Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e86e15a2-6f9d-3454-84a2-e0b3f7f5b64d.roa
File:                     e86e15a2-6f9d-3454-84a2-e0b3f7f5b64d.roa (raw, json)
Hash identifier:          4QbiESoM3Wr6o02EkrCECs1gMmWElkQ1kr39B3gAR5g=
Subject key identifier:   F7:6C:5E:70:DE:24:F6:35:0A:2C:D4:25:B3:C6:8C:9A:3D:04:F7:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CFD4D236B3CAA2039E581500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e86e15a2-6f9d-3454-84a2-e0b3f7f5b64d.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     396558
IP address blocks:        192.81.185.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d2:36:b3:ca:a2:03:9e:58:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=ce4d1bcf-18e9-42fa-ad33-5499eead72d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:99:91:2a:d7:3a:b5:0f:d7:42:49:15:89:f1:
                    19:f5:f1:dc:05:5a:d9:04:78:a1:10:cc:b1:31:53:
                    98:ce:e6:d2:8c:a4:c4:73:be:91:cc:6e:21:76:b5:
                    f9:df:8c:58:f8:36:e9:d7:cb:4a:7d:99:98:93:e5:
                    07:72:78:b0:55:57:e2:bb:d3:56:a9:7b:40:85:8c:
                    3d:ed:fd:67:b1:83:ee:d0:a7:d7:2c:54:79:81:ae:
                    d7:bd:40:c9:a8:34:ac:fb:0f:23:7d:5d:44:ed:66:
                    0c:f3:b4:5c:b4:03:e3:17:74:93:81:7e:36:38:b0:
                    33:9a:52:ea:c7:2d:c5:68:01:bc:65:96:8a:47:6b:
                    e0:01:e8:41:e5:43:51:c4:3e:b5:5e:7a:4e:01:d2:
                    39:93:db:c0:62:10:7c:29:10:25:70:38:4e:dc:ab:
                    be:4b:fe:db:3e:11:2e:65:6c:e0:fd:b3:d8:46:75:
                    eb:d9:d5:ed:58:e8:58:fe:3b:2d:32:1a:d0:ec:30:
                    08:25:e1:d9:82:f4:42:ba:43:56:b3:c9:b0:23:17:
                    6f:7a:cc:7c:42:11:57:ed:77:28:a1:14:b4:3a:30:
                    50:a4:64:10:b0:03:54:a7:8b:cd:b9:f2:da:a6:66:
                    97:eb:50:df:f0:2f:d0:80:3d:fe:6a:cd:9c:25:44:
                    da:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6C:5E:70:DE:24:F6:35:0A:2C:D4:25:B3:C6:8C:9A:3D:04:F7:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e86e15a2-6f9d-3454-84a2-e0b3f7f5b64d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:31:c9:9e:db:cd:34:23:68:0e:d4:f1:98:0c:a1:2d:0a:aa:
         4b:2b:1b:7d:d1:93:b9:03:01:fe:06:b7:f6:f1:c3:17:b8:ed:
         e2:68:22:86:b1:63:16:ff:cf:74:e3:1f:9d:b3:95:71:2a:97:
         e7:a5:bb:5e:d2:cd:e2:99:b8:65:f2:87:7c:00:35:89:02:ab:
         55:22:b4:14:ca:2a:a6:db:20:7e:d5:dd:be:fa:49:e0:d3:69:
         98:33:8f:09:3c:7d:c2:eb:c5:95:ff:7d:2f:10:f7:2f:4b:ee:
         b9:3a:1a:ef:a5:9b:86:52:d3:4e:6a:59:ae:f9:76:0a:c5:67:
         59:1a:c4:23:47:2f:1e:59:63:7c:fe:2b:28:7a:d4:9b:3b:86:
         c9:97:62:3b:79:ee:7a:47:5c:9a:58:6c:db:2b:ae:2d:e0:0f:
         43:b5:67:53:52:6b:62:f6:93:64:34:80:21:0a:9b:58:ee:58:
         99:1c:85:e6:27:80:40:9f:5f:bb:f9:09:71:e8:0c:f5:5c:7a:
         5b:cb:42:e4:52:6f:0e:46:b8:ca:3d:df:f8:8f:68:54:22:cb:
         9f:df:51:f4:94:7b:e6:fa:85:75:26:66:31:13:09:d6:38:7a:
         41:e8:11:cd:bd:de:61:84:07:08:a6:6b:f0:9f:ae:39:6c:fc:
         b3:9f:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:18 2024 by rpki-client on console-ams.rpki-client.org