Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1c30235-155d-318d-8f14-3d6b80290aee.roa
File:                     d1c30235-155d-318d-8f14-3d6b80290aee.roa (raw, json)
Hash identifier:          zmbjd6QHNp6Ff4YCeM7EepPCWesbQylsIKjUHqI9tzY=
Subject key identifier:   8F:C0:9E:C4:65:94:D5:32:2B:0D:75:00:A0:F5:7D:F1:B8:0B:3A:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B98717B9AE200ED93A7C14C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1c30235-155d-318d-8f14-3d6b80290aee.roa
Signing time:             Thu 31 Oct 2024 14:16:41 +0000
ROA not before:           Thu 31 Oct 2024 14:16:41 +0000
ROA not after:            Wed 29 Jan 2025 15:16:41 +0000
asID:                     396593
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:87:17:b9:ae:20:0e:d9:3a:7c:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 31 14:16:41 2024 GMT
            Not After : Jan 29 15:16:41 2025 GMT
        Subject: CN=66c84662-594b-4223-addc-a3677268a18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:7e:5e:13:1d:11:29:e3:75:e5:d2:78:db:
                    db:91:ea:97:24:89:77:e0:c0:75:82:30:03:27:da:
                    88:d1:98:1e:ce:68:96:7a:db:fa:e9:e7:20:fe:24:
                    80:17:4e:3d:5b:58:a8:01:ad:b6:f4:7a:c1:be:12:
                    66:ca:24:39:16:5a:7f:ff:b9:69:84:03:79:a3:f2:
                    db:18:71:df:72:82:6e:98:af:68:41:58:39:da:76:
                    1f:47:97:66:dc:8f:a2:43:f2:1c:24:30:43:08:48:
                    ab:5d:aa:4f:30:49:b2:83:8c:04:63:fd:84:72:82:
                    f2:8e:ba:9f:a3:53:37:f0:47:3c:24:17:2a:ac:44:
                    7a:91:7a:dc:3f:a8:ab:a9:71:4f:e9:f2:5c:f7:b2:
                    7d:08:1f:73:ad:cd:b7:d4:16:ae:e4:fa:c8:ed:99:
                    84:91:56:29:97:81:ad:03:3b:f2:5a:3a:36:56:42:
                    95:79:18:af:bb:84:80:aa:11:b4:c0:c5:fe:96:59:
                    7a:0d:fe:86:10:a0:bf:d0:a2:5c:16:d8:02:96:77:
                    a2:ba:71:44:d8:cf:d4:0f:3d:c3:f6:43:54:8b:de:
                    96:d9:c5:75:a6:7a:d0:94:42:9e:c7:de:7e:05:bb:
                    f3:81:20:a8:88:ca:32:dd:f1:fd:ba:f2:3a:13:d3:
                    58:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C0:9E:C4:65:94:D5:32:2B:0D:75:00:A0:F5:7D:F1:B8:0B:3A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1c30235-155d-318d-8f14-3d6b80290aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:d1:66:9f:8b:a2:19:ef:bc:f9:a9:89:e1:c9:0f:7c:a4:
         05:ad:f7:8d:c0:68:e8:7d:df:90:a9:eb:c2:42:9f:31:34:a5:
         2d:53:81:38:cd:32:6f:33:84:92:31:c4:f1:6e:44:cf:71:58:
         25:90:3b:00:a2:8b:44:ca:5f:fc:25:8f:c4:39:fd:5c:12:b7:
         35:99:20:2c:2a:e0:2d:4e:d0:9a:ec:a3:15:9f:40:9c:33:8f:
         6d:46:41:0c:bb:d4:a6:04:70:44:4c:d8:a6:a1:bb:27:07:f7:
         1d:0a:b2:e8:8d:ff:8b:16:c5:0d:d2:b1:02:62:91:76:61:4d:
         9e:4e:56:0f:9a:05:1f:5f:79:af:2b:78:9e:37:76:13:56:67:
         72:ce:b6:67:b6:2f:e0:ca:55:b7:14:2c:9c:e7:e1:30:dc:11:
         6e:8e:43:d0:63:16:f6:af:bf:53:0b:7f:8e:8a:e7:1a:30:f6:
         c8:ca:88:61:6a:22:f2:cb:23:1b:16:c6:35:cf:1d:bc:d2:b2:
         c6:27:a8:7e:3a:21:73:10:9c:62:ad:93:4b:a4:ab:e8:34:15:
         90:f7:2a:91:40:1a:9a:e9:af:b4:98:4e:57:a0:d6:b3:f8:7d:
         ba:74:c4:15:60:08:0d:6f:3e:5d:a0:7f:cd:c0:c3:12:5a:a6:
         71:bb:5e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:16 2024 by rpki-client on console-ams.rpki-client.org