Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e28c4e13-1b79-3832-8b23-18188bab8ba8.roa
File:                     e28c4e13-1b79-3832-8b23-18188bab8ba8.roa (raw, json)
Hash identifier:          TAieIuLTPcwVVlQn2XoyAQ6dKhvl+BRN3+QPTaxGogs=
Subject key identifier:   52:72:70:BD:B2:46:44:D9:A8:E3:44:50:83:B5:63:F6:35:A3:81:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A22CC00EB97CB7E5FD580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e28c4e13-1b79-3832-8b23-18188bab8ba8.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     36624
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:22:cc:00:eb:97:cb:7e:5f:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=318b0bbe-b3f8-4c7c-8d9c-8efd891eb303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:b1:d0:84:46:99:99:13:7d:b2:03:1d:84:
                    ed:21:bb:31:ba:97:41:be:03:1e:5d:2a:3a:49:1a:
                    e3:78:26:7c:2a:81:34:87:b2:67:ec:bf:95:fb:0a:
                    97:1c:71:aa:01:7f:75:b2:0a:ff:6e:da:32:ff:f7:
                    2c:c0:4f:46:fe:12:32:57:e8:05:1e:fa:d2:82:45:
                    02:ae:23:cd:05:05:88:48:c2:7d:b1:d6:4c:6b:08:
                    09:05:57:56:69:14:43:18:52:3f:8f:02:8e:c3:18:
                    46:ad:df:1e:7b:8c:9a:a8:30:58:3c:16:16:98:83:
                    d1:4d:40:4b:48:be:8b:03:63:47:fc:9d:18:f7:4c:
                    f1:d7:a3:2f:cf:03:80:74:01:47:58:48:2f:98:3d:
                    5e:5e:d3:07:e6:ee:bd:25:bd:1e:b9:6d:e0:40:3d:
                    1b:23:b6:28:d4:64:7a:d6:d9:ff:da:38:15:98:fa:
                    17:36:89:86:9e:1d:47:e0:d5:70:c5:4d:99:d8:e7:
                    0f:b4:72:84:3d:a9:99:af:0c:ae:27:d8:56:db:50:
                    75:30:a0:22:53:4c:bd:ee:1a:e0:66:d3:76:c3:03:
                    9d:bb:7d:fd:81:ec:9a:6c:fc:fd:e4:fd:c3:e3:85:
                    6a:31:29:e3:d3:52:51:7e:8e:66:21:17:1e:1e:dc:
                    44:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:72:70:BD:B2:46:44:D9:A8:E3:44:50:83:B5:63:F6:35:A3:81:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e28c4e13-1b79-3832-8b23-18188bab8ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:42:2d:a3:b0:d9:4b:64:bb:4d:d4:c7:af:26:8e:33:66:8f:
         b2:3e:0e:0c:f5:fc:74:fc:4d:19:e8:9f:e1:19:1b:77:27:77:
         ad:05:02:3b:00:e8:6c:eb:2f:17:c1:6e:60:f1:12:57:11:f0:
         e6:f4:04:03:51:d7:c3:79:3f:df:34:ba:23:5d:de:f1:64:2f:
         8e:6a:5a:0c:6e:a4:3a:06:a9:db:1c:bf:3d:84:8b:f1:2d:b5:
         2a:6d:18:70:02:41:db:fe:23:0b:37:e1:59:66:4e:55:ac:9b:
         5c:bb:06:92:c5:57:49:7d:c8:d2:04:eb:28:1d:e8:22:d9:fc:
         38:44:f9:35:7e:f3:7a:76:cd:1c:cf:fb:8f:68:43:6b:89:ee:
         67:55:57:ef:26:6b:7f:20:6a:ee:c3:bf:c3:00:25:c2:37:aa:
         cb:43:5f:e1:14:2e:c5:24:71:13:f6:02:f6:f1:d6:86:cb:e9:
         8b:0f:e0:0e:62:9d:77:4b:7c:ce:08:51:04:71:7a:b0:df:79:
         21:88:28:b8:bb:ea:5e:8d:f0:b1:8c:c0:04:f4:a6:be:40:8d:
         e4:a0:1a:1a:88:05:34:0b:1e:ba:e6:6f:bf:37:30:e7:b5:a6:
         ed:89:11:c5:4c:ba:d3:85:c4:20:8e:55:f2:6f:8a:df:d9:d5:
         da:ac:ed:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:49 2024 by rpki-client on console-fra.rpki-client.org