Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa
File:                     9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa (raw, json)
Hash identifier:          S/taSUQ56tv6AXi/3Ca3wRxSMJS3w5DnsvZaQPBgm7w=
Subject key identifier:   1E:E2:DF:C0:51:48:F8:CA:AE:E2:27:8E:E0:E3:3B:43:DE:50:4D:02
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C1023D48F33737AC4980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     396602
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c1:02:3d:48:f3:37:37:ac:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=c179dc1c-65ef-47a4-8d40-611c1f237f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c3:2b:f9:c4:b7:c4:d4:a0:dd:8b:d4:a9:91:
                    8e:9f:4f:9c:a7:e3:fb:01:ca:68:19:1f:ad:aa:5f:
                    3e:79:37:05:02:63:03:3d:6d:c4:29:ab:31:98:6a:
                    1d:6d:d5:5e:00:1d:13:f6:b0:ca:0f:8b:d2:de:5d:
                    30:39:c9:aa:63:fa:25:36:d8:fc:c4:e9:39:41:95:
                    7f:94:f2:c7:84:df:bd:b3:4a:18:1b:d3:b0:a6:13:
                    8f:11:37:c9:fe:27:e5:16:c4:cc:a3:74:64:f7:e5:
                    b5:e5:8d:9c:a7:c3:08:7e:dd:e4:51:07:89:c5:1f:
                    86:54:81:25:60:59:5b:d7:3a:4b:fb:0f:6f:eb:aa:
                    34:9a:d8:72:87:54:45:89:bf:eb:48:e2:83:3a:85:
                    85:67:68:cf:7f:09:64:2b:57:b3:ec:3e:b4:9a:02:
                    fb:2a:bb:16:da:9d:1a:f8:3d:8f:28:3c:5f:a1:98:
                    b8:98:71:db:80:6d:bc:f2:b8:07:8b:28:9a:0c:94:
                    40:bf:4a:3d:5d:05:d1:8b:05:c2:0e:c6:56:05:85:
                    cd:63:f0:3f:35:4d:a2:02:af:da:2d:a2:8d:21:00:
                    96:86:51:56:78:8a:99:2f:d0:85:0a:35:ad:61:f2:
                    1a:73:94:12:c7:98:b5:bd:83:8a:81:dd:0e:06:20:
                    79:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E2:DF:C0:51:48:F8:CA:AE:E2:27:8E:E0:E3:3B:43:DE:50:4D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6b:17:51:8b:5e:ff:46:1b:27:ed:0c:bb:ba:07:3a:ce:f9:
         f9:42:b8:98:ec:ca:d9:d5:ce:35:36:f4:3c:45:76:2b:30:d2:
         c3:82:d2:0f:9e:79:ea:9f:d1:ec:82:a7:8a:db:a3:24:6a:8e:
         26:8f:c1:01:cc:ea:4b:08:fc:06:3b:93:09:1b:5a:a1:7d:4b:
         af:c8:3d:6a:6b:40:73:5f:8c:f5:46:0c:d3:d2:38:a0:20:58:
         16:cd:e8:1d:41:1c:10:9b:41:d0:3e:27:b5:60:e0:33:c5:a6:
         85:3f:5c:64:9d:b8:c1:2c:93:f0:f0:42:fa:bb:18:c2:33:a1:
         78:1f:03:0e:21:74:4f:fb:88:d0:fd:74:4b:a0:66:ee:d6:f8:
         66:cc:5b:4e:0f:b1:42:06:c7:98:e5:fd:66:5c:52:fe:ca:f5:
         e8:f3:23:a4:50:ad:23:f1:93:3c:66:a6:a1:2f:59:97:ea:4a:
         d9:cd:eb:f8:dd:b6:e4:4f:9d:0d:b0:ff:c8:48:23:98:1e:d5:
         cd:08:0c:83:d8:e5:13:82:98:3d:9b:05:fb:e8:16:1d:c2:b0:
         ab:97:05:2e:e8:93:05:6d:5e:67:50:32:4a:af:7d:2b:bf:ad:
         09:8c:f0:58:aa:e1:40:d8:b3:f1:7c:90:2f:9b:83:65:70:46:
         12:d9:9d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:37 2024 by rpki-client on console-fra.rpki-client.org