Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0ddbd76-e6aa-396b-8b56-f3ac0883a722.roa
File:                     d0ddbd76-e6aa-396b-8b56-f3ac0883a722.roa (raw, json)
Hash identifier:          O7d0+7+IjX0tO0VYbNAolop2Xwi+HZwO8m21SzrMKpY=
Subject key identifier:   7E:81:94:0B:F0:95:8A:D3:6B:74:9E:1D:9E:88:8F:84:75:CA:55:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858479516804BC846AB6ABF13F280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0ddbd76-e6aa-396b-8b56-f3ac0883a722.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     396589
IP address blocks:        192.153.247.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:80:4b:c8:46:ab:6a:bf:13:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=aaac6e39-5a99-402c-9aaa-aee933e2172e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:52:d2:e1:ae:4d:85:23:d0:26:40:3f:9c:
                    40:17:89:81:57:1d:9d:48:c7:5e:7e:0f:38:be:56:
                    e8:0c:f5:7f:62:69:d0:39:bc:52:21:7f:d2:be:78:
                    df:22:2e:ee:39:1a:55:6a:b8:29:7a:f8:c5:e2:9f:
                    41:f9:96:d4:4e:76:70:09:61:3a:fa:52:eb:db:e4:
                    c1:10:b6:1c:b2:9a:2e:65:4e:e6:41:57:60:7f:78:
                    ef:9c:21:fe:55:b6:6f:91:99:af:84:2d:31:1d:40:
                    bb:39:75:7e:16:71:f5:bd:62:d3:1c:33:1d:8a:b5:
                    67:73:f8:32:56:67:ef:87:02:9d:93:e3:82:96:72:
                    d0:7d:84:33:71:eb:f0:2b:95:cb:ca:48:05:1e:79:
                    70:c5:20:d4:fb:63:06:fc:58:48:d6:f4:f1:35:73:
                    21:e7:15:b6:30:70:53:0c:23:61:12:3c:22:1a:78:
                    d1:79:3f:e6:2a:09:a9:9c:7a:a1:1a:91:1f:cf:23:
                    f0:6f:53:46:a9:c2:00:97:58:b6:52:e6:e8:3b:e4:
                    d4:03:04:99:be:b9:d3:97:6c:9f:2a:7a:fe:f1:5d:
                    cb:19:b2:2c:69:ea:64:54:bd:75:fa:2b:63:f8:01:
                    32:fc:30:20:dd:c6:16:6b:33:89:9a:93:94:fe:96:
                    11:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:81:94:0B:F0:95:8A:D3:6B:74:9E:1D:9E:88:8F:84:75:CA:55:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0ddbd76-e6aa-396b-8b56-f3ac0883a722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:04:30:8c:c3:69:08:23:e9:00:4a:48:95:ff:d8:23:58:13:
         50:55:6c:92:dd:cc:00:7a:5e:4d:03:24:3c:74:18:e4:87:d1:
         cc:9c:a9:e1:50:e1:ab:6d:a2:dd:f5:dc:34:d5:cc:37:d0:a1:
         0e:34:93:83:03:44:e8:29:72:3d:7f:72:5d:04:38:e6:6b:99:
         d4:25:04:7a:11:89:e4:b0:af:31:17:1c:97:17:26:84:eb:67:
         cb:c1:28:80:b3:d6:9c:05:b6:ba:ca:b8:b0:3c:fc:00:54:80:
         fd:7e:d9:fe:c6:34:8a:9f:28:7f:57:4c:3b:28:0c:cf:7c:86:
         29:28:43:0c:74:84:ff:59:2e:2e:25:f1:84:f0:61:1a:79:bb:
         b0:37:14:a0:8d:0f:f0:5a:83:36:b9:46:ac:5f:fe:ab:df:57:
         2a:ab:bb:0a:99:10:17:7b:4f:f8:35:e6:43:75:fe:a9:53:91:
         63:c9:07:71:7d:5e:f2:39:01:42:28:34:de:59:ae:49:6b:69:
         24:ac:b5:4a:84:22:00:f6:2a:32:9f:e8:16:4b:16:8d:2e:32:
         1c:c0:e6:21:66:92:5d:7f:dc:9b:48:65:67:f9:6c:71:df:c1:
         14:72:75:be:61:95:ef:c7:4e:2b:c9:32:f2:89:be:b0:d0:14:
         16:86:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:16 2024 by rpki-client on console-ams.rpki-client.org