Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0cf2a31-b8f0-3ca2-9219-490eca98f3ee.roa
File:                     f0cf2a31-b8f0-3ca2-9219-490eca98f3ee.roa (raw, json)
Hash identifier:          dmwK57q3CwIb/E4U77J+iErhmJ+/sUXN6ZslEB7p7c0=
Subject key identifier:   A7:73:CB:06:FE:1B:BC:B5:C5:87:AB:64:48:B5:99:6F:9D:69:2C:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584795167FEF16443281E948D000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0cf2a31-b8f0-3ca2-9219-490eca98f3ee.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     396568
IP address blocks:        192.153.247.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:7f:ef:16:44:32:81:e9:48:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=b69355e8-8ed6-4b18-89ef-8baed555de46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:03:6a:0d:18:53:a9:21:e9:8e:e8:32:4b:
                    3e:60:8c:40:48:65:24:ef:40:6e:7a:c4:a9:5c:ed:
                    53:bb:07:2d:44:b3:b2:cf:cb:ed:2d:ea:8b:5f:de:
                    1c:51:18:c1:b0:43:d4:55:7d:75:28:6c:65:24:f1:
                    b4:87:5c:bf:e5:ab:a7:56:67:db:83:59:43:22:81:
                    0a:d3:d1:4f:5c:58:f4:6a:8f:e4:c9:c7:ec:7e:7b:
                    2a:ed:dd:4f:db:78:da:c6:ef:3d:fa:66:8e:64:d8:
                    a4:7b:a4:d6:5d:92:58:37:80:38:5e:d2:43:4d:15:
                    14:21:f0:06:a7:11:56:f8:59:45:2f:10:26:fc:1c:
                    ed:9b:37:c0:18:4c:21:4a:e9:9d:6d:6a:c9:20:c6:
                    ed:d7:bf:ce:2d:7d:21:ae:61:26:f1:45:b5:cd:13:
                    7d:fa:5a:0d:bd:4d:9d:94:98:a4:8e:4e:48:cf:e1:
                    38:d2:83:05:c5:a7:34:53:44:5e:2e:66:27:86:05:
                    c3:8d:c4:70:4b:a8:f2:3a:ed:0f:83:ad:61:ea:33:
                    fa:ab:72:43:ba:3f:4b:97:f3:f1:4d:64:b0:f4:72:
                    a4:98:9e:5f:8a:a6:80:5e:7d:0a:06:a2:b6:4f:45:
                    0e:26:74:8f:fe:85:c8:34:4e:c9:61:8f:f5:2a:15:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:73:CB:06:FE:1B:BC:B5:C5:87:AB:64:48:B5:99:6F:9D:69:2C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0cf2a31-b8f0-3ca2-9219-490eca98f3ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:b7:b7:92:53:dd:6e:39:b5:a6:ea:b3:90:b4:90:e2:a1:47:
         87:1a:76:cd:78:1a:e3:07:78:5b:1a:af:75:d3:31:ff:69:86:
         df:b8:2a:48:d9:58:cc:93:51:7b:89:50:b2:91:02:90:08:66:
         75:09:f2:a5:be:8e:39:2e:db:46:fa:9a:a4:22:dc:a2:1e:e8:
         c1:60:cf:a9:ad:7b:cd:04:7a:98:b0:52:db:b0:6c:fa:98:5e:
         b1:ce:80:94:a2:56:67:c5:ce:e6:26:83:ef:91:c1:1a:e3:fe:
         e4:cd:58:b1:db:26:ef:45:29:00:7e:44:99:9a:7c:e3:5a:be:
         1a:64:0d:7d:d0:87:e1:02:62:2f:db:6b:03:95:8a:9c:bc:58:
         fb:8a:32:a9:a7:fd:3b:c9:2d:7b:fb:16:0b:37:12:2d:63:e5:
         02:9a:98:57:38:19:02:24:56:7a:18:b0:f8:65:27:3f:81:23:
         54:45:76:4f:49:0e:ef:8c:91:2e:17:16:ed:3a:8b:91:1c:50:
         f1:8e:bd:18:fe:72:9c:a6:3a:22:dc:3f:cb:b8:9a:55:16:ec:
         ef:0a:41:18:ed:eb:ef:87:cb:f8:ea:f5:5c:3e:ab:71:c1:12:
         46:55:1a:ef:0c:88:e6:9b:cf:26:43:7d:cb:83:88:39:76:af:
         d9:3d:8a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:19 2024 by rpki-client on console-ams.rpki-client.org