Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f345904e-e6b2-363e-b245-43354e58ea03.roa
File:                     f345904e-e6b2-363e-b245-43354e58ea03.roa (raw, json)
Hash identifier:          iK86FLe/3ArQuRGwM2+swuzgGsXaXPmaNV/Sy2ClKAg=
Subject key identifier:   FD:EB:5D:4F:55:52:F2:F6:C2:2A:B9:8E:76:96:C9:F9:05:4E:53:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D13E2926E5659E642F6300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f345904e-e6b2-363e-b245-43354e58ea03.roa
Signing time:             Thu 24 Oct 2024 12:49:56 +0000
ROA not before:           Thu 24 Oct 2024 12:49:56 +0000
ROA not after:            Wed 22 Jan 2025 13:49:56 +0000
asID:                     397193
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:3e:29:26:e5:65:9e:64:2f:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:49:56 2024 GMT
            Not After : Jan 22 13:49:56 2025 GMT
        Subject: CN=baef001a-c4c0-48aa-8c38-fb038d69f5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:e8:d8:90:23:bd:28:6b:5c:aa:3a:43:64:
                    ad:8c:e7:9d:e6:f1:ba:fe:32:b9:07:32:f3:b1:a4:
                    7c:93:5e:39:f9:9f:7b:8d:94:a5:bf:64:6b:36:45:
                    49:5c:06:28:e8:1b:89:f6:bc:1d:c4:a3:09:29:cd:
                    69:1f:33:2c:6e:bd:15:9d:64:e0:ec:e2:94:c5:e3:
                    3e:04:31:ce:03:6a:96:c9:78:d3:d5:2b:c4:73:d3:
                    28:d0:b4:65:47:ea:c9:a6:b3:df:29:f8:c8:0a:84:
                    ec:68:46:6c:79:56:ea:70:b3:87:2e:2e:b4:3e:bb:
                    4d:70:8b:b9:54:a0:f6:71:e6:61:bd:15:a0:5a:8b:
                    7c:17:6b:84:f9:1e:c1:51:ba:c1:fb:2c:91:fa:52:
                    da:d7:70:74:e7:02:25:a8:bd:77:77:24:cd:8c:39:
                    3f:af:b7:d3:60:98:1d:c8:02:31:d5:cf:f6:ee:ab:
                    a4:62:c5:7b:68:2e:54:05:a1:16:69:b2:49:d5:a1:
                    c6:81:1d:5a:bf:ce:3f:d5:ec:ac:8f:a9:c6:d9:59:
                    89:a0:cc:93:72:68:90:0a:fa:dd:50:92:5a:a3:19:
                    8c:ff:20:ee:8a:dd:8d:64:ec:f3:30:d4:9f:43:8c:
                    f0:84:d4:8e:a7:7b:bd:67:28:ab:b0:5f:cc:21:0b:
                    e1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EB:5D:4F:55:52:F2:F6:C2:2A:B9:8E:76:96:C9:F9:05:4E:53:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f345904e-e6b2-363e-b245-43354e58ea03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:1d:4f:32:86:69:21:d4:4b:73:22:62:d6:3e:0c:03:4a:ab:
         fd:f3:94:31:76:a4:7d:ec:7c:04:a1:33:56:4f:e5:14:30:00:
         45:4e:b6:8b:eb:5f:16:6a:9e:ac:7f:06:1c:02:ad:22:58:13:
         35:75:4d:60:74:16:66:8a:9c:aa:21:64:07:de:90:0c:fa:38:
         c3:b2:84:a4:96:ed:3d:7e:43:7c:87:46:8a:a0:de:44:5d:78:
         f3:74:e9:15:b9:c6:d7:98:7b:d9:0b:ab:ae:d8:44:e4:24:9d:
         00:78:ea:17:25:95:10:de:e9:af:66:3b:68:8b:a9:fb:3f:9d:
         9b:ab:c7:95:19:52:e1:70:a3:48:f7:91:eb:21:07:fe:cf:ce:
         34:d4:2e:de:78:7c:9b:2d:5d:ee:f8:7d:36:8e:1c:ab:34:41:
         5c:e7:c4:31:f2:37:1b:b7:c6:67:c9:32:cf:11:46:9d:cc:ca:
         41:a9:77:61:da:3c:7e:bd:30:80:5b:73:77:24:90:e5:f4:ba:
         c5:41:43:38:c2:19:5c:d1:cb:83:74:f9:7c:36:9e:d3:84:c4:
         93:60:6e:4f:ce:15:cc:a0:c2:e2:33:aa:3f:2f:a3:cf:3d:0a:
         77:a7:6f:9d:64:3e:83:b2:37:cc:b0:76:ea:52:b5:e8:10:02:
         83:9f:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:52 2024 by rpki-client on console-fra.rpki-client.org