52bc-dd21-3f5b-a72a-55390f74a5ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d3:42:f0:08:d3:93:1c:b5:73:34:97:1c:00:cc:74:62:c3:
         bd:32:e1:a5:2c:70:e2:73:46:5f:fb:79:6c:03:6e:bc:6e:4b:
         1c:f7:b8:a9:07:cd:a6:80:c8:c4:98:cd:92:1e:5b:9c:bb:e7:
         c7:42:d1:4f:d0:cf:07:ff:07:dc:8a:ec:3c:c3:32:cd:82:8b:
         8b:a1:b6:e6:2e:17:c9:c7:41:c8:8b:8b:68:5b:1c:fa:73:52:
         31:2e:28:40:0b:5e:d9:51:64:1d:16:63:12:39:48:b9:c8:ac:
         8c:72:55:67:fe:7f:c4:8d:33:5a:f0:84:fe:c7:97:de:3c:00:
         d5:89:7a:6a:2c:f6:2d:d1:bb:34:20:91:dd:b5:c4:d9:13:ab:
         4f:bb:3f:9d:b8:cf:96:9d:39:66:9c:1b:cb:5c:27:d7:78:2b:
         bf:56:40:e9:cd:09:19:a5:09:29:d2:ac:78:5c:e5:a6:64:9c:
         d6:07:60:28:6c:96:0a:18:39:ba:1f:e6:b5:97:d1:3b:a4:53:
         17:0c:2b:09:3c:2b:93:ed:2e:4b:00:74:e0:97:b1:b7:45:ec:
         71:8a:e0:0b:25:ec:06:bd:69:4f:aa:be:66:72:52:46:14:88:
         58:3e:60:69:c2:c1:13:cc:c8:d5:86:ff:04:1f:04:a4:87:60:
         ad:cb:2b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:37 2024 by rpki-client on console-fra.rpki-client.org