Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23b0162-ede9-30e1-8539-5ca5505b2507.roa
File:                     e23b0162-ede9-30e1-8539-5ca5505b2507.roa (raw, json)
Hash identifier:          MmEiU0ppTqYOGwJeTSimaAQpLNWsUAVV82r2vJ3NmM0=
Subject key identifier:   BD:7B:2E:72:E8:A8:D8:C6:82:70:7C:F9:D3:A8:B9:39:2D:FA:E3:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C3FE0B54A76255D050C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23b0162-ede9-30e1-8539-5ca5505b2507.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     396549
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c3:fe:0b:54:a7:62:55:d0:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=f4a29425-c578-45ce-9395-13b3da7948c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:92:58:b5:23:b6:ed:cf:e7:02:c2:a7:0a:d9:
                    a8:ce:6b:ed:4d:56:81:af:f1:8a:f2:61:1a:fe:63:
                    55:93:f1:3e:2a:97:9b:33:8c:bd:74:09:c3:89:fc:
                    db:ad:35:73:35:f6:81:7e:8a:1a:28:26:eb:37:71:
                    ca:e6:28:97:79:b4:06:72:49:37:64:2c:25:91:58:
                    f9:2b:d2:b8:3c:78:51:e6:0f:d0:e8:bc:8b:71:5e:
                    08:f7:62:4a:e5:fb:e3:63:3a:c0:18:d5:ae:59:8d:
                    32:8b:0e:f9:d1:3c:f7:7a:b4:79:cc:ae:0b:ae:3a:
                    97:75:45:8e:68:ff:ee:d3:a7:29:a6:55:8e:c1:f7:
                    04:07:62:7e:ba:26:8d:a6:4f:3c:84:93:e3:97:b1:
                    28:50:54:4c:bb:bf:12:3d:3f:33:20:9d:2e:9c:54:
                    34:f6:c1:ff:ad:4f:5b:6b:fa:e1:cb:14:54:83:62:
                    a0:9e:1b:38:99:97:07:f9:e0:17:78:c4:97:3d:f3:
                    69:e2:14:93:fa:59:49:c4:ff:e4:47:ff:c3:fa:bf:
                    84:36:02:64:9f:06:4e:1e:d3:ee:4e:7c:e9:4a:af:
                    90:0f:d1:3c:13:ed:85:8d:f2:54:93:b0:89:5e:b7:
                    92:7a:e2:ad:0c:56:6b:39:08:ea:53:47:85:2a:02:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7B:2E:72:E8:A8:D8:C6:82:70:7C:F9:D3:A8:B9:39:2D:FA:E3:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23b0162-ede9-30e1-8539-5ca5505b2507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:89:ac:85:7d:f9:e3:fa:8a:5e:b3:53:e8:72:e6:60:61:a9:
         a5:55:4c:60:3a:e3:99:d4:1a:8a:d8:a3:e1:65:70:9e:8b:34:
         1f:69:66:7e:5f:8e:55:e1:9f:a0:65:67:53:fd:c8:33:f7:c2:
         a1:a5:df:c7:c9:31:3c:25:b5:9a:5a:81:36:aa:45:17:d1:75:
         a7:cf:16:5a:e9:62:82:d4:1f:31:dd:20:1b:a8:ab:20:5d:ca:
         f7:27:83:0e:b9:73:5a:f4:4e:15:f0:a2:44:bc:b6:e9:de:d6:
         2f:69:50:fa:97:bd:95:c5:67:cb:b6:55:99:87:ca:29:a4:46:
         62:2d:c3:42:73:fe:ea:01:22:ac:2c:7f:77:9d:d3:ee:07:95:
         83:40:45:3d:33:e5:75:11:36:ef:32:66:62:ed:12:3f:f7:72:
         f1:d6:53:82:d1:ae:62:06:42:d9:ee:2a:67:25:3a:0a:80:9d:
         36:e6:5e:f7:b4:f3:35:20:aa:b4:a6:ae:57:43:dc:8d:06:2c:
         41:54:0c:3b:55:21:ed:d3:fd:65:73:23:7f:f6:1a:51:41:50:
         c3:40:46:ac:9b:64:dd:ba:a4:b4:be:d9:b9:40:db:16:a1:2c:
         a6:54:3c:92:1c:28:7f:cb:e1:c9:60:46:a4:fc:fe:5c:82:6e:
         36:82:af:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:49 2024 by rpki-client on console-fra.rpki-client.org