Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc215e8c-d5f6-3189-9898-906bd21ebae8.roa
File:                     cc215e8c-d5f6-3189-9898-906bd21ebae8.roa (raw, json)
Hash identifier:          0JQWG4ap/TcXXZAbZUlZ3Sw2JK/Uga6Aq9rGx4xFnK8=
Subject key identifier:   D7:6C:5B:16:E4:6A:64:64:6C:EF:17:C8:12:FD:38:8A:6A:AB:AE:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CFD4CFE856A7C89F86142E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc215e8c-d5f6-3189-9898-906bd21ebae8.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     397194
IP address blocks:        192.81.185.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:cf:e8:56:a7:c8:9f:86:14:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=94eb06f1-408b-481a-9a4c-55a9a7dd93ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9b:5b:50:bd:b4:e7:87:fa:20:68:24:29:4e:
                    63:19:a5:85:90:04:ad:e4:95:5f:2a:ac:d0:47:d1:
                    e2:0a:ef:db:9c:c3:b1:0b:33:87:a5:20:da:b1:3b:
                    6e:70:3a:c9:0e:69:c7:3a:e3:49:7b:7b:57:84:3d:
                    62:84:e3:6a:42:6e:f1:be:c1:7c:c6:1a:b1:95:2f:
                    46:f8:a6:6f:f7:38:2c:2c:8a:6d:31:bc:9c:be:06:
                    e5:17:45:73:f7:58:69:1a:5d:0b:88:91:5f:2b:04:
                    bb:51:f8:b5:45:7e:76:58:4a:e5:83:9e:f0:4d:26:
                    a5:bb:6d:f0:c8:c6:b4:bf:1f:72:ff:1e:91:13:39:
                    90:a3:6a:63:7c:56:58:47:3b:28:de:65:61:48:b4:
                    b3:03:a9:95:97:1d:1a:46:42:6a:19:a7:14:7f:c9:
                    b7:cb:4d:bb:ec:62:97:d5:5c:90:ee:cc:65:8c:56:
                    cf:84:3e:de:1f:77:49:2c:57:db:f8:7b:2b:03:c9:
                    e8:04:0d:9a:97:8c:b1:72:8d:ce:60:76:16:23:c1:
                    ae:15:c2:e8:51:ae:9c:10:fb:50:53:a0:2c:72:fa:
                    73:11:29:31:c1:30:f1:6b:c2:f8:57:b6:66:2e:42:
                    cd:b5:a5:9f:27:b9:ff:7a:ac:ea:78:6e:8a:7f:c5:
                    23:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6C:5B:16:E4:6A:64:64:6C:EF:17:C8:12:FD:38:8A:6A:AB:AE:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc215e8c-d5f6-3189-9898-906bd21ebae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:92:1b:f4:b9:57:bc:0e:f3:91:c1:6e:be:6a:dc:6f:04:a0:
         e4:a1:68:31:70:33:83:09:ac:0c:f6:af:6a:1d:66:df:b5:31:
         17:dd:32:57:89:b9:e4:11:46:09:cd:23:56:4a:1d:a2:ab:c6:
         fc:ca:48:57:2b:3f:69:6b:84:30:5d:94:76:6f:f9:53:7c:56:
         6f:6a:31:f1:b5:74:99:60:f2:67:81:6f:3b:55:d4:ca:4c:bc:
         b1:45:ca:8b:3f:e6:2e:ea:c0:dc:94:33:45:e0:58:91:8a:42:
         f0:65:3a:89:ea:4c:77:73:37:68:df:5e:07:aa:73:1e:26:f3:
         ee:9d:8c:37:5b:6d:a9:27:30:c4:24:0e:27:a5:78:69:3c:3b:
         6f:c4:fe:3a:cb:88:96:fb:ad:e7:31:2f:3f:1f:99:06:15:7c:
         47:60:64:7d:a7:82:cc:f4:74:20:51:e9:90:54:a1:11:08:e7:
         c5:e3:0b:f1:6e:4b:4c:cc:f5:d5:56:bd:0b:a8:f7:20:b5:d9:
         b3:53:4c:5f:5a:8c:e4:0b:f5:f4:6e:f3:06:e2:4e:fc:b6:d4:
         9c:e9:38:1c:b7:62:72:f0:5c:f1:7d:ab:e0:d7:db:07:47:cb:
         64:15:9b:ce:75:fe:00:69:9c:33:93:c9:a4:40:ea:9f:c4:be:
         99:da:19:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:46 2024 by rpki-client on console-fra.rpki-client.org