Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76520a6-0821-3591-a391-f0e2ca02a540.roa
File:                     d76520a6-0821-3591-a391-f0e2ca02a540.roa (raw, json)
Hash identifier:          OoM9NNVMN4WwItQAyrBMndGcZVaN0mkpH0y7J1NlcFM=
Subject key identifier:   5B:AF:75:F1:B3:23:A8:3B:EA:D8:6B:26:1E:8A:D5:5E:2F:0A:AE:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C8E476462E13E9217E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76520a6-0821-3591-a391-f0e2ca02a540.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     397194
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c8:e4:76:46:2e:13:e9:21:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=b4c66bc7-0af4-49f9-b70a-db2c38ee23a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a9:fc:d3:e6:96:b1:fe:71:1f:25:ea:0c:f3:
                    c2:6f:8c:20:c4:6b:84:f9:14:5d:ac:b4:48:8f:94:
                    17:52:6e:ec:df:dd:38:75:bf:78:19:70:9b:a7:e1:
                    59:f3:e6:55:d5:16:4e:3f:5d:80:a5:5f:b5:46:a4:
                    af:26:59:55:8a:0a:10:f9:5e:63:d7:6a:23:4a:37:
                    b4:d6:26:fc:ac:17:fe:8d:bb:cd:79:d5:82:85:00:
                    ec:40:e7:30:68:b0:af:ba:0e:ab:55:aa:bb:f3:c4:
                    9e:5f:99:35:47:76:ab:d3:3b:2d:69:20:e7:a4:58:
                    74:f6:e4:bb:af:8f:bb:b1:86:24:75:33:45:4a:eb:
                    e2:60:ce:8b:62:87:aa:78:b5:45:5b:a3:14:3b:58:
                    1d:8e:7f:9a:10:3e:77:68:43:a9:ba:c9:85:f4:fa:
                    5f:b7:d6:b9:4f:4a:cb:d5:b8:28:46:23:82:61:dc:
                    f1:ce:5c:07:e6:54:5c:e2:e9:e7:b5:c2:e1:f9:c1:
                    38:6d:8c:32:ce:d9:cc:04:d5:0a:51:7c:74:96:dc:
                    04:22:20:66:c4:21:53:b8:c7:0e:8b:2e:36:88:25:
                    86:c4:2c:57:93:7e:c6:ff:48:33:3f:12:38:76:c0:
                    1a:5c:b0:3a:6b:1f:a3:9a:15:64:56:6e:61:82:ea:
                    49:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AF:75:F1:B3:23:A8:3B:EA:D8:6B:26:1E:8A:D5:5E:2F:0A:AE:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76520a6-0821-3591-a391-f0e2ca02a540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3c:77:7c:82:45:2b:6b:0e:88:43:f6:d4:6a:42:af:c0:47:
         51:9e:31:35:79:c6:ee:07:61:a2:57:11:46:44:20:b6:82:e2:
         f1:0e:f3:92:42:22:09:23:b3:1f:ae:d4:ff:13:06:3c:eb:86:
         e3:ce:91:6e:b2:6f:23:70:06:bd:65:25:57:4b:dd:d4:0e:02:
         a9:e3:f8:26:33:82:69:57:68:7b:dd:8d:2b:48:86:03:49:b0:
         1c:a8:6a:83:74:70:b3:0e:51:2f:2d:98:19:71:27:40:87:af:
         cb:44:ba:37:7c:d1:0e:41:62:81:ba:37:96:d2:39:bf:2f:e4:
         2f:3b:bd:b2:20:8f:47:84:a0:7b:ea:bb:22:10:28:e8:08:95:
         d4:71:1e:93:a3:53:1c:09:33:3d:02:6a:4e:e8:9b:ce:33:96:
         02:91:ae:3c:6f:f9:48:6a:45:6e:8d:2a:8c:5f:36:4c:40:6a:
         06:38:78:75:47:52:06:79:ca:d4:03:74:6c:86:04:75:5c:ad:
         61:c0:90:b1:a2:3b:d3:a9:7c:21:99:00:32:14:ad:6e:56:47:
         d8:2a:29:8e:ea:06:d8:a7:e7:79:79:5d:1d:e4:d8:c6:b4:17:
         b2:4e:3e:48:93:3b:9b:0c:01:67:fe:56:af:ae:08:7c:84:e4:
         e3:7f:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:16 2024 by rpki-client on console-ams.rpki-client.org