Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd4734df-511c-381d-9b8d-f25f5b6cbbb4.roa
File:                     dd4734df-511c-381d-9b8d-f25f5b6cbbb4.roa (raw, json)
Hash identifier:          og60hmrNiARy3zkC7zqP3sv3hU8b3xpB+nPp17oLbBU=
Subject key identifier:   5E:EE:68:AC:8A:1F:96:E7:6F:BA:DA:70:22:21:C4:70:C3:57:D5:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584787211DCA89B523F66CB40500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd4734df-511c-381d-9b8d-f25f5b6cbbb4.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     396544
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:1d:ca:89:b5:23:f6:6c:b4:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=a7611c38-80f2-47a0-a4de-4a2fb8158020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:d3:c3:d0:d5:d5:df:b7:31:f1:5d:b3:04:
                    25:55:a1:d9:8f:12:1f:6c:c7:02:3e:b8:93:9a:5c:
                    0d:75:db:2d:87:e5:52:a3:61:da:f5:bd:37:ac:6f:
                    ea:cb:c8:6b:9a:8a:d3:5c:c9:8e:f3:54:3a:8c:a7:
                    32:a0:a8:92:34:62:86:c3:67:9c:3d:15:f7:4e:6a:
                    22:92:66:f2:5b:a4:cc:c7:81:52:af:95:30:83:a0:
                    ef:b8:40:bb:15:78:6c:d4:5c:15:ba:f9:eb:dd:06:
                    c5:fb:99:e3:1c:bc:e4:5c:ce:e5:d5:5b:fe:38:ff:
                    6d:5d:61:40:c7:5b:7f:6d:9d:4a:81:4f:81:7f:c7:
                    03:11:3b:85:96:33:b6:10:28:6f:62:b6:e7:b9:eb:
                    69:95:99:ea:4f:ce:18:02:1e:50:4e:f8:17:f5:58:
                    a1:c7:95:94:45:79:3f:d5:2e:20:02:df:cd:f6:8f:
                    3f:65:59:7a:18:1a:26:c9:e6:45:c7:95:6e:ab:64:
                    5d:dc:33:92:93:89:9d:35:5f:2d:31:35:d3:4d:af:
                    9a:59:ae:d3:31:c6:39:ae:aa:b0:e2:a4:4a:2a:58:
                    fc:f2:a6:20:06:29:b5:43:eb:33:37:3d:55:c8:35:
                    c9:28:16:af:aa:c1:d5:8d:7c:09:98:f5:ea:46:c7:
                    25:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EE:68:AC:8A:1F:96:E7:6F:BA:DA:70:22:21:C4:70:C3:57:D5:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd4734df-511c-381d-9b8d-f25f5b6cbbb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:ae:66:a5:3b:89:c7:0c:9a:0b:d2:6f:61:66:70:ba:1d:90:
         e5:db:a9:19:6b:5c:81:fe:11:6f:1c:c6:1e:f6:af:f4:6e:7a:
         a8:82:ec:33:64:89:e3:8d:08:78:bf:a5:cb:12:0e:ed:21:41:
         18:45:55:26:c5:77:3d:31:6d:8e:7c:08:ed:ca:22:10:51:47:
         0b:a9:eb:b5:a9:55:df:9c:60:b0:00:5e:f9:c2:f8:30:6a:d7:
         88:57:13:34:fb:e2:b3:a7:4b:bf:41:a2:51:4f:6b:87:65:23:
         82:06:04:9e:9e:b4:58:98:f7:69:ca:54:41:d5:20:07:b9:5f:
         d6:75:ec:54:d1:38:85:b6:61:06:9d:eb:37:2e:68:6e:f9:78:
         35:c4:38:5a:c6:2b:97:c5:2b:1f:91:52:bb:99:6d:06:2a:58:
         27:70:95:f4:63:69:fe:fc:1c:86:52:d3:2e:56:e2:44:bb:15:
         ec:b3:76:f8:f3:74:e5:06:be:84:9f:a4:f8:0f:47:65:8d:6a:
         4c:9a:f6:40:8c:b9:58:38:47:32:47:f7:0e:7e:6d:35:5b:d0:
         40:96:37:bf:a0:c7:24:a1:a6:4a:a8:8f:5d:5a:47:23:80:3a:
         c7:dd:bc:a6:a3:2f:0b:d0:4a:c4:3e:cf:55:65:7a:37:6b:bb:
         72:3c:af:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:49 2024 by rpki-client on console-fra.rpki-client.org