Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9dfdf30-93d0-34dc-9591-3c055982db47.roa
File:                     d9dfdf30-93d0-34dc-9591-3c055982db47.roa (raw, json)
Hash identifier:          GiZSCLkZ+gZb9t7j02hYL3Uw/JC8kCSTZeENxN4pYQc=
Subject key identifier:   90:7E:9D:E0:B4:74:C2:56:F4:41:C5:27:A8:06:7D:08:BF:0E:2F:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584795167FBB07209CA63E5CECC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9dfdf30-93d0-34dc-9591-3c055982db47.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     396581
IP address blocks:        192.153.247.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:7f:bb:07:20:9c:a6:3e:5c:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=ff7782ef-3818-467d-9e7a-ef2c9ebffd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:47:e4:d2:0e:09:45:c8:23:96:bc:a6:02:57:
                    0d:50:f2:56:7c:46:7e:fc:a6:90:cf:58:d9:c2:31:
                    a0:02:58:32:76:dc:a6:df:43:c8:36:42:07:5d:34:
                    cb:7e:4e:ff:b3:b2:13:b5:06:b1:07:fa:15:9b:dd:
                    3b:3b:d6:8a:77:09:55:f9:71:ef:fd:dd:31:ee:69:
                    73:ef:88:4d:81:bd:63:f5:8a:0c:44:0e:c5:15:d7:
                    67:c1:15:c0:18:b4:0c:b6:69:7a:c2:25:d8:90:14:
                    2a:32:15:02:f1:2d:4b:64:19:b7:6d:74:5a:82:4b:
                    c9:33:77:b0:b2:c0:e6:e4:1e:16:1a:10:54:17:35:
                    e9:d8:a8:dc:22:f0:55:8a:68:e8:a0:8a:d4:91:25:
                    ce:a0:0f:9e:a4:2d:2c:8e:47:b4:72:0f:9b:91:42:
                    9f:72:29:e7:83:ca:85:80:77:81:15:b5:d0:0d:a0:
                    82:79:c0:cd:c5:9e:b9:ca:8a:35:b2:85:14:e5:a7:
                    6b:a1:08:12:81:25:c5:e1:8b:7b:65:3b:46:7a:a6:
                    e5:2c:cc:c7:3f:51:bb:c9:08:f9:e5:78:ee:58:da:
                    63:06:41:77:98:45:ba:7e:05:2d:03:1f:e3:f4:f3:
                    0c:40:34:31:b9:e9:ac:28:4f:c0:1c:f7:b1:76:71:
                    4b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7E:9D:E0:B4:74:C2:56:F4:41:C5:27:A8:06:7D:08:BF:0E:2F:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9dfdf30-93d0-34dc-9591-3c055982db47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ec:72:88:e3:34:25:1b:a6:be:a7:c0:a7:84:98:b9:0d:10:
         5b:7c:f5:75:63:d1:39:60:c2:f1:b3:11:4e:b2:c0:18:af:fb:
         28:5a:6a:d9:63:9c:4d:ff:c1:28:bf:8b:14:02:0e:4f:7d:47:
         ce:bd:2c:f2:2d:c8:4c:2c:70:f3:18:93:a9:a4:3e:12:da:61:
         11:11:45:c2:cb:fd:93:5b:fb:0c:6c:4c:11:86:7b:84:50:d2:
         4d:37:dd:e8:a9:5a:75:ed:46:27:9f:dc:34:69:b4:5b:a3:b8:
         c6:0c:9f:68:5d:09:2a:6d:60:9b:54:62:01:5b:3e:bc:82:f0:
         e0:0d:cf:59:34:46:58:86:c3:45:7c:9b:dd:1c:2f:77:58:b7:
         ac:73:2b:bc:d3:09:ec:38:fb:20:8f:da:81:99:b3:14:bc:bf:
         33:12:a7:d1:b7:44:40:1a:62:06:65:ef:53:d6:7e:ee:88:0e:
         2d:ec:01:8b:46:d8:6c:ff:f4:f6:0c:1e:50:fa:62:f6:e7:8c:
         06:b9:72:d5:98:eb:66:fc:59:67:65:d3:f9:93:f5:85:fb:8b:
         52:5c:1f:1d:83:a3:c6:93:08:b0:8d:e6:82:bc:e7:15:c0:fb:
         92:6a:8c:1e:fb:28:39:1e:d2:95:d8:aa:d4:27:15:96:7a:75:
         59:5e:52:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:17 2024 by rpki-client on console-ams.rpki-client.org