Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9046a7c-5e56-3d07-91e8-1d4bb9baee9b.roa
File:                     b9046a7c-5e56-3d07-91e8-1d4bb9baee9b.roa (raw, json)
Hash identifier:          qBbbXjyZ785CG8njzZRQAwtMzZNkPw4irPSACHrUnxI=
Subject key identifier:   3B:28:1C:A2:44:9D:A9:3B:31:02:A3:F0:EA:06:07:78:8E:F8:EA:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A234F337ADB650D3BAC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9046a7c-5e56-3d07-91e8-1d4bb9baee9b.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     36628
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:23:4f:33:7a:db:65:0d:3b:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=641275a7-0949-4be2-9194-7cf5bc0f781d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e9:7e:71:14:45:17:77:03:49:3e:f5:8f:cc:
                    dc:66:2f:71:21:83:ee:26:23:2e:48:3e:85:71:cd:
                    59:da:e2:9d:a5:13:08:fd:b9:cd:ee:b0:80:77:c2:
                    2a:f4:b4:94:0b:83:b4:e5:8f:4f:4c:81:48:bd:26:
                    f8:32:2e:32:be:9a:70:02:a5:b9:36:95:1a:a2:37:
                    2c:73:02:21:f0:03:9d:70:80:98:24:bb:61:67:3e:
                    ee:65:22:02:42:0a:a2:f6:f5:81:78:25:3c:84:7c:
                    02:62:b2:3b:f9:48:94:4e:7c:5a:55:46:59:20:31:
                    a5:5c:66:0f:e4:25:1b:4a:7f:10:79:2c:06:d6:90:
                    3b:b1:14:2b:1c:13:1b:e3:cf:6a:49:99:9f:4b:6c:
                    1c:d3:30:09:80:e8:dc:83:bd:12:3b:83:0a:f7:65:
                    2a:53:09:74:05:41:16:38:90:82:93:32:5c:d8:61:
                    ba:14:12:c0:00:ad:7e:76:9d:82:13:f6:22:a4:98:
                    b8:d4:d6:ad:13:3b:78:0a:39:e6:42:af:2c:78:e1:
                    98:a7:9e:15:48:5b:d2:f9:e3:c2:f4:b4:52:ab:fd:
                    c2:4a:9b:d1:e5:11:57:96:b9:7f:38:f9:8d:76:e1:
                    eb:a6:05:1b:17:39:92:b9:2a:a3:5d:09:fb:74:cf:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:28:1C:A2:44:9D:A9:3B:31:02:A3:F0:EA:06:07:78:8E:F8:EA:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9046a7c-5e56-3d07-91e8-1d4bb9baee9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:51:ee:4a:b7:73:cf:60:3d:43:52:dd:ce:50:00:30:44:04:
         0e:77:4c:c9:0e:e6:7d:58:61:bf:19:d8:d7:e6:47:b0:a1:27:
         c6:46:b8:88:32:be:70:61:e9:26:e0:75:dd:f1:f1:ac:da:6a:
         33:1d:9b:68:6b:2d:7e:32:35:de:11:de:85:d3:9a:82:be:e0:
         08:57:cf:d9:3a:b9:3f:b4:77:c5:91:60:a6:d7:be:0b:60:4f:
         a7:1d:10:12:9a:e9:a9:a9:e0:9a:00:9f:8e:8a:ee:7b:e4:73:
         98:c8:8b:a4:ce:28:c8:76:b2:2e:93:cb:05:d4:da:66:eb:54:
         84:c5:b9:d3:8d:8e:ca:4a:e6:f7:ac:9d:6d:f8:0b:7e:36:a4:
         0d:a9:fa:58:5a:b4:cc:e2:80:a8:5f:6d:b0:30:fa:cc:6a:f6:
         a4:bf:2b:5d:09:21:45:e5:bd:7c:15:c7:09:4b:c1:7a:84:69:
         bc:76:34:c9:41:d5:df:39:25:f9:75:dc:77:34:26:88:fa:cf:
         29:a1:35:b0:f8:9d:06:f6:57:06:34:81:55:22:b0:f2:99:f5:
         a5:42:62:d7:be:39:83:7b:0d:ad:24:05:50:f2:65:06:1a:c4:
         18:0c:69:2b:ce:5d:51:30:e3:a3:d0:7d:ff:0e:23:b6:cf:56:
         2c:a7:e2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:43 2024 by rpki-client on console-fra.rpki-client.org