Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac4c94d0-0c87-373f-bba4-7b7925a8203d.roa
File:                     ac4c94d0-0c87-373f-bba4-7b7925a8203d.roa (raw, json)
Hash identifier:          cBbZiAXcRmMQ7LrDOuWqM+okuvBagkVq9E2Xy3h/KAE=
Subject key identifier:   5F:9F:DA:F3:A4:E7:63:81:88:9C:23:D0:F9:BE:43:B4:98:0B:A4:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D136CBB677D21AC665D580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac4c94d0-0c87-373f-bba4-7b7925a8203d.roa
Signing time:             Thu 24 Oct 2024 12:49:52 +0000
ROA not before:           Thu 24 Oct 2024 12:49:52 +0000
ROA not after:            Wed 22 Jan 2025 13:49:52 +0000
asID:                     396595
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:36:cb:b6:77:d2:1a:c6:65:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:49:52 2024 GMT
            Not After : Jan 22 13:49:52 2025 GMT
        Subject: CN=438b03f1-d426-4a0b-b8a3-259326c1baa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:94:c1:96:9f:9c:df:bf:62:9c:6a:7a:ab:
                    09:4f:09:2c:2c:76:dd:c6:22:b7:da:87:72:3e:17:
                    2b:e4:1e:1f:d3:ac:98:c3:4f:57:e9:13:70:70:e8:
                    7b:8f:28:5e:68:22:1d:e4:f1:6f:32:61:1a:97:04:
                    80:95:d9:99:17:ae:5d:2e:98:f8:44:f7:be:c1:39:
                    7c:e2:56:85:d8:5d:f1:d4:cf:d5:fb:5f:8e:82:34:
                    b8:3a:23:c1:8c:83:1c:3b:4f:8a:c9:30:31:c3:3c:
                    72:3b:71:85:e3:6e:af:e4:29:71:61:76:35:02:b4:
                    1c:a9:9f:c6:54:c7:fd:6d:12:73:75:56:95:82:0f:
                    cd:4b:6d:32:42:2d:62:22:17:36:9e:48:cb:48:59:
                    be:44:5c:aa:74:ed:ba:d2:28:03:e2:b2:00:34:30:
                    d3:dd:54:74:4e:5b:53:33:06:2b:a2:a8:d4:89:c4:
                    19:44:46:79:b0:5a:ca:9f:f9:b1:95:af:25:6f:9d:
                    12:20:62:c3:20:64:72:06:aa:61:e4:4f:85:7c:66:
                    d8:e8:a1:b4:e0:0f:f1:86:09:51:23:6e:37:9c:fa:
                    91:72:18:c7:75:5f:c4:42:72:e2:67:f0:29:72:b3:
                    a8:e5:a6:2a:78:e5:1e:d2:dc:74:ff:65:4a:36:07:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9F:DA:F3:A4:E7:63:81:88:9C:23:D0:F9:BE:43:B4:98:0B:A4:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac4c94d0-0c87-373f-bba4-7b7925a8203d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:0b:0d:77:b7:17:e4:56:67:9a:ca:73:4c:16:85:1e:a7:4a:
         f2:00:fc:c8:29:f5:64:3e:8c:4d:9f:e9:4a:4a:2a:0b:3c:7f:
         e9:d2:ba:a1:c8:6c:13:18:e8:19:b7:92:70:3d:05:f1:c9:94:
         aa:65:61:1e:d5:2f:8a:2d:e6:a3:bb:cc:fe:8b:e2:a6:20:1f:
         3f:50:11:4a:9d:4d:fd:4a:b9:22:5e:14:b0:52:93:db:4d:ab:
         17:47:75:09:d6:44:3f:4d:fb:db:3e:2f:41:29:81:31:c4:a6:
         67:21:44:60:e2:54:05:5d:8b:d6:63:93:33:b0:72:16:b9:4e:
         3e:fe:c4:03:02:4a:b3:a1:0b:1b:7b:6b:30:58:70:54:73:23:
         76:5b:98:5f:d8:78:de:49:8e:f8:f1:d9:e8:9c:5a:f6:f5:51:
         d8:57:88:fc:66:3f:ad:57:d2:22:58:f8:19:91:ed:e6:19:9c:
         c8:82:eb:60:17:83:d1:eb:ba:62:1a:ab:0c:4d:58:2c:a1:f9:
         f6:c2:8c:86:de:4e:00:74:96:5e:d6:ba:75:a2:9d:30:5d:24:
         61:ad:a9:22:d7:9c:6e:34:b3:1a:23:46:8c:13:1f:f5:5e:32:
         ca:e3:a9:07:73:10:d5:64:bc:50:b6:88:23:f2:42:19:39:cc:
         ef:ee:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:41 2024 by rpki-client on console-fra.rpki-client.org