Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1d70c14-64e3-36dd-b25c-1775c8eb80cc.roa
File:                     e1d70c14-64e3-36dd-b25c-1775c8eb80cc.roa (raw, json)
Hash identifier:          PpCJgrvlucGbYkV3gqzzC6d2dXDHRc1+hxIoen6I+7o=
Subject key identifier:   8A:76:52:68:E9:BC:B6:B3:D4:7B:A3:2B:EF:15:CD:97:67:D6:BF:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D14E198253B29B20086F10
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1d70c14-64e3-36dd-b25c-1775c8eb80cc.roa
Signing time:             Thu 24 Oct 2024 12:50:03 +0000
ROA not before:           Thu 24 Oct 2024 12:50:03 +0000
ROA not after:            Wed 22 Jan 2025 13:50:03 +0000
asID:                     396827
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:4e:19:82:53:b2:9b:20:08:6f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:50:03 2024 GMT
            Not After : Jan 22 13:50:03 2025 GMT
        Subject: CN=42ea933f-3a35-40ec-be3c-2506731fb1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7c:fd:7b:a4:6a:7c:40:7d:6c:98:1f:0b:3f:
                    64:58:bb:96:74:6f:b7:96:f1:a9:99:30:4b:b0:9f:
                    6d:93:92:fc:04:6d:51:46:78:41:72:be:57:37:d5:
                    d4:e2:c0:54:df:87:ce:7d:4f:2b:95:2a:6b:8a:22:
                    c9:44:9c:b2:76:e0:74:6a:d7:1f:55:69:6e:29:bc:
                    05:ef:9b:82:b0:ce:da:10:e6:a6:7e:37:2a:54:b7:
                    2d:8d:52:26:69:25:4d:92:f6:3e:95:77:96:b5:b0:
                    d5:34:3b:84:97:db:f0:f8:a4:94:88:5e:fb:60:3c:
                    a0:40:02:90:91:f9:63:b0:1e:56:cc:b7:ef:86:90:
                    14:dd:01:c6:31:8b:e5:68:70:c4:35:1d:80:6f:77:
                    94:f2:1c:15:23:5e:0b:c7:dd:42:96:9b:4e:42:50:
                    b9:32:a1:aa:18:08:72:1d:45:c7:3e:cc:db:09:93:
                    ca:7a:e0:ec:c7:f5:21:45:11:34:a4:33:b7:5a:65:
                    c8:e5:99:ef:f2:36:3b:35:f9:eb:55:b9:f6:b9:8e:
                    f2:c0:10:fb:cb:55:43:be:6d:50:da:93:05:00:4d:
                    a8:d0:bd:a0:30:af:0a:a3:fa:fd:73:9b:f7:5f:6b:
                    06:07:2e:31:ff:54:6e:9c:19:31:74:36:3b:2f:7b:
                    88:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:76:52:68:E9:BC:B6:B3:D4:7B:A3:2B:EF:15:CD:97:67:D6:BF:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1d70c14-64e3-36dd-b25c-1775c8eb80cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:93:18:04:08:7e:f7:b1:7e:b6:5f:08:74:49:ed:d2:a6:
         8e:36:ec:89:cf:a6:0c:45:ae:e5:b6:4c:a1:8b:bd:57:2e:52:
         aa:8a:ce:a5:39:5c:94:df:a4:4c:8c:e7:47:de:71:34:68:82:
         d9:10:37:56:11:6c:ae:ed:02:f6:cf:f0:0b:73:ab:d1:1b:fc:
         c2:4e:f5:e6:d5:ae:b8:2f:d6:54:33:9e:3e:f1:45:9d:64:37:
         e3:35:28:a0:9d:f8:77:60:de:7a:b5:d8:aa:02:11:ff:db:fc:
         73:be:fe:20:b3:60:c9:08:cd:94:87:a6:f4:40:86:c7:2b:34:
         be:d5:14:86:9f:1e:17:b4:bd:53:a5:24:f4:f3:40:0d:69:5a:
         2c:a4:df:62:e2:18:66:56:5d:bb:04:f9:45:7e:5c:17:4f:24:
         c9:d4:86:53:9b:81:1a:a6:24:6c:66:86:99:74:54:73:2d:bf:
         79:20:84:19:23:0b:fd:25:e5:d0:d6:7c:c3:94:33:68:3f:89:
         b8:e8:fd:6a:b1:5f:ec:27:be:14:26:db:3a:1b:71:f7:05:f5:
         d8:da:b6:c7:89:88:5d:57:f5:d2:3e:50:50:08:15:ff:15:5b:
         eb:dc:5b:ab:3a:76:32:d4:40:29:cf:d9:d0:57:b0:1e:f4:f1:
         0f:d8:a7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:49 2024 by rpki-client on console-fra.rpki-client.org