Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd74d437-b45c-3039-96bb-9e1bd7ba051e.roa
File:                     cd74d437-b45c-3039-96bb-9e1bd7ba051e.roa (raw, json)
Hash identifier:          lTQRWX/BlxJFcUbMAnABgwoa9mG8eKRvOMwNt+mrFmc=
Subject key identifier:   47:6D:C8:97:9F:F7:3D:96:6D:10:51:15:87:D2:21:B0:9F:80:8B:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B3EDBD6A2283D8609A155240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd74d437-b45c-3039-96bb-9e1bd7ba051e.roa
Signing time:             Tue 29 Oct 2024 14:08:40 +0000
ROA not before:           Tue 29 Oct 2024 14:08:40 +0000
ROA not after:            Mon 27 Jan 2025 15:08:40 +0000
asID:                     36632
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:ed:bd:6a:22:83:d8:60:9a:15:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 14:08:40 2024 GMT
            Not After : Jan 27 15:08:40 2025 GMT
        Subject: CN=d4d20b07-461d-4b4b-8b62-0cb447210682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:c5:79:7b:d5:01:ae:62:98:84:c9:95:9f:
                    1f:ec:e7:5c:81:44:00:c5:17:c2:ff:f6:9e:f7:9f:
                    f9:8b:eb:17:69:04:2f:81:a6:8d:7a:d5:77:d9:9a:
                    73:02:32:34:8c:97:fd:cc:6f:90:74:4f:b2:4f:00:
                    e4:ca:a9:f6:06:da:98:96:e1:0d:b4:cc:8d:77:1e:
                    3f:0f:94:fe:32:5f:a9:77:a0:09:7e:fd:f2:4a:88:
                    1c:83:4e:65:51:b5:8a:9b:9f:62:2a:23:98:66:23:
                    3b:07:2e:57:60:78:3c:e7:b2:c1:ae:cc:af:4a:e3:
                    31:9b:ba:4a:8b:10:25:83:1f:04:72:8f:f9:7e:af:
                    a7:f3:ff:b9:59:da:a2:30:45:c9:03:ab:93:7e:89:
                    51:55:57:32:d7:2c:a1:b3:00:8a:63:bd:12:cd:03:
                    15:37:3c:c2:87:f6:de:de:ac:88:04:44:3e:34:50:
                    18:ff:9b:a6:8c:82:f4:0e:21:8a:57:96:d0:80:dd:
                    c9:b2:22:e0:f5:5d:1a:b5:84:16:7e:4d:94:7d:12:
                    65:f4:98:ed:b7:c7:db:90:c1:e3:62:68:60:fc:99:
                    13:d7:1f:e4:d7:a2:93:a2:00:64:3d:dd:ea:fc:5d:
                    14:4c:a1:a1:c4:1c:34:f3:4a:d7:d7:35:35:39:49:
                    26:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6D:C8:97:9F:F7:3D:96:6D:10:51:15:87:D2:21:B0:9F:80:8B:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd74d437-b45c-3039-96bb-9e1bd7ba051e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0b:5e:57:88:33:0b:57:21:fd:8a:d2:62:51:5d:de:9e:7b:
         5d:98:f8:21:3c:17:c9:6a:6c:4e:52:21:31:a2:92:9b:ab:d5:
         8e:80:ba:cd:b3:2e:8f:10:5f:eb:70:3d:b5:62:aa:0d:d1:9c:
         42:71:b3:77:59:6e:fa:00:99:74:d6:f5:62:c8:f3:91:c4:db:
         b2:fe:f3:09:84:9d:eb:69:c5:72:be:d0:13:df:a4:a2:cb:f3:
         26:af:f3:83:41:c0:f6:ac:7d:e3:e5:14:05:7c:3c:d5:9f:90:
         07:3b:cb:1d:0f:ce:cd:d6:8a:4d:3a:4a:d1:f6:04:0f:27:31:
         a0:48:d1:44:f1:98:ce:2c:ff:cb:a8:99:40:76:82:50:3a:df:
         f0:2a:2c:eb:9f:05:f6:7a:47:9b:e4:eb:63:c1:4f:86:9f:38:
         21:62:34:50:a7:5f:c5:30:0b:90:13:9a:17:19:1f:d3:ae:28:
         af:5c:a3:60:94:80:7c:dc:cb:41:a1:49:db:a8:1d:81:8a:b4:
         fc:c8:45:d4:f7:53:ce:b8:6c:ab:dd:23:19:ca:3f:1d:b7:ca:
         4c:1c:9c:9a:36:84:6a:0d:57:2a:ee:5f:0b:de:f9:47:14:68:
         06:61:11:ce:1f:46:c3:6f:50:20:81:a0:97:f0:87:a5:93:91:
         e0:8e:53:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:46 2024 by rpki-client on console-fra.rpki-client.org