Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1d66331-7f17-39f1-8bc8-eebdfd3b6ef8.roa
File:                     d1d66331-7f17-39f1-8bc8-eebdfd3b6ef8.roa (raw, json)
Hash identifier:          bVrNMttgEl2SAH8xWuHYIDFcOy+ITpjtDyQultvD28c=
Subject key identifier:   EE:AC:EC:04:1B:88:5D:B2:38:63:0F:A1:71:F4:AA:6F:21:72:57:52
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B3EDBF7D6191E5A6988EC840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1d66331-7f17-39f1-8bc8-eebdfd3b6ef8.roa
Signing time:             Tue 29 Oct 2024 14:08:41 +0000
ROA not before:           Tue 29 Oct 2024 14:08:41 +0000
ROA not after:            Mon 27 Jan 2025 15:08:41 +0000
asID:                     396562
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:ed:bf:7d:61:91:e5:a6:98:8e:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 14:08:41 2024 GMT
            Not After : Jan 27 15:08:41 2025 GMT
        Subject: CN=1dd70bf6-2972-46d1-b84b-89f1b3ff81ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ee:9b:53:80:c6:68:fb:c0:80:e9:26:65:3b:
                    c4:57:fe:ba:49:7b:f6:c5:5c:75:a9:78:f4:de:ef:
                    e9:4b:ce:fc:18:8a:68:51:b4:74:6e:40:63:41:a2:
                    43:ca:3f:9d:2c:4e:bd:db:08:7b:5e:5d:69:bc:b5:
                    ce:28:4a:9e:e8:9d:07:37:3d:ae:6e:90:53:94:08:
                    4b:51:bb:3e:b2:58:bc:89:cb:f6:39:24:11:7b:30:
                    f3:b0:e9:21:85:38:48:1d:f1:91:e9:42:63:3a:7a:
                    59:fb:3c:46:f9:1e:d8:e1:cc:87:93:a3:ff:da:fc:
                    90:38:f0:53:09:fb:69:17:4a:96:2e:26:f6:4a:4f:
                    cf:51:8f:1a:5c:f8:c6:19:d3:ec:31:9e:0e:8c:e9:
                    a5:04:83:d8:b2:da:6e:4c:c5:f3:02:ab:f7:79:e3:
                    20:36:f1:fa:0c:c8:2e:c6:e4:1b:16:76:03:62:18:
                    0d:8c:78:48:88:84:db:98:04:fb:ba:71:d3:e5:a6:
                    07:d3:2f:a5:22:55:bb:1e:b5:43:e4:40:65:37:d4:
                    79:ef:af:43:9e:d9:56:e9:54:73:e5:6b:89:09:53:
                    fc:df:08:ff:9b:fb:7d:e8:f2:b6:33:f7:a7:22:1e:
                    f6:92:01:04:5a:ea:ef:41:e3:1e:57:a9:c7:79:ec:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AC:EC:04:1B:88:5D:B2:38:63:0F:A1:71:F4:AA:6F:21:72:57:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1d66331-7f17-39f1-8bc8-eebdfd3b6ef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:32:bb:3c:ad:4f:32:13:8b:bd:5f:7d:8a:3d:b3:7d:f7:3a:
         24:79:f8:cb:00:1b:2f:e3:70:e8:16:6f:73:e8:33:97:54:4f:
         f4:b7:96:19:70:5d:f8:43:df:bb:45:a5:d8:e4:69:2d:aa:5a:
         57:96:b8:22:4b:7b:ed:02:73:d5:a3:60:d1:be:9e:d2:18:26:
         c6:be:36:32:73:2f:db:76:e8:62:d0:6d:e9:a4:0a:68:6e:aa:
         d1:e0:85:cf:25:12:97:e3:f0:b6:27:f4:a2:7d:08:61:77:ea:
         ad:3e:d1:cb:44:2a:06:81:39:f4:b8:76:a0:02:8c:c4:fa:53:
         96:2f:db:3c:e8:8c:22:58:d8:0b:cf:76:cf:0e:d7:a1:8f:15:
         36:b4:96:de:32:f8:6b:5c:23:fd:4d:20:40:02:c9:8e:54:b7:
         d9:01:a6:28:7d:34:dd:a6:ee:70:f9:80:5e:2b:c5:15:9d:cf:
         df:e1:25:c3:c2:3a:1a:d5:2f:fe:76:22:f0:8f:fb:d2:b3:83:
         ce:4f:db:c1:fb:26:99:f6:4b:16:6f:bf:73:cc:bf:1c:70:e2:
         0f:9c:e4:1f:27:0c:39:0f:0b:0e:a2:36:f1:92:2d:1f:5d:7f:
         52:85:43:8f:f2:61:23:c1:b3:b2:75:61:f4:b1:f4:49:1a:8a:
         8d:57:33:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:16 2024 by rpki-client on console-ams.rpki-client.org