Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1e90987-30a5-3147-b627-e58d4c84c433.roa
File:                     e1e90987-30a5-3147-b627-e58d4c84c433.roa (raw, json)
Hash identifier:          Ygjn9I7Z9V7cp4z/fYU5qQIdsrtNcsVll2vDQjJWEtA=
Subject key identifier:   B0:74:23:06:94:BF:27:5D:D8:8F:96:08:37:C1:07:DE:C9:51:9F:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584787211E5AB281352242C0D7A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1e90987-30a5-3147-b627-e58d4c84c433.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     396549
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:1e:5a:b2:81:35:22:42:c0:d7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=3bb30cff-f724-4b78-af13-dc2f5bcf8fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e3:91:3c:ad:9c:9c:25:5d:b9:66:2b:ec:a5:
                    bf:92:e4:ab:89:63:fa:fe:fa:65:94:30:48:e5:68:
                    c7:b5:d4:4e:1e:96:ef:e8:cb:4f:24:ac:78:8d:56:
                    86:6c:17:ee:fa:52:e5:9a:b0:ed:10:42:c8:ef:92:
                    23:bf:d2:ec:89:e5:77:14:9f:b6:99:fb:ea:cd:7e:
                    3a:23:d1:86:a7:9e:af:36:11:6b:de:8a:33:66:52:
                    8a:4a:e1:3a:51:f7:ad:36:63:47:3d:d4:5c:97:10:
                    67:f6:eb:26:c2:08:32:ac:9a:a4:14:d6:2e:0d:09:
                    84:5c:1b:bf:5e:10:2d:9d:b4:2d:35:80:1a:d0:f0:
                    3c:52:06:7c:d6:f4:60:ca:7b:89:f1:13:32:8d:d5:
                    49:07:0f:e8:3b:04:41:d3:78:59:c6:bd:d9:1a:ca:
                    b9:6c:7f:76:12:99:c2:b3:f0:18:0e:e3:d8:72:06:
                    88:9e:d0:21:ec:7d:4f:e8:71:f8:ec:81:3c:f9:f2:
                    e5:0d:77:ed:0e:f6:a3:95:1f:02:26:90:77:c9:69:
                    82:ec:93:3a:a1:3f:bf:ae:f3:2e:71:76:7f:2c:a3:
                    07:16:d4:ef:33:40:a7:20:63:51:34:63:2a:80:8e:
                    19:f4:3d:e4:ef:15:d2:fc:28:89:1c:c5:54:45:a4:
                    af:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:74:23:06:94:BF:27:5D:D8:8F:96:08:37:C1:07:DE:C9:51:9F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1e90987-30a5-3147-b627-e58d4c84c433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:2b:a6:37:ac:68:a7:52:52:b6:1d:49:96:3f:f1:c9:a7:37:
         40:60:24:75:4c:4a:d6:0e:f3:ff:2c:e8:57:dc:7b:4b:26:3f:
         00:a6:d4:9a:ee:db:c4:4c:2a:84:9a:34:d2:f3:fc:2d:1a:d3:
         6e:e6:2d:43:8e:b5:21:aa:dd:49:14:73:27:43:08:05:15:8b:
         c2:98:6c:ef:e3:b6:0d:4e:a6:ae:70:0c:70:8d:60:7c:c6:90:
         c1:08:96:5c:0d:c5:39:be:65:d4:b2:50:a4:cd:1d:63:ab:d4:
         d2:3a:bd:e8:1f:e7:a4:67:61:d5:56:d4:3d:ae:8e:ed:85:1e:
         de:3b:33:4b:c6:22:28:bf:c3:24:32:d7:01:76:64:82:28:64:
         98:b1:eb:67:81:b6:24:56:08:87:0a:22:1e:91:f0:c7:10:c1:
         a0:86:71:69:df:d1:02:ac:bb:e3:e4:6c:8b:b3:74:96:58:4f:
         28:81:e7:f7:1e:cf:81:62:2e:19:03:a9:a9:a6:10:ca:ad:d9:
         08:f5:da:2c:a2:68:25:90:5b:5a:27:b9:a0:9e:b1:ec:1b:c3:
         fb:b4:14:20:2e:8b:4f:c6:7b:f0:2b:e9:b4:58:f6:a7:c0:62:
         28:7a:eb:f3:27:86:df:92:38:23:0c:b4:7f:db:7e:d0:ee:d5:
         54:0c:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:49 2024 by rpki-client on console-fra.rpki-client.org