Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1802f1-3d54-322f-99fe-d05a8ca8bd7f.roa
File:                     ce1802f1-3d54-322f-99fe-d05a8ca8bd7f.roa (raw, json)
Hash identifier:          nJ1bcj/k37mMwE/L8LQJJIZdY4B95SoUYYIvZ+nFy+4=
Subject key identifier:   0B:87:40:51:E6:C7:F9:FA:52:E4:4A:0C:35:AD:3C:4A:A0:E6:DE:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C555BABBE211479549E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1802f1-3d54-322f-99fe-d05a8ca8bd7f.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     396578
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c5:55:ba:bb:e2:11:47:95:49:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=be559411-1e03-40ae-854c-3d5ef1a5d7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:3d:0b:f0:7a:42:6d:49:20:4b:7d:5d:a1:
                    e3:37:c8:3a:3e:aa:32:11:87:c8:c3:9f:09:33:aa:
                    43:5e:02:e6:f6:70:26:a9:e1:8a:37:9b:a8:3b:0f:
                    46:06:0b:04:dc:e3:2d:26:47:9f:80:8b:91:06:8b:
                    ce:d5:98:5b:73:eb:7c:f0:e1:a1:da:17:32:f1:30:
                    74:5f:83:01:ce:18:1e:c1:ad:0e:11:42:6a:d7:94:
                    c2:42:51:fb:39:59:da:12:fb:64:c7:9a:61:09:70:
                    b2:6e:f5:48:71:cb:4d:ff:97:c1:20:e3:f6:f4:37:
                    c6:08:24:56:f5:88:d1:c2:4f:80:7a:81:46:a4:45:
                    a9:be:66:89:85:5b:60:00:43:e5:ec:5c:52:6b:21:
                    ab:4f:43:7b:de:c1:f8:7c:5f:ce:11:f3:c8:1b:9d:
                    d2:38:d1:d5:fc:d9:4f:7d:a9:63:0a:cc:09:77:f8:
                    5e:74:28:21:91:45:0c:16:8a:58:37:2b:d4:72:b1:
                    d6:5e:4f:2e:c4:85:9d:1a:16:14:24:d6:9b:13:51:
                    3c:d5:7b:71:4c:12:e3:52:45:db:35:64:42:33:a2:
                    81:45:85:88:71:5d:ab:37:06:50:58:1d:94:ed:43:
                    81:f8:cb:fd:82:93:69:dc:f1:65:1b:31:4e:02:23:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:87:40:51:E6:C7:F9:FA:52:E4:4A:0C:35:AD:3C:4A:A0:E6:DE:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1802f1-3d54-322f-99fe-d05a8ca8bd7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:6e:78:14:3e:ae:ee:fe:ae:95:58:12:66:fb:f2:e9:71:77:
         c6:ec:22:f6:74:5e:e9:9b:2b:c3:2b:32:68:c2:31:db:e3:a4:
         7d:a8:4c:4f:0b:31:4a:bc:cb:5a:be:34:0d:ab:58:a7:51:cd:
         fb:44:3d:11:04:2d:39:58:8e:52:a6:92:16:c7:74:b2:76:41:
         c4:de:6f:a5:54:ea:46:4d:e5:cc:0a:aa:05:23:e5:08:5b:24:
         78:62:88:af:60:62:83:02:f6:c5:41:71:92:c4:61:25:9a:7e:
         b1:90:59:1f:1b:07:b9:ae:e8:fe:f9:fe:cb:c0:d2:cd:24:76:
         a8:4b:48:42:78:57:02:70:21:d3:50:39:0f:3c:82:de:f9:b1:
         12:cc:f5:40:a0:03:da:4e:f3:40:aa:1a:00:5a:9d:28:27:8f:
         fb:93:dd:ff:b6:d2:13:43:29:2d:00:05:cd:c7:91:7a:22:4c:
         8c:c7:84:75:84:d9:f4:62:61:02:b4:67:43:1f:2d:52:7b:92:
         e9:67:fc:48:c6:66:aa:0b:72:7e:b0:3d:17:f7:74:66:19:9b:
         2e:b6:c8:3b:d3:a2:a1:d7:64:f1:84:2e:23:95:41:89:ed:3d:
         9f:d7:48:dc:ca:90:28:18:43:57:92:9e:af:b3:a6:85:a9:c1:
         0e:0f:2c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:16 2024 by rpki-client on console-ams.rpki-client.org