Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1302ecb-36d7-3d16-bd61-7811a4fceca9.roa
File:                     f1302ecb-36d7-3d16-bd61-7811a4fceca9.roa (raw, json)
Hash identifier:          GyHluRlKEzjQ0vfG7sXw+TguCvEUxMQpEqFyzNrJsp4=
Subject key identifier:   DE:DF:55:56:D2:05:A9:78:42:C2:34:1A:64:46:C4:C6:2B:E3:83:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858477EBCC034EC90BE80053327C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1302ecb-36d7-3d16-bd61-7811a4fceca9.roa
Signing time:             Thu 10 Oct 2024 12:52:07 +0000
ROA not before:           Thu 10 Oct 2024 12:52:07 +0000
ROA not after:            Wed 08 Jan 2025 13:52:07 +0000
asID:                     19836
IP address blocks:        192.42.176.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:bc:c0:34:ec:90:be:80:05:33:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 12:52:07 2024 GMT
            Not After : Jan  8 13:52:07 2025 GMT
        Subject: CN=c456e22c-c60f-4405-a0d9-970d874f26e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7d:c4:55:b3:8a:e9:21:ef:38:8a:a7:95:b4:
                    a2:52:0c:cd:34:36:30:7f:e5:68:71:e0:72:2b:ec:
                    1a:60:18:06:df:24:cb:ab:f3:d1:54:0f:ba:3c:b2:
                    8f:28:09:ad:de:d4:0f:ec:a0:da:08:4b:b0:d0:1a:
                    a9:45:45:5d:86:50:dc:91:4f:a2:93:a3:88:60:92:
                    54:79:73:20:fb:9e:b5:56:fa:14:1a:d3:14:3b:05:
                    da:02:41:74:52:78:31:1f:9d:50:25:d7:db:ac:39:
                    c7:3b:87:77:8a:cf:9b:ce:52:a7:f6:d1:c0:0f:8b:
                    35:f3:09:c0:fc:a5:78:36:c0:48:08:89:58:3e:8c:
                    0c:e5:bb:59:f7:2b:29:59:dc:2f:54:6e:9f:f1:ab:
                    e2:e1:76:e9:fb:46:a6:df:e6:45:74:d9:db:fb:80:
                    3b:dc:4c:68:bf:e3:cc:75:75:c9:b3:cd:fc:a0:24:
                    3e:f8:3a:31:6a:5e:3e:d4:17:27:25:95:9e:11:37:
                    91:6a:de:42:5d:79:8b:8b:08:0b:32:b7:bc:91:f0:
                    17:41:6a:ec:c7:7b:d8:6c:2f:f8:b3:58:54:4a:e0:
                    e8:f3:48:d9:f2:b0:99:43:1b:92:32:4b:63:da:04:
                    16:75:c2:a2:6e:62:5b:30:59:ac:69:c6:2e:68:d8:
                    44:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DF:55:56:D2:05:A9:78:42:C2:34:1A:64:46:C4:C6:2B:E3:83:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1302ecb-36d7-3d16-bd61-7811a4fceca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:f2:36:10:7f:3b:e6:62:a6:f6:72:1c:bf:89:d7:ad:d7:f6:
         46:37:10:d0:bf:60:53:9f:4b:6f:06:10:29:52:8e:cc:03:53:
         55:58:1c:ff:cb:cb:ee:ba:58:b7:cc:ed:7a:b2:6e:c8:71:c4:
         4a:98:b6:c1:7d:e8:b9:f0:43:e0:e5:b6:6e:fc:2f:92:37:82:
         d4:53:a8:d0:f8:08:43:c5:0b:7b:1c:62:58:30:40:fd:57:eb:
         51:69:eb:44:78:22:26:c1:47:0c:01:2f:b2:99:29:d3:fc:f2:
         2d:99:ea:01:de:f3:ff:71:e3:95:2b:6e:2c:fb:b8:30:7a:08:
         00:c3:95:36:c7:3e:e0:7c:c4:4f:81:3b:e1:20:aa:03:36:f8:
         89:12:0f:19:b0:c9:a9:55:7e:06:fb:d6:9c:fe:7a:13:c3:94:
         ad:39:31:a1:83:63:1b:26:f8:22:1e:96:4b:ae:a9:d8:e1:40:
         5b:4f:1e:c9:8a:d1:a5:e3:61:bd:4c:c0:0c:8a:8c:49:7a:61:
         82:3e:8a:83:ec:c3:a8:41:b2:07:99:ab:35:35:ed:09:53:ab:
         eb:93:ae:34:64:39:f3:43:d8:cd:61:fc:6b:c1:80:52:a2:8d:
         19:98:aa:d5:aa:de:df:23:30:e5:cc:4a:8e:a9:6e:92:d9:bd:
         19:90:2c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:52 2024 by rpki-client on console-fra.rpki-client.org