Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e75a5d43-ae1f-34d1-a13b-54d389f55b5d.roa
File:                     e75a5d43-ae1f-34d1-a13b-54d389f55b5d.roa (raw, json)
Hash identifier:          axNKqmEJ+w/cCIDKBgt9JcvR0omaPQ+HzgXBum3KJGE=
Subject key identifier:   49:6D:E8:7E:BE:B7:6E:79:30:7B:B2:E5:1B:CC:58:7D:E6:6D:6B:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A20D3476D0FC5F0B1AFF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e75a5d43-ae1f-34d1-a13b-54d389f55b5d.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     397204
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:20:d3:47:6d:0f:c5:f0:b1:af:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=b4d74f70-1096-4e09-a42a-327fbe29528b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:93:c0:0a:54:04:f9:f3:b6:5f:86:b9:b0:
                    04:b0:8b:66:22:0c:89:fc:f7:df:e2:bb:7a:ee:62:
                    d7:9c:97:90:0f:6a:e7:d9:9e:d5:38:3c:5c:09:72:
                    df:21:12:bc:6c:22:47:f8:b7:a2:b9:98:c0:ad:b2:
                    99:3d:c3:5c:4d:c0:f0:c6:1e:b2:1f:09:84:a1:9e:
                    70:e4:8a:97:95:ec:a7:b4:17:ac:77:f0:1e:08:f7:
                    2f:e1:aa:3c:17:d6:5b:57:a2:d0:5e:f9:9c:6c:e9:
                    b6:8d:17:2a:c0:24:b0:e2:cd:3b:c5:23:34:5f:4e:
                    ec:6b:d6:b7:07:0f:6e:44:b4:4f:e2:7b:16:43:55:
                    3b:47:ce:60:23:91:63:3f:21:c6:94:04:c5:e3:77:
                    0e:13:0e:7a:c7:d5:5c:ec:19:c4:f1:f4:4a:ee:08:
                    dd:bc:b4:d8:ac:39:e4:10:af:4d:1d:86:c4:e5:e4:
                    2d:d9:50:a3:fa:fb:e2:2e:ee:ef:3c:c8:a5:8a:f9:
                    d4:06:fa:0b:d5:9c:d0:d0:6c:30:a2:9a:7a:e7:df:
                    98:bc:73:5b:0d:c3:55:1d:75:19:43:03:a2:e1:b1:
                    09:5c:dd:83:75:d7:58:d6:ee:cf:f5:24:1e:92:6a:
                    d9:40:0f:29:ff:47:d6:44:90:b4:ff:f7:9c:08:80:
                    08:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6D:E8:7E:BE:B7:6E:79:30:7B:B2:E5:1B:CC:58:7D:E6:6D:6B:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e75a5d43-ae1f-34d1-a13b-54d389f55b5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:11:18:75:4e:73:3b:8b:0e:1a:4e:3c:66:b6:0b:92:95:1f:
         40:ac:f7:09:7f:03:c3:af:bc:84:d3:fa:b4:56:68:70:19:32:
         57:df:32:41:66:d2:0b:85:e1:ec:9b:80:5d:95:b3:d5:13:75:
         55:90:22:ed:f3:d8:c5:d9:97:31:c4:fd:70:55:c7:86:28:1b:
         f6:1d:e0:e3:32:86:6b:3b:50:a4:e5:1d:2a:6c:ce:03:dd:e8:
         80:b5:7e:39:c1:fc:92:bd:e8:09:b4:32:db:92:a2:ac:e1:f2:
         8f:69:5c:c9:d7:ce:72:99:ee:61:06:9b:a4:32:6f:fe:40:69:
         bb:39:26:e2:45:fb:cf:c4:1c:43:44:73:f7:ca:b2:a8:fe:30:
         93:3d:7b:62:a4:ec:82:28:b1:b4:9c:e8:ab:69:08:aa:ff:8c:
         8e:78:d1:84:84:85:41:99:82:c6:38:5b:6a:42:d6:44:9c:42:
         ec:47:c3:32:47:08:99:12:31:3e:43:43:fa:89:17:03:45:52:
         44:0f:32:d5:47:db:3a:b7:14:5d:78:14:2b:a3:02:5d:ff:af:
         b4:d9:8a:ca:2e:57:19:e2:54:ef:36:f6:01:fe:4b:95:fb:bf:
         91:94:76:47:ed:02:c2:7c:d8:f7:44:22:ee:7d:c1:7e:14:a2:
         27:9d:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:18 2024 by rpki-client on console-ams.rpki-client.org