Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e985f9a7-dd03-32a9-9e98-a0c6df73365a.roa
File:                     e985f9a7-dd03-32a9-9e98-a0c6df73365a.roa (raw, json)
Hash identifier:          8XvZYrYAUVuhm7i2TGyIk5tDGYrfUZEkEORAYzEZBB8=
Subject key identifier:   72:B2:86:DA:55:EB:A6:06:FE:60:C8:34:D3:B9:6E:68:CA:59:50:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847951680DE24E96D1AFE65A440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e985f9a7-dd03-32a9-9e98-a0c6df73365a.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     36619
IP address blocks:        192.153.247.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:80:de:24:e9:6d:1a:fe:65:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=07bb63b9-0f3a-4f7f-84b5-90b9f011be38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:7a:6a:69:f7:38:82:d0:f8:21:13:34:16:
                    6a:1c:42:63:49:d5:17:47:5f:15:e5:b7:16:52:27:
                    5e:12:17:04:3d:48:db:8f:b4:33:f3:d3:e1:6e:39:
                    ac:79:c0:0a:7c:09:19:53:a6:ce:ea:79:71:04:a5:
                    34:09:ec:8e:9e:64:11:45:54:12:bd:ff:25:85:f8:
                    98:28:ca:db:fe:e6:fb:85:22:b9:02:ab:33:4f:0f:
                    f4:6e:c3:1f:42:f3:23:9a:15:ee:f7:79:c6:d4:d0:
                    05:33:dc:68:d8:6f:0f:af:29:46:89:99:0b:81:eb:
                    f1:5a:f7:ad:34:ab:0c:be:09:42:f1:37:64:72:b2:
                    84:cf:d2:51:27:a9:f4:9c:49:b4:cc:bf:b3:12:65:
                    3d:b8:d8:2c:b7:95:ea:fa:e4:cc:e7:2b:6d:03:e5:
                    8f:d8:5b:68:5c:46:4c:f1:fb:4e:a6:6b:6a:35:fd:
                    5d:08:ab:1c:f8:09:5f:d9:30:5c:39:20:7c:6f:ad:
                    dc:19:80:d5:db:97:72:62:4f:40:d7:97:1d:40:2a:
                    90:45:c0:9b:02:8b:dc:1b:88:3b:36:14:5b:3f:c8:
                    62:09:03:99:60:74:8f:7b:4b:73:64:21:cc:9d:19:
                    30:ad:6b:9f:00:cc:ad:4c:ac:5e:a2:1a:52:bf:1c:
                    8f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B2:86:DA:55:EB:A6:06:FE:60:C8:34:D3:B9:6E:68:CA:59:50:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e985f9a7-dd03-32a9-9e98-a0c6df73365a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:3c:6a:23:e7:94:6d:0d:a7:dc:71:2b:df:2d:fd:c9:67:c7:
         86:0d:01:54:3a:f8:d7:72:a8:14:9a:63:22:10:38:f8:24:af:
         f8:2b:23:8b:cc:c8:f9:ed:71:5e:2d:2d:3d:39:21:99:66:77:
         1c:44:20:bb:57:3c:9b:8d:9b:69:26:4c:d7:8a:78:5b:db:d2:
         44:68:1a:8e:5c:53:c9:c8:3f:30:fa:6c:46:ba:48:c1:c9:40:
         96:22:2d:c3:4f:7b:35:3a:ce:40:db:f7:67:b8:77:80:d5:cc:
         09:9e:9e:13:6f:9d:1f:cd:dc:64:c2:f4:53:e3:80:4a:88:fc:
         ce:62:2f:c7:f7:3e:67:68:c4:22:ce:ec:74:6d:48:f3:6c:de:
         7a:dd:fa:f2:7b:b7:27:71:35:ed:d4:83:06:38:20:22:ec:af:
         9f:f4:4e:ae:0e:8f:74:ab:e2:ff:2f:5a:25:bd:2b:c9:e2:dc:
         25:5a:6e:23:89:86:16:f5:c4:88:b7:79:f1:01:63:cc:cc:79:
         aa:e7:5e:a8:8a:fd:cc:c1:dd:e0:ee:02:4c:d2:c2:c5:76:91:
         28:2e:30:58:61:ea:8f:d9:f0:02:e3:5e:fd:20:d9:6b:29:a7:
         08:35:ea:ab:5c:d6:80:f4:3e:4f:d4:4f:f7:73:bb:e7:35:00:
         32:38:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:18 2024 by rpki-client on console-ams.rpki-client.org