Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a636a453-b71e-34ab-a061-2bc47c57b022.roa
File:                     a636a453-b71e-34ab-a061-2bc47c57b022.roa (raw, json)
Hash identifier:          B1CB8rx4XRXqOu2OxvSiccgfAOafv4lsWnPeL1Dke6M=
Subject key identifier:   E0:0D:DB:9A:64:EC:75:1C:BC:7F:F1:7D:A3:27:08:0C:DE:77:2C:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C46E3E181446BED7D680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a636a453-b71e-34ab-a061-2bc47c57b022.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     40647
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c4:6e:3e:18:14:46:be:d7:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=e97792d5-8964-41c8-9b58-ad0a40587813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d9:7c:00:23:03:e4:09:47:17:dd:f0:49:93:
                    c4:10:2c:01:d0:38:58:05:cf:8c:18:ec:59:46:22:
                    a7:34:7b:0d:b2:ce:f4:b0:62:50:83:64:24:6c:af:
                    7c:d4:7c:6e:29:03:72:e8:9b:af:fe:17:3f:10:7a:
                    48:7b:eb:2b:98:49:6c:66:f3:2b:97:64:43:88:45:
                    8d:25:29:ec:64:58:e6:22:64:c6:48:b6:d0:94:44:
                    eb:d9:fa:24:1b:25:1c:49:ff:9d:38:76:58:b7:c3:
                    ce:d0:ca:6a:8a:66:46:8e:50:d6:f7:38:5f:6e:f1:
                    2f:9b:8f:2e:5d:b2:a2:7a:0c:b6:34:9a:04:af:08:
                    0a:64:9d:6d:d5:c5:db:47:06:61:19:7b:4c:b6:84:
                    ad:ab:1f:f6:04:cf:b3:88:49:2e:09:69:c2:18:ba:
                    0b:11:a3:d1:f6:57:11:a0:f7:63:d0:af:01:9f:6c:
                    4e:59:d0:e3:e2:2d:d8:0b:54:d1:1e:65:67:b1:bf:
                    fa:9a:e9:31:cf:2c:96:a2:6c:96:e9:10:04:19:23:
                    3a:75:f4:bf:f5:de:0e:6b:6c:12:a1:4e:92:ac:b9:
                    20:e0:53:69:32:c3:22:1b:42:10:d1:a8:e0:c7:30:
                    08:46:10:76:3d:73:a1:2b:6f:f0:03:57:a6:a5:ac:
                    5b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0D:DB:9A:64:EC:75:1C:BC:7F:F1:7D:A3:27:08:0C:DE:77:2C:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a636a453-b71e-34ab-a061-2bc47c57b022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:d4:9c:90:f5:e1:e6:5d:94:d0:5f:aa:86:79:5e:21:48:
         c4:1e:6e:4b:98:2d:26:fb:ac:11:5a:5b:f0:5e:c4:2e:98:5b:
         c9:d3:c5:bb:49:c7:ae:65:57:b7:c7:5b:f1:ce:52:15:fd:47:
         5d:72:93:08:50:95:16:41:19:59:cf:ce:03:51:64:a2:09:e4:
         cd:40:08:76:18:e1:29:44:c0:83:77:d5:9b:97:c2:81:92:53:
         b4:60:10:16:cd:4f:d8:fd:ce:9c:c3:ce:72:82:17:6a:6f:56:
         9b:1b:f1:8b:5d:49:23:20:2b:2c:02:9c:31:4e:54:c5:03:07:
         40:cd:fd:e5:c3:5c:a1:4e:81:39:8e:4d:9a:b9:fe:20:cd:d3:
         51:0c:69:68:5a:52:24:97:f7:71:0f:f3:3b:84:7d:dc:38:a0:
         64:cf:49:97:d4:10:52:3f:e4:61:ad:b3:82:f4:0a:67:86:85:
         7b:e2:5c:ae:ee:5f:9f:08:f5:54:ae:79:bd:e5:77:1f:02:ef:
         a8:58:4a:7d:70:48:b1:1d:c8:c6:77:b5:96:eb:47:0c:1f:75:
         dd:58:9b:56:ee:98:00:52:ff:04:10:75:6e:00:ce:ab:14:4f:
         45:3f:5d:0f:9d:b4:88:a3:54:56:90:ae:41:52:8c:68:e5:db:
         8e:d9:01:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:11 2024 by rpki-client on console-ams.rpki-client.org