Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d584bd57-5d9e-3f28-99c9-05c9e4750702.roa
File:                     d584bd57-5d9e-3f28-99c9-05c9e4750702.roa (raw, json)
Hash identifier:          Bt4bzkoKJZ6/HGIxhWgvZRC0DKPyyw/XYVeigMDy1rg=
Subject key identifier:   65:7E:D0:90:6D:A8:86:C0:79:4A:2E:BA:FD:50:7D:76:27:D1:8E:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D13AC901C0E6E9619A22C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d584bd57-5d9e-3f28-99c9-05c9e4750702.roa
Signing time:             Thu 24 Oct 2024 12:49:54 +0000
ROA not before:           Thu 24 Oct 2024 12:49:54 +0000
ROA not after:            Wed 22 Jan 2025 13:49:54 +0000
asID:                     396591
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:3a:c9:01:c0:e6:e9:61:9a:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:49:54 2024 GMT
            Not After : Jan 22 13:49:54 2025 GMT
        Subject: CN=08a487c7-e2b6-405b-8f59-b93e4af12958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ca:47:f8:97:89:84:d6:c1:f8:bf:29:ac:53:
                    eb:78:37:3e:fa:d7:9e:bc:56:44:0a:f2:bc:29:4c:
                    e4:d3:90:d7:af:f9:f9:7c:6e:5e:dc:bc:d5:3d:95:
                    33:53:97:75:aa:47:68:e4:c0:e9:ed:80:10:30:01:
                    54:a7:e4:5a:fa:da:c2:3f:f1:4a:37:82:c9:e3:e7:
                    cb:d7:c5:0b:df:51:b3:e3:0f:ab:7a:b5:e2:01:5f:
                    93:61:7e:37:3d:3f:89:56:f3:f3:7b:b6:1b:b0:aa:
                    8e:8c:db:2e:0c:94:7c:a6:81:f8:dd:91:a9:c4:bf:
                    ee:b0:67:8e:61:b1:af:c7:8f:ef:8b:e9:48:23:9f:
                    c6:89:b8:34:61:89:09:35:69:7d:8e:ef:46:0a:72:
                    63:6c:0c:25:b0:1d:5f:50:07:34:ba:fd:be:2e:fa:
                    64:48:35:27:db:91:60:8a:1d:bf:94:da:24:b5:94:
                    15:4f:5f:64:90:9e:2b:a0:bd:d5:40:a1:12:fe:74:
                    e0:3b:c9:af:1b:13:46:36:21:46:5f:02:d3:de:6b:
                    47:9c:a1:80:a1:c5:d8:ff:7b:c9:7b:d4:86:e7:cc:
                    a8:79:5a:43:b0:1b:96:79:9f:f7:74:d9:50:bc:d4:
                    d4:de:44:82:b3:d2:67:df:2f:31:80:75:d4:07:03:
                    ec:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7E:D0:90:6D:A8:86:C0:79:4A:2E:BA:FD:50:7D:76:27:D1:8E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d584bd57-5d9e-3f28-99c9-05c9e4750702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:bd:e7:8d:9b:32:1b:9e:fd:de:a7:fe:e5:9d:b5:4a:5d:c3:
         7d:44:40:6e:87:9c:72:80:1f:81:a7:0d:c8:ba:72:b8:f5:4e:
         ca:b7:95:0e:b6:01:2b:6f:d5:7d:64:58:96:4f:af:9b:6c:76:
         b3:6d:40:c3:b4:b7:b8:87:d1:4f:7d:5a:94:59:6a:63:24:ac:
         5b:96:14:2c:b0:11:35:8f:ee:5f:6c:1f:37:3a:0f:ec:7c:f5:
         fa:62:d7:6b:c7:70:a8:cb:dd:cd:5e:f8:92:1c:1d:a9:76:fe:
         09:85:18:86:6d:a5:54:1f:c5:b9:79:48:ed:fd:14:8b:ac:eb:
         19:0b:08:63:bf:d1:6d:22:cd:ee:0e:09:59:4c:a2:50:96:55:
         5b:9f:41:42:19:f5:6f:0c:fa:b4:c3:1c:9a:43:55:1c:b2:3c:
         d3:eb:31:b2:83:1e:2b:9b:4e:74:c4:b2:32:bb:a3:f2:f9:d2:
         c8:c5:c6:b3:03:7f:8d:73:39:f2:aa:a8:8f:9b:e5:8a:bf:70:
         5c:33:b7:13:d8:47:eb:36:5c:1f:ea:15:49:56:b0:51:76:27:
         3f:3c:77:f8:60:e0:82:c3:f2:7f:3c:3d:20:a1:d0:c8:76:e4:
         2e:a4:07:fc:79:14:94:ba:d3:b7:b0:ad:20:c0:fa:22:9e:51:
         89:b9:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:48 2024 by rpki-client on console-fra.rpki-client.org