Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4d9d405-a38e-3d78-8539-12ddf6b1ecb3.roa
File:                     a4d9d405-a38e-3d78-8539-12ddf6b1ecb3.roa (raw, json)
Hash identifier:          F7TdndiA4amu1IcwA/mAvMpSzCbxl4rcDVyL+a4s6Eo=
Subject key identifier:   BE:40:69:BA:62:0A:4B:09:40:5D:ED:6D:50:B7:35:CA:08:E1:A3:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476E00F108C63A124101C23480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4d9d405-a38e-3d78-8539-12ddf6b1ecb3.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     396581
IP address blocks:        192.30.45.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:f1:08:c6:3a:12:41:01:c2:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=db4cf2ec-1bf7-4ab6-b36e-db43aa0032b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bb:63:47:60:37:21:29:99:d0:86:54:ba:13:
                    dd:19:cd:1e:98:c5:d5:8b:78:bd:d7:3a:2b:cd:13:
                    33:81:2e:fc:8f:ea:5b:74:34:2f:cc:77:35:63:38:
                    de:30:91:b3:6e:cf:6b:a3:c1:24:37:43:0b:06:9f:
                    a3:9a:46:96:72:98:a0:f1:5c:f0:ac:90:3a:45:5f:
                    b2:83:a5:8b:18:af:04:79:20:22:5f:c8:ba:86:95:
                    2f:b6:21:ff:3c:cb:ea:ad:ac:34:0e:a3:7d:cf:76:
                    3c:35:09:40:ea:96:b9:33:09:6e:32:5f:b7:52:8a:
                    aa:09:4f:d3:87:3d:f5:87:68:bb:69:29:0d:d1:6b:
                    0c:c8:af:78:af:aa:1e:a4:cf:d7:55:80:a4:dc:04:
                    64:fb:49:e9:af:5e:71:2d:45:73:a2:1a:ad:8b:c6:
                    4a:39:c0:ed:c6:64:d1:64:4c:a4:be:c1:c7:ba:e3:
                    c6:6e:6e:bf:15:ab:c8:b5:91:c9:b5:71:8e:a0:99:
                    c1:d4:97:42:b2:6d:f4:5e:1f:89:c9:8c:29:62:06:
                    96:7c:1c:e9:39:c5:f1:9c:e5:a7:e4:fe:1e:50:63:
                    a2:d9:5f:58:41:1e:71:cf:e8:5b:48:c1:fa:4b:f8:
                    6d:bd:39:c8:6f:50:78:dd:76:8b:2a:75:aa:86:4e:
                    bc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:40:69:BA:62:0A:4B:09:40:5D:ED:6D:50:B7:35:CA:08:E1:A3:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4d9d405-a38e-3d78-8539-12ddf6b1ecb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:66:e5:06:2c:d9:a9:bd:64:ab:b7:9b:2b:5b:1d:ca:e5:b3:
         b7:7a:e4:67:7c:e0:3e:c7:86:f3:cd:fb:f6:89:40:48:fe:2a:
         83:71:c1:25:f3:94:53:48:ee:83:ea:ad:1d:53:3d:dd:3b:09:
         8b:68:48:5c:a9:4e:7f:b1:71:e6:34:b1:12:4a:dd:31:e1:78:
         08:d5:20:d2:55:e6:c2:1c:a3:9a:4f:10:65:3e:1a:0f:34:64:
         28:29:11:c8:fc:af:bd:a1:05:eb:c8:2a:71:ce:9f:33:e1:28:
         12:ce:b3:8d:64:e1:44:c2:c0:c8:fb:db:cc:c8:53:43:de:36:
         98:5f:59:c0:06:3c:a5:f8:ee:0b:ae:7d:58:72:69:fe:e9:f7:
         3c:ca:94:9f:66:90:4a:96:5b:d5:c1:fd:87:76:d2:d8:da:7d:
         2c:b1:14:ad:28:2f:50:95:25:55:3d:7a:ad:3f:9e:49:ae:75:
         87:ee:5e:18:ea:ba:39:8b:74:5e:fb:cd:19:25:00:57:aa:70:
         fd:37:a7:84:b4:39:4a:8d:89:7a:7a:87:7e:6e:a4:d2:ca:99:
         89:8b:83:78:ce:56:b8:1f:43:ad:de:a8:d7:b3:45:49:1d:2c:
         c2:6b:6c:d9:6d:48:dc:c6:2b:23:97:47:3b:38:80:17:58:3c:
         1a:c2:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:40 2024 by rpki-client on console-fra.rpki-client.org