Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1423392-70c8-3f9f-9bb5-fa6b49bb2546.roa
File:                     a1423392-70c8-3f9f-9bb5-fa6b49bb2546.roa (raw, json)
Hash identifier:          YkJtuVBZwW+AzNvAKzT7P1GJD9jEh8ovlOW8gtR+OYc=
Subject key identifier:   C8:53:7B:F6:07:14:29:F0:74:70:45:A6:DA:CD:38:6E:AB:9A:0C:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D149AD9AB2E6279F016260
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1423392-70c8-3f9f-9bb5-fa6b49bb2546.roa
Signing time:             Thu 24 Oct 2024 12:50:01 +0000
ROA not before:           Thu 24 Oct 2024 12:50:01 +0000
ROA not after:            Wed 22 Jan 2025 13:50:01 +0000
asID:                     396544
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:49:ad:9a:b2:e6:27:9f:01:62:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:50:01 2024 GMT
            Not After : Jan 22 13:50:01 2025 GMT
        Subject: CN=7c2fbd93-cdf3-4829-b463-1fe6bc3f9f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5c:69:73:98:91:bf:94:bb:e8:ed:4f:5b:78:
                    3c:8e:57:af:81:aa:1a:78:f1:7e:e1:28:e7:75:82:
                    b8:43:30:3c:fd:76:49:94:fa:2a:d9:4a:bf:28:fd:
                    84:02:3a:12:43:60:a4:6d:cb:d8:78:cf:f9:4e:d7:
                    57:40:a4:f9:d3:b5:fc:7b:62:9c:65:8b:b0:66:54:
                    42:8f:d0:62:aa:48:b1:c4:08:ad:03:e2:5a:79:48:
                    5c:18:45:52:07:e9:bd:a0:7a:ab:87:ef:ec:6f:48:
                    47:66:fb:af:73:d2:a2:04:f8:71:ee:c3:23:38:a2:
                    7c:68:bd:b6:c3:3c:14:85:ab:c7:be:86:98:bc:ff:
                    fc:84:f9:d6:5a:6d:0d:bf:91:ad:96:0b:16:b7:c6:
                    87:36:44:de:78:98:cf:44:da:6a:6d:43:7a:16:ff:
                    23:cb:6e:80:05:4c:f1:7f:2c:28:a0:fd:14:9b:c0:
                    8a:fe:f7:f4:d3:36:bb:eb:5a:37:9f:67:bb:11:ca:
                    88:37:7d:26:44:74:c1:72:d2:72:e6:24:54:ac:bb:
                    e4:28:06:a4:a7:79:79:c5:f7:96:fa:27:0f:c7:3d:
                    a1:e8:e7:cc:8e:ed:11:6f:a6:91:fb:02:df:c8:bc:
                    cf:0c:0e:19:4d:1b:79:56:98:e1:18:0a:4f:06:03:
                    a2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:53:7B:F6:07:14:29:F0:74:70:45:A6:DA:CD:38:6E:AB:9A:0C:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1423392-70c8-3f9f-9bb5-fa6b49bb2546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:cb:f2:56:70:6a:60:7a:08:5f:4c:f5:74:76:e0:b8:c5:39:
         ea:63:3c:c2:74:9e:d5:47:69:a7:30:c5:fa:6c:56:82:2c:6e:
         77:ed:23:0e:35:f6:9a:2e:dd:b5:ac:16:48:cf:8b:2b:aa:4b:
         d6:1a:2b:a8:da:d0:e9:60:94:94:66:88:59:cf:58:77:0f:9c:
         96:21:f0:77:7d:ad:77:9f:c5:8d:d5:fc:95:42:2d:ea:ac:da:
         3e:6d:74:ce:c1:14:18:7a:a8:e5:32:d9:14:5c:89:4b:c5:ed:
         a9:c5:7a:05:46:17:73:f2:df:84:52:05:c4:8f:ee:09:2d:5d:
         06:eb:ad:08:c8:d6:71:68:09:ac:05:5b:a2:9f:b2:72:39:df:
         35:3a:04:b6:99:1a:06:51:bc:9e:f0:27:89:ff:8b:6c:71:9a:
         b7:de:2c:97:f8:34:a5:cc:63:c0:26:ab:d5:e0:c8:e0:20:40:
         51:b2:23:fa:f7:ea:8c:5a:47:20:76:8c:a7:3f:d7:7b:fe:ee:
         63:d1:1b:8f:05:a7:3f:e7:a4:18:47:c1:5f:eb:ef:c7:98:01:
         74:a6:dc:d2:3e:f7:89:5f:91:d0:84:a3:6d:cb:e0:a0:41:74:
         80:23:0a:27:bb:f3:39:c5:17:39:82:8d:f0:52:4c:17:5d:df:
         ad:a1:f6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:39 2024 by rpki-client on console-fra.rpki-client.org