Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f95ef66-277d-301c-a319-98353b50df8b.roa
File:                     9f95ef66-277d-301c-a319-98353b50df8b.roa (raw, json)
Hash identifier:          MX78jKi8If1hDA+ZH5nmZw9Gb2W3xXQTCMfqWyCfN/g=
Subject key identifier:   67:AD:52:FE:5E:BC:4D:56:E1:2E:AF:AD:95:40:76:0E:57:64:73:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A203364877C798F80C400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f95ef66-277d-301c-a319-98353b50df8b.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     396574
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:20:33:64:87:7c:79:8f:80:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=581c0ae4-460e-4d46-9b7a-0cb51de093fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:54:9b:5e:09:65:a2:65:24:9c:56:1a:71:af:
                    15:ed:c6:41:f2:48:f2:b4:b6:e6:95:d7:b4:f9:aa:
                    ee:29:e9:d4:30:c9:f8:bf:ba:8a:03:8e:fc:49:ce:
                    09:25:84:bf:e0:59:4b:60:e7:ff:2b:f7:5d:ba:4a:
                    6d:0b:15:21:0e:11:37:54:c8:be:b8:05:10:2e:35:
                    7d:6e:22:eb:a0:55:96:96:b5:24:fe:86:50:ed:a0:
                    fa:a7:e5:c3:65:7a:a4:cd:d5:01:07:c7:41:8c:8f:
                    08:c2:6e:1f:55:78:a3:d5:d4:1a:f3:34:c2:02:cb:
                    e2:8b:18:45:ad:61:34:13:30:93:8f:f5:d5:27:dc:
                    8e:34:3e:07:4e:f1:0a:0e:46:87:88:93:81:d4:67:
                    c7:fa:0d:94:34:f6:32:ad:0b:a1:a8:ff:8c:b6:12:
                    c2:f9:4c:d4:5f:bb:8e:4a:11:8e:6c:ee:0a:9b:8b:
                    f7:ab:51:f7:d2:d7:8f:a8:53:66:7a:76:35:8b:a9:
                    fe:1c:11:60:0a:5a:13:eb:76:96:bb:7c:24:12:fa:
                    6d:26:59:ee:30:70:a8:13:54:77:b9:0f:31:8f:59:
                    35:e4:40:c7:d3:14:63:ea:10:31:42:71:d8:0c:2d:
                    0a:2b:e3:b1:60:6d:3a:aa:9b:55:32:e2:69:67:2f:
                    ca:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AD:52:FE:5E:BC:4D:56:E1:2E:AF:AD:95:40:76:0E:57:64:73:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f95ef66-277d-301c-a319-98353b50df8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:2f:d2:b4:0d:8d:73:a4:84:9b:83:c5:2d:2a:ff:df:e9:7c:
         4d:6b:87:3d:b8:4b:21:16:8e:04:91:12:1a:a3:dc:36:41:7f:
         05:d0:bc:bc:df:eb:a5:0a:ff:4c:af:3d:3e:2f:b0:d5:6f:57:
         be:32:82:29:ed:c4:2a:17:b3:e0:57:3c:85:5c:aa:a7:a8:c5:
         74:14:a6:64:21:f4:81:96:c0:f9:08:2f:28:2e:f4:b1:ac:7b:
         67:be:3e:ab:b6:24:96:3c:ed:4b:9f:6c:67:43:af:87:c8:9a:
         04:ee:69:b4:57:e1:81:96:f4:50:e6:a3:ce:5e:f7:53:09:45:
         ef:7c:bf:fe:2a:20:fa:25:2c:b6:9a:8b:03:e6:89:06:7f:97:
         db:78:2f:fe:dc:03:81:00:d4:3c:f2:a5:92:6d:09:13:3c:c7:
         67:21:6c:1d:ce:87:7d:03:4b:ef:0a:f1:60:5c:0a:83:e8:8e:
         dc:b2:50:2a:f6:91:b0:19:6e:ac:3c:ac:a2:7e:31:cf:84:fa:
         dd:1d:ae:e4:00:05:af:b4:80:f4:1a:41:c8:04:db:11:58:f6:
         3a:7d:4e:49:06:66:ea:35:50:02:87:b6:86:2a:42:8d:38:6b:
         59:53:1d:0b:e9:53:80:84:6f:eb:f4:34:6e:1f:e3:5e:a5:ca:
         2b:33:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:11 2024 by rpki-client on console-ams.rpki-client.org