Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9aae268f-0b41-356c-b334-11f394b46383.roa
File:                     9aae268f-0b41-356c-b334-11f394b46383.roa (raw, json)
Hash identifier:          MFYraJM2l1QebmEdYx4pTa+XY5qhL8m4uTPJPa3H6qY=
Subject key identifier:   BD:9D:8E:5A:0A:77:E8:06:3F:76:58:CE:FE:9A:A1:70:4A:74:D5:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B98714C11DBD63145F6B9D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9aae268f-0b41-356c-b334-11f394b46383.roa
Signing time:             Thu 31 Oct 2024 14:16:40 +0000
ROA not before:           Thu 31 Oct 2024 14:16:40 +0000
ROA not after:            Wed 29 Jan 2025 15:16:40 +0000
asID:                     397203
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:87:14:c1:1d:bd:63:14:5f:6b:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 31 14:16:40 2024 GMT
            Not After : Jan 29 15:16:40 2025 GMT
        Subject: CN=319a8d28-3922-4db5-8a2c-3570782c964c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:9b:1f:0b:a3:44:7d:4f:f5:fc:fd:a3:fc:
                    9b:58:94:4c:ca:d5:14:bc:98:b9:5d:a9:fa:67:12:
                    7c:bb:c5:23:ce:84:37:1c:ab:fc:9b:dd:12:9e:e4:
                    ab:31:49:8f:17:6e:06:b2:77:16:f5:0f:8e:1a:12:
                    c9:bb:6a:b3:e1:16:f8:96:b6:32:1d:97:0e:42:10:
                    b4:c6:42:13:75:0e:a8:ed:ad:b8:98:88:be:46:8e:
                    be:7a:27:e2:3f:54:1c:ef:38:e7:3a:0c:4c:18:b1:
                    df:0e:a9:35:aa:a5:32:a9:9e:3d:ea:69:5c:7e:10:
                    9a:4b:7c:e8:50:1c:51:8a:21:a5:db:17:76:11:1b:
                    67:8e:6e:a7:88:2f:d4:10:16:f4:aa:d7:35:0e:82:
                    bb:7a:bf:95:1d:26:4f:98:11:70:ec:6b:1b:6e:19:
                    e4:c9:33:c6:ff:b4:65:6f:9f:a3:08:f8:43:71:02:
                    6f:a0:02:06:0f:cd:b9:44:49:8c:74:41:c6:25:3c:
                    51:7c:4b:e3:ff:5e:ff:29:18:35:6f:44:10:30:4f:
                    38:46:e6:2f:6b:b4:21:58:19:ad:f1:5a:ba:a3:51:
                    62:69:2f:fd:b9:5d:e8:5e:ab:d3:d9:c7:74:e9:d5:
                    0d:92:95:97:f4:8e:c4:d0:56:de:f4:47:44:82:c1:
                    2d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9D:8E:5A:0A:77:E8:06:3F:76:58:CE:FE:9A:A1:70:4A:74:D5:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9aae268f-0b41-356c-b334-11f394b46383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e3:04:a9:8c:0c:64:c4:c4:5d:87:04:ee:e4:e5:79:1b:b6:
         22:af:05:1a:76:96:99:2a:0d:83:73:44:46:8d:41:b3:97:da:
         79:f8:e6:0d:6f:bf:f0:1d:52:c1:6c:93:1a:23:26:4a:77:4a:
         03:a5:51:8d:b0:7b:03:ae:d4:01:0f:8e:9a:d0:66:68:eb:e9:
         a7:d8:be:f7:db:b7:d4:cf:63:f7:70:43:15:b0:aa:36:b8:ea:
         ff:2d:7f:02:26:f5:6e:88:ae:3b:d6:a5:b8:ff:f3:f6:0e:bf:
         95:8f:51:2b:c4:3f:b0:cd:d1:a5:fc:52:19:b7:d4:6d:6a:63:
         d5:7e:c2:f5:f9:08:0f:b2:95:1a:03:5b:20:0e:85:9b:08:25:
         24:b1:fa:e4:e0:a7:a0:66:2d:2c:d6:01:23:6a:62:ea:06:86:
         1e:7a:a2:8d:68:e8:74:40:d1:d1:00:42:69:b4:10:df:78:85:
         95:3c:ea:d6:e2:8a:05:94:72:6c:b4:03:01:21:11:72:13:af:
         c2:0f:df:db:d5:05:ae:f3:f1:7e:8e:96:b0:a3:45:10:42:e5:
         d4:af:42:ff:b6:2c:24:57:5d:b4:1b:44:4e:83:06:10:f3:97:
         3b:45:27:34:3e:2a:c1:e8:10:75:1e:c4:a0:ab:ff:bb:43:a5:
         d8:29:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:10 2024 by rpki-client on console-ams.rpki-client.org