Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bba7dd3d-c919-3738-b668-a50c0e821912.roa
File:                     bba7dd3d-c919-3738-b668-a50c0e821912.roa (raw, json)
Hash identifier:          GHjo+gSuyYG5mJIAcdFnxsrUxQRJzhEVtwcZAjD/MiM=
Subject key identifier:   06:41:E5:65:9C:CD:78:DC:CA:2D:EC:0C:43:3E:E4:A9:4A:E5:DA:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C4B5D5920CB3A7DB0D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bba7dd3d-c919-3738-b668-a50c0e821912.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     396608
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c4:b5:d5:92:0c:b3:a7:db:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=44a996d1-38ea-4f6f-91e1-5829c86ae3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e3:96:ca:1c:b1:42:3f:c0:75:d9:02:55:32:
                    a3:ff:05:6e:38:5b:2a:33:08:11:71:e0:c6:99:6b:
                    69:df:5b:f9:95:7a:37:0e:9f:b7:4b:62:33:d4:11:
                    60:74:b8:45:49:44:35:08:e8:6d:ad:e9:88:7a:7d:
                    fa:95:f2:42:e7:be:f0:a7:9a:47:3d:16:a7:2e:b3:
                    04:f6:e1:5c:16:06:ae:60:bc:49:57:f2:0f:19:3a:
                    8e:dc:af:21:14:23:7a:42:1a:62:f1:68:1e:13:94:
                    dc:ca:84:b5:ad:98:86:5a:84:a8:11:19:06:c4:80:
                    79:0e:cd:6c:bc:50:b6:ca:22:7e:67:de:0b:05:90:
                    df:a1:6e:49:1b:58:13:81:be:87:dc:37:cd:b7:c4:
                    5a:99:81:95:a7:66:1f:a1:a2:d2:f2:42:1c:1a:c1:
                    5a:8b:d3:a8:8a:1d:a7:07:19:b0:83:ff:0c:57:39:
                    0a:24:c2:e9:88:a3:fe:a4:53:6c:b2:23:a9:16:eb:
                    f0:51:9b:3f:b7:77:3f:68:5b:81:f5:40:66:6c:26:
                    da:9e:ef:f9:8b:65:5a:b6:2a:2d:00:dc:03:00:51:
                    7e:73:ed:02:23:0e:db:29:2d:ae:a6:96:c1:38:dd:
                    1e:5c:46:48:ff:fa:ac:cb:18:9f:ec:2b:99:a0:73:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:41:E5:65:9C:CD:78:DC:CA:2D:EC:0C:43:3E:E4:A9:4A:E5:DA:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bba7dd3d-c919-3738-b668-a50c0e821912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d5:7a:09:5c:3c:db:45:c0:33:02:0a:42:61:e7:85:87:3a:
         55:70:52:37:df:7b:59:ac:6c:0b:92:8b:4b:b3:02:6a:91:77:
         0e:ce:b4:84:b6:30:c3:37:46:f0:db:2c:38:8f:9f:a3:b2:01:
         35:17:b4:6e:a7:13:bd:80:94:97:3e:03:a7:71:30:dc:76:0b:
         3f:88:9b:05:bb:a8:9b:9d:b8:fe:6a:4c:e8:fb:07:ba:59:0a:
         22:7e:f5:c1:a3:0e:4a:27:02:45:25:65:f8:d4:ce:01:31:80:
         e1:c8:cf:56:11:db:52:05:18:e6:c9:b0:4b:d9:75:85:df:87:
         f7:fe:52:5b:2f:6e:0f:5b:18:83:34:dc:50:a8:bb:50:a4:23:
         61:20:03:82:0a:3e:b1:11:08:9d:4f:b8:06:5f:c6:7e:47:f6:
         bf:7a:c3:b2:8f:98:ff:6b:49:2a:fd:05:2d:15:68:4b:e7:31:
         38:32:68:38:00:2e:a2:59:72:b1:03:b7:0f:ef:60:8f:a4:59:
         35:52:65:a7:39:7c:80:17:6e:45:f8:df:83:67:55:a6:f6:e7:
         f7:bf:b8:68:8c:24:b5:ad:3e:22:c0:e5:dc:83:c2:91:00:c5:
         74:22:11:75:1b:e8:2a:7a:c8:51:04:70:09:a7:1b:56:48:fa:
         61:3f:97:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:13 2024 by rpki-client on console-ams.rpki-client.org