Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5dc9fb5-cfa5-3f94-936f-cb0e9cb3cc8a.roa
File:                     e5dc9fb5-cfa5-3f94-936f-cb0e9cb3cc8a.roa (raw, json)
Hash identifier:          NrY9oqQcbQiYv+guWcWEbVpUTaEWTfvXdpbn42pKDbE=
Subject key identifier:   EF:EF:84:62:6A:46:4D:7B:DD:F0:2B:80:5F:60:01:21:D2:B8:C4:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B3EDBF1B4598A210D9FB0E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5dc9fb5-cfa5-3f94-936f-cb0e9cb3cc8a.roa
Signing time:             Tue 29 Oct 2024 14:08:40 +0000
ROA not before:           Tue 29 Oct 2024 14:08:40 +0000
ROA not after:            Mon 27 Jan 2025 15:08:40 +0000
asID:                     396585
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:ed:bf:1b:45:98:a2:10:d9:fb:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 14:08:40 2024 GMT
            Not After : Jan 27 15:08:40 2025 GMT
        Subject: CN=83a125d0-8640-4b18-949d-2af634565745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:2a:e7:2a:fb:a0:46:85:37:c2:eb:a4:c4:
                    db:2c:c4:99:f8:6a:f9:d3:8c:1a:ce:df:65:72:fa:
                    1b:8b:16:54:ca:5e:3b:0a:c9:6f:39:2e:2e:88:a9:
                    31:cd:79:e6:82:09:b6:92:ff:83:49:8d:12:1d:fd:
                    93:6f:b6:31:22:73:ef:60:57:05:3b:ac:7c:b8:da:
                    64:ee:9c:5a:4b:5e:a8:55:9c:a4:40:fd:5c:38:c9:
                    f8:bd:ac:05:49:0f:e7:80:6a:08:f0:be:64:ce:6f:
                    8e:56:85:f3:90:6b:55:4f:e4:12:52:a0:9e:10:38:
                    ff:7f:25:f6:3e:89:8e:45:56:18:ef:52:d2:97:20:
                    40:c4:0e:50:fc:83:f3:2e:28:56:b9:e6:61:39:26:
                    98:4b:14:fd:8a:54:a9:5f:52:f9:df:21:84:85:48:
                    b9:45:01:b1:62:03:17:d7:d7:e9:98:75:01:53:ac:
                    8b:36:34:4c:9c:7e:58:f5:96:2d:d3:c4:26:c1:40:
                    19:f4:9f:2d:15:21:0c:ba:9d:e1:86:65:12:ff:57:
                    0a:09:05:6b:32:8e:f3:b8:62:a0:93:85:3d:4b:5a:
                    99:f0:8f:5b:1c:22:69:1b:0b:1f:5d:de:e4:56:90:
                    92:07:f7:99:63:f7:ec:f7:9c:04:3e:3c:5e:7f:9e:
                    de:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EF:84:62:6A:46:4D:7B:DD:F0:2B:80:5F:60:01:21:D2:B8:C4:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5dc9fb5-cfa5-3f94-936f-cb0e9cb3cc8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:1c:3f:05:ec:43:87:29:a3:4a:3f:d9:09:ef:48:11:19:c7:
         4d:c5:b5:c9:ac:e7:ee:24:90:ec:8b:92:54:95:35:b3:85:94:
         bd:34:8f:4d:dc:b6:0e:45:b8:88:8f:af:9a:fb:57:81:dd:ae:
         44:73:e0:69:28:50:23:c8:2a:89:22:23:c1:5d:72:01:bc:2e:
         39:00:ff:35:98:23:3f:a4:81:23:f8:d3:17:d3:4f:11:16:14:
         34:3b:1f:54:fc:cb:8f:de:0e:02:0a:82:04:5e:63:fe:15:36:
         b6:86:a5:54:9f:c2:2c:60:a3:7c:6d:19:21:14:b1:ea:5e:33:
         b1:20:53:b1:44:ba:85:71:5a:e7:e4:89:7e:5d:cd:12:74:ec:
         6b:e7:b2:04:c6:8c:d1:6e:ca:08:18:48:25:6c:af:72:72:d1:
         4d:50:8a:5f:2a:c9:9b:b7:b7:3b:02:e2:bc:43:bc:ff:b3:fd:
         d5:79:13:bf:ca:fd:65:38:3f:0f:a1:99:e7:00:95:ba:d5:a0:
         0f:b2:dd:9d:d7:cb:a8:18:be:a0:62:50:82:31:05:17:43:26:
         7f:06:25:28:9c:1d:ea:cb:d9:73:f9:d0:8e:53:44:82:fd:0f:
         15:51:54:1d:65:d1:de:85:c2:f2:0c:3f:93:3c:6e:82:3c:74:
         19:32:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:17 2024 by rpki-client on console-ams.rpki-client.org