Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac7b5952-e9cd-36eb-a334-37dd2b0f0378.roa
File:                     ac7b5952-e9cd-36eb-a334-37dd2b0f0378.roa (raw, json)
Hash identifier:          UNlj/8tMPaghJErvZhcyEBr9EzqRJRjGCHlYGhplQJQ=
Subject key identifier:   8D:B3:16:9E:DC:43:A8:97:08:ED:AF:1E:C6:04:16:FC:89:B9:7D:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584787211AB5C238E1793DA92D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac7b5952-e9cd-36eb-a334-37dd2b0f0378.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     396565
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:1a:b5:c2:38:e1:79:3d:a9:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=2ad8bd7d-606b-487f-ad48-6ffaaf72b645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ce:ef:ce:cc:45:e3:a9:d9:d9:1b:99:c9:26:
                    72:0d:ea:7b:72:98:67:fd:c1:20:50:04:4f:9a:b2:
                    43:00:de:06:db:c8:ed:aa:05:19:b4:db:24:59:4c:
                    6d:8f:98:ac:ef:61:21:10:9f:ec:0b:73:01:38:b2:
                    3b:6b:58:c5:5d:db:f9:4e:3b:9c:45:d8:0d:48:14:
                    bc:04:f8:f4:dc:32:72:a9:28:bb:e6:1b:00:d0:db:
                    e3:ae:08:8f:9f:bc:5e:5d:30:8d:ee:23:f7:bf:9a:
                    36:6e:68:60:5c:0a:89:86:20:f0:1b:f1:1c:8d:e9:
                    47:75:13:85:18:5b:86:8d:51:02:df:91:c0:14:e8:
                    e4:c3:80:29:83:ad:94:e4:3a:f6:b9:19:0b:8f:2d:
                    28:fc:75:2c:59:ed:87:ea:97:53:05:77:6b:33:5a:
                    38:b7:73:5e:78:28:3b:8e:8d:69:13:da:96:54:ab:
                    c3:3e:85:4f:49:92:9a:23:61:50:ff:41:28:f0:32:
                    21:e2:f1:19:65:5d:d6:28:2a:3c:0f:86:ed:74:b0:
                    85:f5:17:33:65:69:43:77:36:0c:49:ad:82:5c:63:
                    d5:16:fb:1f:48:14:eb:d7:45:21:bf:90:5d:ce:df:
                    b9:15:98:f9:5c:9a:47:0d:bb:2c:b8:27:23:27:4f:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B3:16:9E:DC:43:A8:97:08:ED:AF:1E:C6:04:16:FC:89:B9:7D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac7b5952-e9cd-36eb-a334-37dd2b0f0378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f5:c5:b9:46:6e:06:7a:75:03:e3:f0:49:29:f8:99:ae:6b:
         4f:51:2a:f4:0b:bf:66:61:3f:68:cd:75:3c:29:ad:db:cf:70:
         de:e8:8b:64:49:6f:d6:df:e4:9f:a0:3a:86:1c:44:f6:20:f2:
         e1:2d:b0:ba:bf:be:36:bb:61:cf:95:a5:34:f9:91:ef:1a:e0:
         4b:9b:9e:c1:21:e0:05:00:71:b5:e6:9d:97:f6:1d:df:15:13:
         46:1e:69:ae:90:32:fd:64:b6:76:c3:ef:7c:5c:e2:d6:68:19:
         f0:a5:f4:a1:c6:4b:02:dc:bf:59:ba:fb:90:85:02:2f:04:fc:
         92:c7:f4:a5:b1:67:c5:5b:87:23:30:a5:97:42:db:18:f8:01:
         ed:1b:83:ae:a8:21:38:e8:b9:1e:ff:89:fe:69:a7:5b:40:b5:
         d0:47:a6:de:9f:b7:83:e9:36:d2:ed:7a:53:33:99:22:64:8d:
         d4:81:a9:55:10:5f:da:4e:75:d9:fa:64:40:69:64:8d:d7:9d:
         52:c4:b3:e7:dc:87:95:27:e9:aa:43:be:d0:99:6c:3f:4a:0f:
         e2:c4:88:79:cb:ff:10:3e:45:cd:1f:8d:da:c0:92:da:32:01:
         f6:ac:c3:47:e5:53:c6:5d:82:c4:23:a7:54:41:67:68:54:e8:
         e0:1b:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:41 2024 by rpki-client on console-fra.rpki-client.org