Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e020516a-ac82-335e-a63a-1690097929c8.roa
File:                     e020516a-ac82-335e-a63a-1690097929c8.roa (raw, json)
Hash identifier:          A6MfuJl/oyFKyH9VYn74IOx7AinToNjBQetPu1G2Zow=
Subject key identifier:   F5:81:18:69:C4:CD:FD:D9:28:1E:D0:25:D4:B7:06:F8:29:BB:72:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D1439BF9189B2E93621900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e020516a-ac82-335e-a63a-1690097929c8.roa
Signing time:             Thu 24 Oct 2024 12:49:58 +0000
ROA not before:           Thu 24 Oct 2024 12:49:58 +0000
ROA not after:            Wed 22 Jan 2025 13:49:58 +0000
asID:                     396616
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:43:9b:f9:18:9b:2e:93:62:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:49:58 2024 GMT
            Not After : Jan 22 13:49:58 2025 GMT
        Subject: CN=df640146-6b7c-42f4-8ed4-99028b76a83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:df:a4:2c:db:35:91:11:14:82:47:0b:c5:69:
                    11:5f:86:17:3b:4e:df:df:6d:b9:85:76:48:e4:aa:
                    d1:3b:b1:9c:df:81:40:e7:d1:81:21:e9:1c:1d:dd:
                    c2:d7:c3:0e:61:26:ea:64:1f:f3:67:19:6b:7c:17:
                    e5:f8:f5:26:15:dd:0f:e6:7b:02:59:9c:98:1d:c1:
                    33:de:4d:a8:0b:9b:f7:cc:09:cb:ca:26:07:e3:bd:
                    1a:cd:d7:12:f1:ec:d2:9b:5d:95:94:92:25:70:c5:
                    e9:41:f2:e4:ba:6e:af:10:2c:38:15:4f:31:b5:54:
                    8f:c6:ab:cf:d1:54:5f:8c:67:64:0e:88:fb:5b:a1:
                    73:c9:90:de:2f:00:44:3e:06:89:8b:70:41:fd:1e:
                    ec:73:cd:a8:9b:79:98:36:44:b8:c8:f0:4f:9e:dc:
                    c0:9b:51:e6:c0:6d:64:68:76:a0:7c:80:10:f3:ba:
                    a7:28:4e:45:39:27:98:8a:8a:41:f0:11:59:9b:88:
                    f4:d6:c6:c7:f3:5b:96:9b:57:ed:89:d1:e1:e3:6f:
                    13:71:75:37:8a:25:d6:34:21:f3:14:17:33:e1:a2:
                    6a:e9:9e:46:53:51:83:b9:01:5d:cc:06:cc:cf:dc:
                    12:e3:41:a4:a2:97:6c:c3:57:93:07:16:d8:44:a0:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:81:18:69:C4:CD:FD:D9:28:1E:D0:25:D4:B7:06:F8:29:BB:72:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e020516a-ac82-335e-a63a-1690097929c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:46:78:b1:a0:67:c5:2c:15:0a:96:bd:14:52:3e:c2:01:d8:
         ad:2a:f5:86:d8:75:6c:78:4c:7e:22:22:30:56:52:d2:b5:17:
         a6:4a:24:9c:d5:0a:28:5c:67:7e:30:0b:d2:8f:48:0d:53:e8:
         fe:56:00:48:83:1a:38:fa:e8:c3:69:e5:1a:93:62:11:bb:cb:
         0c:de:41:1b:44:4f:06:6a:0b:92:df:05:70:9b:bb:ca:1a:4d:
         1e:aa:de:95:c7:ef:41:6b:69:27:2f:5a:2e:f9:45:78:db:00:
         49:90:56:d1:b0:30:9a:ae:90:b9:53:26:d8:17:9b:f3:44:74:
         95:13:62:b4:86:33:29:bb:89:a3:21:23:7b:26:50:24:85:45:
         24:7f:93:66:27:ab:aa:47:69:fe:c7:76:df:ad:55:b8:10:59:
         18:18:5e:a9:93:90:80:76:fa:16:1f:5b:c1:01:65:09:11:1d:
         97:42:04:2d:97:a7:73:a8:9a:5b:ac:d3:35:6c:31:34:16:39:
         7f:4d:fe:90:87:c1:68:bf:70:e4:1b:55:35:a6:7c:d7:a0:93:
         1b:10:6a:c1:bc:ef:c2:b7:4c:79:54:59:11:c0:99:5e:72:12:
         83:19:e0:03:23:4b:1f:a2:15:40:24:20:1d:d9:f0:e1:40:a0:
         20:72:66:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:49 2024 by rpki-client on console-fra.rpki-client.org