Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0250605-a689-3f9c-b559-54d234373d54.roa
File:                     b0250605-a689-3f9c-b559-54d234373d54.roa (raw, json)
Hash identifier:          iMEjhVXuv0Ry5mOUSITG+RqaBRQGtLS5wvvZjOAYElU=
Subject key identifier:   29:90:D0:DC:1E:DE:24:12:C2:E9:FB:43:D4:E0:3D:A2:A4:97:3B:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C529DA568FE129895B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0250605-a689-3f9c-b559-54d234373d54.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     36632
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c5:29:da:56:8f:e1:29:89:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=dc5d16a7-57e5-4c1f-adb0-bd98e76789de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6e:d8:09:64:85:45:09:7d:8c:68:af:57:93:
                    5b:03:84:d1:01:d4:12:8f:05:5a:97:79:40:ec:f3:
                    3a:a4:7c:4a:3e:be:b1:ca:f0:e3:33:73:33:7b:64:
                    97:51:00:90:da:7d:ba:1b:12:25:18:d0:56:a3:7d:
                    fa:75:f4:14:fe:69:43:16:fd:fe:76:c5:23:0b:cf:
                    6e:d0:85:cf:4c:ee:38:19:0e:21:5f:dc:42:09:af:
                    eb:16:79:8c:84:a8:c8:1f:bd:bf:c3:c2:c2:15:9e:
                    79:c4:8f:96:f9:e2:95:1f:17:02:10:5a:fc:d1:df:
                    52:1f:87:c1:79:af:e6:36:e2:cb:b3:d5:96:ce:4e:
                    b5:27:36:9c:3a:e6:e2:4d:75:df:05:97:1d:37:60:
                    b4:fd:8a:2d:c6:7e:2e:62:9f:63:f2:0f:de:34:85:
                    5a:30:86:ed:75:21:6c:7d:72:44:75:e4:84:5b:ef:
                    22:e9:3a:37:44:f0:24:10:9c:6a:b6:c6:49:33:db:
                    c6:43:79:19:3e:38:ec:df:d1:68:b4:f5:54:2a:55:
                    3b:9b:02:ea:5c:29:37:87:20:19:4c:0a:b8:b0:26:
                    2e:50:5c:14:14:e9:5e:e7:09:ba:98:db:6b:6b:a3:
                    0c:03:a5:ac:18:fb:ca:d1:f3:85:4e:62:6a:2b:c7:
                    18:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:90:D0:DC:1E:DE:24:12:C2:E9:FB:43:D4:E0:3D:A2:A4:97:3B:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0250605-a689-3f9c-b559-54d234373d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:52:d9:6b:bf:f2:63:f2:2f:81:49:5b:11:57:b7:10:f1:33:
         33:3c:91:ac:72:5d:16:df:3d:a1:1a:ec:c6:9c:86:cb:94:7c:
         77:d0:a1:a1:30:33:b1:27:86:28:fd:7c:3e:9f:a4:7b:49:96:
         ff:11:2c:2a:9e:11:b4:61:d1:c3:77:af:10:5a:ab:70:9a:6e:
         80:ee:23:70:aa:37:67:9d:17:9f:86:17:43:d6:ce:45:5b:42:
         4a:72:5d:f5:e6:68:b0:4a:d1:a3:09:32:16:a5:8e:8b:88:3b:
         db:28:61:dc:d8:99:19:1f:4b:0c:bb:92:45:73:89:6c:a1:1e:
         22:31:5b:b4:09:73:fa:62:d6:91:05:04:52:2d:4c:d8:26:85:
         e7:d0:6c:82:4e:b9:98:6c:61:aa:f2:a8:5e:20:43:38:ca:34:
         13:b9:76:d7:05:17:83:95:bd:22:d8:7a:1c:6c:38:b2:1d:bc:
         9d:62:dc:cf:71:07:fa:80:54:cb:c6:4c:af:6f:40:32:26:0d:
         38:29:4a:01:ae:0c:38:4f:e4:b9:fc:0f:f2:ae:c2:e0:d9:d2:
         e8:d4:bf:9d:89:4b:d7:ed:b9:58:c0:4d:ec:08:15:78:08:a6:
         49:88:b4:8f:2f:19:b6:f6:a2:11:d8:96:cd:54:d2:60:6e:73:
         00:df:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:41 2024 by rpki-client on console-fra.rpki-client.org