Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d000a7c3-ff9f-3094-85f9-7302a72b96c8.roa
File:                     d000a7c3-ff9f-3094-85f9-7302a72b96c8.roa (raw, json)
Hash identifier:          YJBqM2v7V4Z7orSmfyMYGSfbzfVoK/A4tpI9OjQLdgM=
Subject key identifier:   B2:9C:74:B8:B6:7B:EB:68:F6:30:99:90:24:63:86:30:F9:48:C3:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B3EDB82E93554E13F49D8C64
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d000a7c3-ff9f-3094-85f9-7302a72b96c8.roa
Signing time:             Tue 29 Oct 2024 14:08:37 +0000
ROA not before:           Tue 29 Oct 2024 14:08:37 +0000
ROA not after:            Mon 27 Jan 2025 15:08:37 +0000
asID:                     36616
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:ed:b8:2e:93:55:4e:13:f4:9d:8c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 14:08:37 2024 GMT
            Not After : Jan 27 15:08:37 2025 GMT
        Subject: CN=8d7707d9-52ae-4fad-8523-a77ddf6eeba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:72:ad:e7:ff:17:32:ae:13:2b:0c:bb:c5:
                    40:e0:a2:49:f4:77:f6:19:48:49:4b:a0:f4:a6:1b:
                    a4:96:34:0b:ef:53:ef:33:ed:98:d2:81:47:bf:a1:
                    d2:46:5c:ec:b5:0b:c2:e4:0d:ac:a0:d8:52:4b:a3:
                    d8:60:2a:36:dc:05:4c:d8:64:b8:4f:30:06:65:b1:
                    76:73:d1:2b:69:a0:80:33:53:48:96:30:e0:9f:61:
                    c4:f3:37:0d:cb:02:fe:a9:7f:c2:57:18:a2:3d:6f:
                    01:34:a6:3a:c8:5b:b8:95:5f:21:b3:1d:c7:1a:5f:
                    d5:fe:b5:1c:b4:1d:6c:0a:67:75:46:3b:4d:0f:de:
                    ed:a6:76:68:ca:37:55:65:10:36:17:17:00:31:f9:
                    81:35:94:08:9e:cb:11:33:70:f9:fb:d8:10:e6:56:
                    d5:ed:a1:2b:d0:4a:0e:f7:4d:dd:af:7e:51:85:a2:
                    f0:f9:eb:26:39:34:08:54:39:49:e6:33:c5:8b:1c:
                    15:63:22:f9:11:0d:41:e6:c1:7e:2f:0d:17:95:5c:
                    02:54:67:ae:2d:86:fd:cd:b9:1a:e7:12:a0:3b:2b:
                    19:12:47:cc:b5:c2:f0:82:f1:16:0b:f8:a9:d2:a1:
                    51:85:33:11:04:7d:98:a9:87:0b:74:84:3e:4d:55:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9C:74:B8:B6:7B:EB:68:F6:30:99:90:24:63:86:30:F9:48:C3:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d000a7c3-ff9f-3094-85f9-7302a72b96c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:88:fe:33:2a:fe:62:55:2a:34:35:a6:e8:fa:d6:29:8e:4f:
         e6:58:82:fe:36:4c:0d:fd:88:a1:a2:4c:c8:e9:4b:e2:b7:83:
         9d:ee:1c:c6:95:90:ae:9b:42:4e:86:79:1d:9b:63:29:d6:29:
         6d:35:50:44:b6:bc:27:34:9a:ba:38:a9:e6:ca:68:53:d4:8c:
         93:a6:1b:2a:4f:65:fc:7e:c4:3d:b2:d1:84:49:74:01:1d:3c:
         57:89:73:93:20:38:82:b2:e7:64:e5:1e:60:57:4a:18:90:17:
         73:c9:cb:b0:a7:8d:22:82:45:86:7e:1d:22:40:c8:c7:c4:1e:
         ea:3a:3b:7b:3e:69:13:f2:9d:13:cd:c6:b0:56:a5:30:75:1c:
         be:c2:b0:44:70:11:d8:93:1e:ef:6e:bd:02:41:c3:63:bc:a8:
         5a:61:51:33:82:32:45:54:94:49:71:3e:9a:37:79:6f:5a:d4:
         7f:67:43:8e:51:19:44:c6:c4:83:46:cd:ad:43:05:17:c4:12:
         f2:79:7b:e6:d7:86:b4:9b:53:56:20:ad:83:1f:27:bf:85:13:
         1e:14:54:f5:6f:f7:dd:c0:02:7e:e6:1a:5c:09:81:bd:d8:d8:
         a7:8f:6f:0b:ea:03:0e:0d:fd:2e:c3:fc:71:2b:ff:80:70:94:
         03:01:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:16 2024 by rpki-client on console-ams.rpki-client.org