Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de89de38-b714-3349-8fe2-62e8d0fd6ab7.roa
File:                     de89de38-b714-3349-8fe2-62e8d0fd6ab7.roa (raw, json)
Hash identifier:          xYn4z6txIIWIWwi/1Q87GXXu8kFAn728aBMkYS5PnBc=
Subject key identifier:   65:07:D8:E6:1B:B5:9B:2C:4E:02:DF:CF:23:3B:F8:4B:BD:9E:0E:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A23B8531AE0CFAD53B13B
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de89de38-b714-3349-8fe2-62e8d0fd6ab7.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     396586
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:23:b8:53:1a:e0:cf:ad:53:b1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=d3ef223e-11e0-427c-bb3e-1e5904f9576f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ef:30:ca:44:c1:73:36:48:a3:c9:52:eb:16:
                    69:0b:93:f5:22:be:4b:36:27:99:ec:e6:7a:b4:19:
                    4e:77:85:e3:f1:98:16:fd:cb:d6:c0:2a:d6:f9:aa:
                    06:bd:04:ea:64:4a:9e:1f:e2:28:06:40:04:84:ce:
                    42:88:bf:1e:90:2f:f1:a9:1a:bd:1b:68:db:16:aa:
                    97:4e:eb:8b:06:2c:eb:61:27:6c:9f:30:c1:e9:99:
                    5c:f5:7d:c3:5b:2b:2b:30:e9:ba:c0:7d:53:15:9b:
                    bf:ee:2a:a7:0b:ba:68:f9:12:72:74:07:c9:7a:41:
                    18:b8:82:6b:41:fa:48:3d:73:bc:94:c3:44:c5:99:
                    c9:83:21:19:42:a4:93:63:6f:a0:95:d0:70:0c:79:
                    49:18:e8:f4:41:c4:e0:50:ec:54:29:01:89:5a:89:
                    8c:af:ca:f8:1d:9b:03:9c:82:b3:6d:93:5b:4e:4c:
                    25:d8:61:55:75:80:65:90:b7:5e:c5:b0:ee:c8:c7:
                    cb:74:78:db:d2:c7:3e:0c:f7:6d:a5:78:f4:71:6a:
                    f7:f7:33:d1:ee:49:fc:c0:11:b9:e8:87:f6:89:3f:
                    c4:56:5a:c6:04:e5:8d:53:f5:b3:19:db:3a:97:95:
                    25:de:eb:4d:97:66:74:52:70:8b:7c:a1:cb:42:fc:
                    17:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:07:D8:E6:1B:B5:9B:2C:4E:02:DF:CF:23:3B:F8:4B:BD:9E:0E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de89de38-b714-3349-8fe2-62e8d0fd6ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:1a:cc:33:3d:1a:8f:4f:c0:59:a5:c6:d9:7f:99:1a:b9:
         eb:28:e8:a2:a0:c3:82:0b:3e:e6:a1:2f:37:8b:f2:32:ae:e4:
         d3:6d:da:bf:37:1c:26:47:9f:9a:94:d7:67:b4:41:24:02:c2:
         b7:52:da:3c:d2:b5:70:83:99:35:4f:18:e3:55:98:b3:73:46:
         6e:0b:44:5b:5c:27:82:5d:51:f9:82:93:b7:1e:a2:4f:bb:dc:
         b5:19:96:90:48:c3:98:a7:cc:38:f6:ea:61:26:92:eb:de:21:
         b7:ef:38:19:0b:5b:b6:8c:e9:06:b5:76:02:72:03:58:a0:d0:
         90:57:78:be:4f:e3:3e:17:54:e9:64:b0:78:11:f8:c1:8c:f2:
         c1:2f:0c:aa:2b:62:b6:9d:a3:88:13:d4:29:0f:df:2c:7e:e9:
         1e:8d:48:57:8e:5f:1e:0c:3b:2a:dd:a0:28:21:5a:27:98:cb:
         da:44:5c:b6:8f:15:fd:6f:08:e9:07:69:f8:04:d5:4d:13:a2:
         1f:69:92:90:50:11:40:80:4c:ca:25:26:52:8e:8d:2c:a2:cd:
         92:cd:aa:b8:25:83:85:74:0d:0f:c4:f8:3d:85:ea:49:4a:05:
         bd:4d:e5:53:ab:fc:a2:3f:3c:52:b1:2f:4a:53:10:ec:46:7e:
         38:27:ab:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:17 2024 by rpki-client on console-ams.rpki-client.org