Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2140c41-9886-30af-ba27-c26c9bf017c7.roa
File:                     b2140c41-9886-30af-ba27-c26c9bf017c7.roa (raw, json)
Hash identifier:          0Y407lUBrUggEhQkUuoMWqzr1UeRtG2GUq4Z4Wgtneo=
Subject key identifier:   A6:CF:5C:9C:90:C2:7B:C3:12:D9:AF:7B:82:45:F6:48:76:C6:70:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CFD4D0517B88FC344B513440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2140c41-9886-30af-ba27-c26c9bf017c7.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     396597
IP address blocks:        192.81.185.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d0:51:7b:88:fc:34:4b:51:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=95fb4168-c08c-4d12-b022-8ea2041d1c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:a3:db:93:3e:41:43:08:f8:d8:72:ac:26:
                    a1:a2:52:ff:07:31:51:ad:7c:6e:81:4b:db:d1:f3:
                    e8:a1:76:f2:5b:91:38:bd:c7:ed:ff:33:1f:de:d1:
                    75:ce:08:07:3d:bc:56:e5:f8:43:5e:e9:df:95:4f:
                    eb:d6:17:e2:37:4d:de:a5:65:a4:01:62:e7:28:55:
                    41:0e:b1:ff:66:ea:74:54:14:f4:0e:f7:32:55:3a:
                    59:9c:03:f3:2d:66:37:3d:ff:83:6d:2c:e6:f0:ae:
                    0a:64:cf:37:3f:66:44:87:d1:ce:14:16:7d:ad:ec:
                    1e:f8:40:d6:9d:ce:90:a3:0b:c7:f0:da:41:f1:bf:
                    71:a0:ef:d5:6c:85:5d:9d:ce:a8:5a:ea:d7:e3:07:
                    ee:73:03:6b:a0:42:38:3a:aa:37:7a:e5:2e:ae:74:
                    84:f3:f0:2d:d7:6a:91:8d:3e:a2:da:45:78:2b:6a:
                    c6:d1:51:70:df:ce:02:74:34:ac:bb:22:2e:d6:b0:
                    50:77:83:6a:e6:39:8d:51:be:dc:33:c2:b8:84:f4:
                    bd:c1:71:36:f8:74:b2:69:f0:a0:cf:f8:ee:2f:13:
                    e2:cb:bb:fc:ca:76:ce:a0:47:00:f1:88:e7:fe:f4:
                    54:36:fb:7a:6b:59:5e:af:79:bf:04:5a:03:5b:f5:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CF:5C:9C:90:C2:7B:C3:12:D9:AF:7B:82:45:F6:48:76:C6:70:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2140c41-9886-30af-ba27-c26c9bf017c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5c:fd:2e:39:ca:43:38:a6:a6:86:e2:5c:7e:1a:7e:16:03:
         64:8a:54:43:a7:f7:17:82:e5:91:40:7c:36:3a:09:88:95:8e:
         6b:7a:c2:6f:22:2e:95:d8:cd:61:81:6a:aa:1e:78:a6:d1:65:
         9e:b0:8b:70:ff:d1:c7:f2:c3:45:58:91:a6:a6:c6:e6:af:fd:
         f4:9a:9d:42:1f:c2:b0:74:ee:9b:4c:de:2f:60:7e:76:12:0c:
         f9:9e:7b:26:6e:43:a4:45:db:a4:4e:da:4a:39:23:51:f4:0d:
         4e:7b:25:41:fa:01:4d:d0:e0:45:8e:06:5d:f2:a1:f5:f7:ac:
         a2:7f:0e:f0:0d:6a:9b:16:c8:2b:81:e8:02:1f:3e:3c:4a:ef:
         1b:46:39:29:28:e6:13:50:5b:81:8b:61:c6:bd:2f:ca:5f:24:
         fa:25:fe:57:b5:e3:17:17:03:d9:7b:ca:62:cc:35:20:3b:d3:
         7e:be:bf:ee:b5:77:69:8f:5e:d0:5a:dc:08:84:aa:4f:66:7a:
         55:01:3f:73:79:51:e6:c4:aa:02:8c:68:10:c1:cd:48:fa:4b:
         08:18:53:c9:89:ab:d1:05:e7:95:b0:1e:09:c8:24:8b:6a:fd:
         97:90:fd:5d:c6:1b:d6:fb:dd:d9:9b:a1:2d:44:1f:bf:09:3f:
         8e:fa:54:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:12 2024 by rpki-client on console-ams.rpki-client.org