Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6cfe828-36e4-3c31-bea9-1096051fd68a.roa
File:                     a6cfe828-36e4-3c31-bea9-1096051fd68a.roa (raw, json)
Hash identifier:          QmHVCY+SVWfF2bEbhKT4BxkVqKdeCHexWGTC99gssUM=
Subject key identifier:   DF:B3:59:9E:A7:B5:A9:04:B4:B6:B9:F0:EB:A3:A7:A8:78:EB:87:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B987152F2BD4B205A1954B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6cfe828-36e4-3c31-bea9-1096051fd68a.roa
Signing time:             Thu 31 Oct 2024 14:16:40 +0000
ROA not before:           Thu 31 Oct 2024 14:16:40 +0000
ROA not after:            Wed 29 Jan 2025 15:16:40 +0000
asID:                     396544
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:87:15:2f:2b:d4:b2:05:a1:95:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 31 14:16:40 2024 GMT
            Not After : Jan 29 15:16:40 2025 GMT
        Subject: CN=b067a57e-ea54-4b3c-81db-d8c5b6ab064d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:65:0e:ae:58:ad:45:15:79:89:ca:05:f7:90:
                    68:9f:9d:76:5c:a2:8f:39:c5:0f:a3:41:0d:e5:c3:
                    09:81:c6:57:8a:93:a9:14:c8:c2:79:fb:84:10:f2:
                    02:dd:68:3d:75:61:c5:67:08:7f:f0:ea:90:23:ed:
                    e6:ca:d5:e5:2f:b5:73:ae:24:da:5a:29:0e:22:f0:
                    d2:8a:8f:c8:55:7b:ce:0d:b2:db:4b:6a:04:51:81:
                    e8:05:0d:c3:ed:a1:3b:2d:b3:41:d8:2d:99:25:e6:
                    7a:6a:16:4d:ed:0e:10:59:1e:85:a1:04:70:1d:03:
                    9d:09:0f:aa:13:18:ae:53:8e:d2:5d:81:85:d9:da:
                    68:3a:f4:eb:d5:1f:70:2a:1a:3e:09:81:91:20:7f:
                    ea:e5:9d:e7:09:15:d4:f9:1c:02:09:91:01:fe:f0:
                    f2:14:3c:99:87:fc:13:f7:57:d7:9e:00:7c:72:e9:
                    15:fe:92:c9:79:f8:b9:ca:80:f6:37:de:45:8f:ca:
                    a1:e2:f6:b9:ac:a5:41:f1:85:e1:00:46:db:0a:be:
                    8e:a6:f3:8a:9f:8a:b2:d4:ad:c5:61:3c:43:66:f5:
                    2f:8f:27:61:9f:ed:4a:3b:27:0f:32:7e:ce:2c:61:
                    e5:52:4f:ca:27:dd:76:f7:3a:9c:f2:14:aa:62:9e:
                    40:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B3:59:9E:A7:B5:A9:04:B4:B6:B9:F0:EB:A3:A7:A8:78:EB:87:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6cfe828-36e4-3c31-bea9-1096051fd68a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a7:dc:aa:7d:f2:5a:2b:eb:a6:db:48:9a:aa:e2:03:17:e0:
         63:21:fe:b7:7f:30:ba:f3:af:3b:ec:72:dd:9d:df:93:90:2c:
         d0:26:cd:76:f1:5a:74:42:ac:4c:a6:56:2d:35:d5:8c:b8:e1:
         21:d9:70:0e:21:ea:83:d3:ba:57:86:9e:e9:3d:3c:62:15:ff:
         59:ab:e0:4b:38:06:36:e5:48:9a:54:d9:29:4c:04:d8:56:97:
         13:ad:4e:11:46:16:8b:ad:8f:40:6a:3d:b2:a6:38:65:16:c0:
         b8:81:23:08:2c:a1:01:46:83:9d:aa:ee:37:69:50:03:74:e3:
         3b:a5:66:85:db:0e:05:1a:58:a9:82:f5:33:64:59:66:ab:aa:
         d8:be:36:72:fe:53:0c:ea:a6:be:23:ed:cd:6f:fb:ef:64:45:
         99:c1:e3:3e:52:08:72:d9:9a:89:22:ef:2d:9f:25:c2:8d:41:
         7e:1d:58:dc:6c:ca:db:75:fb:b4:f7:bc:eb:4e:02:69:1f:06:
         9f:81:f7:8c:e3:c0:0c:a1:d4:98:2e:aa:32:7b:d4:75:fd:af:
         14:16:a4:e3:48:3e:32:b4:27:f8:b7:57:3d:7a:9d:dd:38:73:
         23:6c:d2:4b:82:18:1b:ac:08:d1:14:6f:95:dd:50:29:ee:a1:
         48:22:25:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:11 2024 by rpki-client on console-ams.rpki-client.org