Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f517d2ec-02ba-3b28-b09e-b2d5b54888b3.roa
File:                     f517d2ec-02ba-3b28-b09e-b2d5b54888b3.roa (raw, json)
Hash identifier:          YzHcXFJ14wBddz362wYLoSh6qrryxMozrmHsmaIAlis=
Subject key identifier:   B6:36:64:09:CC:60:CE:DD:37:73:31:4C:7C:C9:83:89:30:49:7B:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D14475E3F18DE6CACB4B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f517d2ec-02ba-3b28-b09e-b2d5b54888b3.roa
Signing time:             Thu 24 Oct 2024 12:49:58 +0000
ROA not before:           Thu 24 Oct 2024 12:49:58 +0000
ROA not after:            Wed 22 Jan 2025 13:49:58 +0000
asID:                     397203
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:44:75:e3:f1:8d:e6:ca:cb:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:49:58 2024 GMT
            Not After : Jan 22 13:49:58 2025 GMT
        Subject: CN=bff3e4cb-59d9-4ec8-ac7b-962b6d27f07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4d:be:54:4f:4f:90:e6:95:4a:43:5f:3f:8a:
                    bb:9d:cb:b2:fd:81:05:97:9b:6b:96:9d:20:b5:fd:
                    da:47:c0:51:06:e9:a3:ee:bf:db:c4:0d:93:12:53:
                    c4:aa:ba:00:c5:ff:c8:2e:56:d9:e3:a5:82:66:9f:
                    1f:52:07:99:6f:3e:18:37:32:b6:71:f2:82:42:38:
                    a9:70:0a:10:10:72:1c:36:59:29:c7:f8:cb:e5:09:
                    9e:13:84:11:f4:83:55:90:e1:b6:17:ba:6e:c9:ad:
                    2c:f3:a3:1c:46:30:15:04:07:47:ad:a3:c7:fe:56:
                    66:49:df:83:f3:13:25:67:3a:ef:c6:98:74:1b:57:
                    40:64:f0:ca:58:c8:6b:27:5c:d4:7f:14:78:a9:5e:
                    4b:ba:19:ab:71:52:95:52:e1:27:b5:81:24:93:26:
                    23:dc:c2:85:84:5a:a8:9e:2d:43:da:76:9f:7d:92:
                    bb:72:14:2b:6c:4c:f2:10:ef:62:d3:20:d8:82:a6:
                    50:42:58:96:0c:8d:b3:1c:50:7f:10:44:15:f5:3c:
                    43:a2:5b:5e:5d:02:b0:50:b4:33:4b:2e:72:07:d9:
                    fb:7c:d7:46:8e:cf:bd:54:a3:eb:2a:02:0a:33:2c:
                    9d:ba:1d:40:74:74:e1:ca:ad:31:4b:30:49:1d:2c:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:36:64:09:CC:60:CE:DD:37:73:31:4C:7C:C9:83:89:30:49:7B:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f517d2ec-02ba-3b28-b09e-b2d5b54888b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:05:ba:e5:0a:0d:8a:6b:17:ff:1f:30:42:8b:ef:1a:6b:8a:
         ed:e9:27:60:3d:fa:8a:e6:f3:15:56:ed:e3:30:ef:d4:a6:56:
         0f:00:e7:1a:54:c4:f5:84:f1:3c:ae:f7:c6:db:7e:44:05:3a:
         4e:d4:60:49:b5:3c:f8:53:73:33:25:8a:23:37:e9:c2:8e:06:
         8c:c1:4c:45:2a:62:c5:72:76:5d:5a:e8:e2:76:5c:fc:64:ff:
         fd:b9:c3:ea:4c:82:49:a7:cd:87:c1:38:20:e7:3a:f3:34:a9:
         bc:e5:f5:15:44:73:00:af:4f:96:a4:b8:bd:01:76:7b:e3:f1:
         d7:84:2b:54:0c:27:99:d4:33:7f:78:e4:00:a1:66:32:26:8a:
         71:a0:c7:1e:4f:44:77:b3:55:6a:bc:c4:66:fc:a0:9f:23:36:
         fd:85:d9:82:1e:db:57:c6:81:98:48:eb:f8:aa:ee:0a:20:52:
         a7:83:16:20:56:a2:22:6a:cd:b5:ae:39:b1:a0:cb:be:b1:e8:
         27:d1:f7:15:45:ef:d5:50:53:c9:84:08:70:39:7b:87:19:db:
         de:86:86:23:5d:57:e2:92:67:ed:0d:d3:47:0d:a2:9f:1e:4a:
         c0:bd:1e:ed:63:a8:94:1d:fe:ba:28:a8:f1:90:ce:21:26:cf:
         70:00:e6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:52 2024 by rpki-client on console-fra.rpki-client.org