Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb607bb4-2d4c-366e-a332-1315e4675481.roa
File:                     cb607bb4-2d4c-366e-a332-1315e4675481.roa (raw, json)
Hash identifier:          eYholz/8k77YCGhXTiZeaJBo1EzzNJ6XrfZZYIG46rU=
Subject key identifier:   D3:E8:D0:1A:D1:D2:B2:14:96:52:EA:09:EB:AD:B2:FC:7E:E8:26:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A23C44CF57EFACD81E680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb607bb4-2d4c-366e-a332-1315e4675481.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     396567
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:23:c4:4c:f5:7e:fa:cd:81:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=f16f646b-582c-4c26-b3a1-6f0a7c7e487f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bd:17:d4:4b:27:4a:0d:7e:78:4b:38:8e:36:
                    98:e2:04:5c:29:dd:65:ef:65:66:aa:39:c9:99:f7:
                    51:4c:ed:30:0d:3a:b3:5b:a8:4b:6b:1c:f1:a2:93:
                    48:13:6d:44:65:75:de:5e:c2:31:0f:8d:6d:32:6f:
                    9f:e6:9f:de:0c:bb:e7:46:a4:18:29:8e:d0:c9:bd:
                    32:b8:de:b7:42:22:33:a1:37:88:e4:60:37:63:7f:
                    9e:d6:ab:71:6c:8b:d5:59:84:c4:eb:39:6d:b3:4b:
                    cb:4c:43:52:93:8d:8a:bc:9b:49:bd:fd:5f:c2:c2:
                    84:72:53:52:5c:8e:d2:9c:9c:a1:b1:11:0c:21:d1:
                    32:6d:99:fc:3b:48:16:ca:95:ce:59:25:20:e2:0b:
                    1a:09:3f:30:36:69:47:ea:0d:71:ad:91:3d:5e:d3:
                    5e:ab:85:8f:bf:47:9d:48:32:c5:75:3f:75:c5:03:
                    be:ce:38:91:d1:cd:38:91:d2:1d:16:dd:cb:2c:2d:
                    33:fa:34:7c:b5:4c:02:7b:37:40:3d:b6:31:9c:7a:
                    41:e2:3d:73:c0:ed:75:60:50:53:d1:f4:70:63:0a:
                    0b:3e:21:df:5b:9c:b8:8b:e4:fe:a4:85:7f:70:c4:
                    8c:41:36:c7:75:d5:b7:80:cf:eb:4d:ae:45:15:fe:
                    60:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E8:D0:1A:D1:D2:B2:14:96:52:EA:09:EB:AD:B2:FC:7E:E8:26:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb607bb4-2d4c-366e-a332-1315e4675481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:54:77:95:8d:92:b4:dd:bc:1e:4e:30:70:fd:89:fd:1e:90:
         3b:cb:61:dd:9f:50:4b:24:03:73:26:0d:5a:34:67:6c:50:fa:
         c2:ba:75:ae:31:9a:af:83:94:82:08:35:cf:32:d7:32:8f:a7:
         f8:7e:b5:13:7b:f2:70:1d:7b:d4:75:2a:24:25:4d:d0:d0:b4:
         2a:fa:61:43:01:66:61:55:07:34:43:f0:7b:80:16:33:47:f0:
         82:0b:b3:d2:f1:2d:2f:d1:80:eb:7b:73:a0:ce:e7:8e:a3:83:
         f9:79:39:2f:f2:0c:14:6a:a9:9b:d8:e4:48:7a:19:75:55:fa:
         ee:7e:40:d0:cf:1e:e9:ec:69:24:a0:f4:45:0b:8a:bb:c2:20:
         89:c0:e0:ed:13:14:00:08:9e:19:e6:43:17:e1:bc:b1:95:11:
         a8:e1:74:ad:85:47:1a:ba:02:18:69:fa:6d:71:2e:70:1d:26:
         89:22:96:74:1f:24:4c:8b:95:54:9d:15:1f:4f:93:e5:28:48:
         6f:95:19:47:3f:c4:95:64:59:0f:f3:ec:50:cc:a1:16:cc:52:
         d3:a9:06:9b:75:7b:4e:88:18:87:1b:16:51:61:a7:ba:87:fd:
         dd:6a:41:41:a6:81:e0:a2:90:c5:2d:41:7d:38:39:19:3e:f4:
         41:46:c8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:15 2024 by rpki-client on console-ams.rpki-client.org