Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa
File:                     f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa (raw, json)
Hash identifier:          38yiF0/OjxWaDvyhdqNdze8+xE4+oDsHOWlCe8WWEiI=
Subject key identifier:   D8:FE:87:DA:4E:AB:EA:51:48:E3:7A:D1:2A:B7:08:E5:5A:42:45:CC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C1CAD1D54568876EAD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     396603
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c1:ca:d1:d5:45:68:87:6e:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=200f8fd1-4316-4cd6-af73-2b23c867fa52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:e1:bb:01:28:27:8b:bd:3f:b9:7e:59:40:
                    b2:e8:12:99:af:de:75:bd:5c:83:06:7d:ae:42:37:
                    07:64:73:60:be:be:ae:3b:f7:27:75:0e:db:37:ae:
                    58:9a:bd:6e:8a:48:f9:db:5c:fe:33:42:ce:56:93:
                    e2:f7:36:07:2e:1d:4d:53:0b:28:44:bd:1c:7d:34:
                    0e:46:dc:2d:94:0c:35:7b:e9:c3:49:b4:51:4c:d2:
                    19:8e:9a:f7:00:3d:2b:5e:a8:c5:44:dd:69:a1:55:
                    1c:ab:75:a1:8f:c3:0b:7f:a2:bd:5a:5e:72:b6:8a:
                    f6:c5:fd:22:b6:c1:ca:72:68:aa:85:44:0a:1e:30:
                    a4:43:7e:6b:15:c0:17:5c:20:9a:1c:8a:54:b1:12:
                    3b:08:b0:09:72:a8:62:f7:87:7c:03:7f:d7:44:fa:
                    eb:f5:21:b2:68:16:c7:fa:f4:ce:a8:25:14:10:d3:
                    65:4f:98:96:1d:b8:82:b5:57:bf:87:89:02:64:5a:
                    76:b2:72:91:02:f7:28:ef:af:78:67:46:2c:4a:33:
                    e3:79:c8:37:81:f6:03:dd:26:a9:2f:9d:ce:33:71:
                    52:83:28:23:35:9d:b8:a9:86:e5:9a:bb:88:ec:39:
                    0a:a3:12:12:5b:bd:1f:52:ad:e5:2d:44:fa:44:de:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FE:87:DA:4E:AB:EA:51:48:E3:7A:D1:2A:B7:08:E5:5A:42:45:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:2e:35:1b:a5:68:41:f1:95:df:2f:83:d7:de:87:04:2d:f0:
         66:de:ad:2d:1b:15:79:72:b5:c4:b8:63:d7:d8:47:d8:19:19:
         4b:e5:a1:d2:52:ba:06:0a:3a:fc:cf:98:69:69:ab:b8:fe:5a:
         d9:ac:b7:b7:1e:00:0c:4d:1e:3a:9b:7d:95:15:8a:fb:f7:cc:
         2e:3b:4e:05:53:09:86:fe:ce:f6:d7:a4:64:46:85:e9:50:9e:
         ae:e4:77:77:9a:ef:d6:f7:99:d3:f0:44:8b:fe:5b:42:7d:5a:
         77:1c:b4:6c:45:14:08:02:15:99:a1:4b:87:fb:41:70:8a:f2:
         49:24:91:d3:44:9f:1d:61:38:4e:fc:55:97:06:7d:70:4b:bd:
         fe:ab:8b:e0:02:f3:b7:5e:79:18:1f:21:24:5b:25:c4:93:92:
         fe:52:22:bd:65:0b:23:74:81:dc:93:3f:01:88:0f:97:89:c0:
         25:c4:2f:c5:2a:6d:ec:2c:37:98:9c:82:b8:0d:b7:ec:f2:e4:
         85:cf:b2:08:7d:56:13:1c:2f:8d:cc:0f:3d:b5:36:f5:42:c0:
         e3:68:8e:56:6c:94:bb:af:c1:25:3c:e9:f2:7f:c7:6f:b5:4f:
         45:a0:68:b6:63:ad:53:cc:b1:c7:8a:92:88:68:d3:6a:55:06:
         d7:57:cf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:19 2024 by rpki-client on console-ams.rpki-client.org