Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c297f7c8-15c0-3bdf-b237-79f87dd063d7.roa
File:                     c297f7c8-15c0-3bdf-b237-79f87dd063d7.roa (raw, json)
Hash identifier:          G9t6jhRSqrPGtYqcvCNP9etwj3pwN1lcxEtFuDtjR9Q=
Subject key identifier:   2E:17:8B:6F:4E:6C:E0:1B:F3:56:4A:4C:E5:EA:2A:F0:D0:86:C3:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B987150A50F31DF462A4DD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c297f7c8-15c0-3bdf-b237-79f87dd063d7.roa
Signing time:             Thu 31 Oct 2024 14:16:40 +0000
ROA not before:           Thu 31 Oct 2024 14:16:40 +0000
ROA not after:            Wed 29 Jan 2025 15:16:40 +0000
asID:                     396571
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:87:15:0a:50:f3:1d:f4:62:a4:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 31 14:16:40 2024 GMT
            Not After : Jan 29 15:16:40 2025 GMT
        Subject: CN=dd3ed320-838c-4bad-9ba8-997bdd9d5d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:c8:1d:93:3c:d9:21:48:35:6a:8a:70:a8:
                    a9:ff:55:0c:be:29:b3:e8:27:a6:fe:dc:38:0e:ec:
                    72:92:ea:d4:53:73:42:93:b4:17:3b:e9:32:34:d8:
                    47:00:64:5c:e6:63:3a:2d:5e:eb:fe:e4:0d:07:04:
                    05:90:f6:63:2e:ca:11:96:63:dd:df:4a:7d:92:d3:
                    61:11:b1:b8:59:8b:f8:11:5b:2f:23:ab:89:02:7f:
                    51:da:66:e6:4a:03:9a:1c:a2:3a:d8:44:06:df:ce:
                    b1:f1:13:9c:04:a8:18:3a:c8:c9:d2:b0:29:82:f9:
                    31:33:37:06:84:a1:34:71:e6:a0:bb:74:5b:d1:48:
                    5c:37:c8:06:48:0b:cd:93:09:51:f7:c7:67:00:f4:
                    42:58:40:6f:e5:99:ca:5b:50:3b:18:16:fe:16:dd:
                    35:5a:85:c4:63:5c:3d:5e:b1:08:cc:a6:6a:60:2d:
                    5d:c2:c6:79:fa:3a:0d:44:9a:1d:e3:36:88:11:ff:
                    99:32:2b:a3:1a:4b:1d:83:5d:87:af:01:bf:c8:18:
                    7f:e4:da:5c:0b:cb:d9:55:7c:3b:a2:1c:41:2e:ed:
                    2e:05:58:37:ad:dc:b0:03:b2:ac:9d:df:c6:24:08:
                    a2:ab:b6:39:a1:2f:d6:e8:85:70:78:f5:d1:b8:7c:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:17:8B:6F:4E:6C:E0:1B:F3:56:4A:4C:E5:EA:2A:F0:D0:86:C3:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c297f7c8-15c0-3bdf-b237-79f87dd063d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:34:02:02:77:f4:2f:3d:9b:c2:58:c7:ca:3d:1f:b1:78:16:
         5e:11:97:04:ae:ad:44:96:dc:dd:fd:0f:bb:df:16:2b:4b:0f:
         0d:d7:0f:59:b9:60:e6:c9:a9:5b:a4:e5:55:4c:ed:2b:b8:b7:
         f8:ba:62:d5:64:2e:86:99:fa:78:fe:3d:79:9a:66:06:f6:34:
         4b:ab:50:d7:94:15:db:c9:d1:78:d9:2b:64:a0:1d:d2:14:8c:
         8f:fd:9c:1f:c3:06:ab:9b:37:b1:1f:3b:87:08:c4:08:dc:b4:
         18:8f:bf:b0:37:8b:34:3b:81:10:85:ff:50:ac:f6:12:96:ca:
         3e:ce:30:24:35:43:10:66:34:1d:31:a7:a6:dc:31:b4:76:36:
         69:bf:65:0b:f4:1e:5a:f8:93:30:44:e4:36:64:00:67:7e:5b:
         e1:6d:45:28:43:d2:f6:d2:f2:bd:c2:a3:78:cc:a3:7b:d3:4a:
         09:00:1d:e9:ab:64:34:98:aa:8d:91:79:04:b6:35:9f:c6:27:
         9f:88:c9:42:67:1d:01:fa:b8:90:36:fa:7f:70:2b:f8:0c:57:
         9e:d1:3b:a4:1c:63:2a:60:90:15:00:3a:7a:5f:9e:fb:df:4a:
         da:49:c3:e3:8d:e6:3d:79:0a:7a:a3:75:2e:56:5e:f0:0a:d0:
         e4:a7:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:14 2024 by rpki-client on console-ams.rpki-client.org