Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f44b7e37-d148-373b-9e27-ef3288bb1317.roa
File:                     f44b7e37-d148-373b-9e27-ef3288bb1317.roa (raw, json)
Hash identifier:          5boUab4RNOm4bcYK/lkhuU3YVh3cipWoYLvmGHoJsWY=
Subject key identifier:   24:7E:00:DC:ED:3D:29:E8:B1:6D:10:74:9E:32:6C:38:C9:CC:25:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858479516824ECEA1AF136CC05200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f44b7e37-d148-373b-9e27-ef3288bb1317.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     396555
IP address blocks:        192.153.247.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:82:4e:ce:a1:af:13:6c:c0:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=9fa45987-9918-4aa8-b5f3-cecc34c21320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:5a:44:2d:fa:a3:ed:f0:fa:3d:b8:8c:28:
                    59:d2:32:44:33:52:14:d3:6b:e3:99:78:38:6e:75:
                    b8:31:25:16:cc:42:9a:b4:b9:06:68:69:72:b8:1f:
                    b3:e3:49:19:8e:f1:51:8b:b3:47:38:e7:da:3a:1e:
                    0f:c7:07:8a:64:97:53:60:22:1c:be:72:23:87:f0:
                    e9:43:7b:fb:f0:40:0d:e4:17:80:39:b5:8d:35:00:
                    ab:61:8d:97:eb:8a:af:ba:c9:a5:6e:3e:53:61:f8:
                    15:19:5c:7c:38:91:bc:07:67:8a:82:2f:85:01:2a:
                    1b:9a:0a:3e:4d:19:c6:92:7b:bb:46:a9:ef:32:2e:
                    49:00:e2:17:95:ea:fa:a5:9f:7d:83:d4:cf:5e:bf:
                    71:a8:07:06:65:55:43:84:63:31:f3:9d:01:2a:9b:
                    49:da:16:f1:b7:54:49:e5:e0:6e:97:f3:da:d2:22:
                    3a:68:42:7c:ef:bf:24:45:5f:bd:22:79:e6:6a:99:
                    e4:e4:22:e4:8a:ea:0e:2c:20:18:ac:47:3a:ad:c0:
                    b8:16:71:cc:e6:85:2f:bd:84:61:9c:ee:1d:36:92:
                    53:b6:b9:a1:97:3a:fd:4f:e2:89:72:2a:c6:68:f9:
                    12:b3:b5:3b:54:2e:7f:f6:78:55:16:c6:57:60:39:
                    e4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7E:00:DC:ED:3D:29:E8:B1:6D:10:74:9E:32:6C:38:C9:CC:25:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f44b7e37-d148-373b-9e27-ef3288bb1317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:35:e3:e8:53:1b:27:a1:a1:3a:d7:80:d9:48:73:9f:4e:60:
         bf:32:4e:3b:98:56:fd:c5:21:35:ea:82:9a:32:f6:4a:0c:0f:
         bf:c0:09:42:0c:8f:bd:ed:7e:94:97:d5:c5:39:24:07:22:ec:
         00:d8:9f:1d:b8:a6:ef:e6:a4:63:2a:fd:c2:de:c4:26:72:d1:
         b4:3e:d6:ae:bc:17:bf:50:6c:a3:65:c1:9d:9c:4e:30:56:32:
         a5:8a:c4:07:bd:d4:9b:76:a4:b0:b1:e7:09:9d:c1:fb:5d:86:
         4b:bc:06:f3:5b:c2:a7:0b:6b:d7:e1:23:73:cf:28:67:9b:85:
         dd:c8:a2:2e:21:85:5f:ba:e9:bc:19:62:7e:c4:93:d4:28:a4:
         eb:64:fd:70:6c:e2:4c:1d:09:05:51:95:66:76:50:d1:87:9d:
         91:63:7f:7d:b4:85:71:1f:05:b8:e2:1c:1e:70:ee:1a:3f:f4:
         77:d5:15:6a:a6:bc:1f:ec:c6:93:8d:59:6e:7f:56:69:a7:f5:
         c7:89:89:8a:50:79:c4:f7:d6:c4:f8:0c:8c:5d:af:32:b1:62:
         07:ab:45:12:ec:58:78:16:4b:57:e5:71:5f:56:12:54:86:3b:
         dd:64:4c:f8:c9:df:6e:d7:39:97:fe:bf:2e:22:39:11:c5:d2:
         49:a4:c0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:52 2024 by rpki-client on console-fra.rpki-client.org