Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fce1a4a7-5949-33dc-80a4-4c8c4c2e747f.roa
File:                     fce1a4a7-5949-33dc-80a4-4c8c4c2e747f.roa (raw, json)
Hash identifier:          aa0nriDAvT2nv/5wOX6paRserZqRFIfJSI3Rs4YQR00=
Subject key identifier:   41:48:A4:D8:F5:3E:63:6D:A4:E2:ED:C5:5B:23:68:6C:B7:D5:FC:F3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B9871A01818BA5D2DF00AEF8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fce1a4a7-5949-33dc-80a4-4c8c4c2e747f.roa
Signing time:             Thu 31 Oct 2024 14:16:42 +0000
ROA not before:           Thu 31 Oct 2024 14:16:42 +0000
ROA not after:            Wed 29 Jan 2025 15:16:42 +0000
asID:                     396602
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:87:1a:01:81:8b:a5:d2:df:00:ae:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 31 14:16:42 2024 GMT
            Not After : Jan 29 15:16:42 2025 GMT
        Subject: CN=1b3df8f9-104d-465b-a949-55d005c8ae53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:c5:70:29:49:44:5a:75:a2:1e:6f:ce:af:
                    f3:44:f0:5a:48:9e:0e:80:3b:10:c0:fa:0e:3a:4b:
                    f7:66:cf:e2:f2:d1:d0:52:4c:ab:58:6f:ad:ff:4b:
                    db:55:32:a8:86:09:25:01:3b:22:6c:d3:36:0e:43:
                    1a:17:97:14:5f:a6:60:f4:37:20:40:da:da:d3:e1:
                    97:37:84:92:03:6a:c2:2d:37:1d:cc:ee:6d:dc:d1:
                    62:ce:d6:9e:c9:47:6d:05:84:60:40:f9:39:d6:bc:
                    36:3d:51:bf:b6:79:45:17:c5:44:54:12:01:f2:e3:
                    b5:2e:e2:c7:94:43:1c:68:b7:c0:4f:34:1a:dd:12:
                    c0:4a:ff:38:fc:81:d0:77:31:6a:89:a4:a8:8b:d7:
                    7b:6b:5b:3c:07:d5:7c:10:3c:77:a0:c8:80:da:af:
                    b9:0d:ce:d3:de:91:90:47:cc:17:a3:3d:0d:c6:e1:
                    23:b6:e8:c9:94:52:fb:d8:09:f8:c9:1d:cd:b4:96:
                    23:9f:6f:9f:e8:c6:29:58:36:99:7f:fb:db:c3:42:
                    bb:c3:6e:bc:29:46:87:3d:b7:a3:59:4d:0e:f8:23:
                    91:e9:c1:66:0a:74:3a:09:ec:8c:8e:b5:05:78:39:
                    41:1c:89:57:87:2e:09:ef:90:48:df:68:15:92:06:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:48:A4:D8:F5:3E:63:6D:A4:E2:ED:C5:5B:23:68:6C:B7:D5:FC:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fce1a4a7-5949-33dc-80a4-4c8c4c2e747f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:24:2d:4b:a7:cb:12:14:bc:d3:2b:e4:b0:2e:df:a7:0a:08:
         67:48:07:cb:fe:7a:c7:74:38:c8:0d:48:b6:4a:a8:9e:d3:fd:
         50:99:e3:64:51:f1:f7:29:bf:cf:d9:d7:ca:a5:de:63:e1:dd:
         24:fa:56:5e:1a:a9:b7:d5:6e:69:13:63:4c:ac:6e:7d:53:eb:
         85:73:0c:b5:11:0a:e6:7d:50:e1:51:b8:9f:95:41:87:61:a0:
         ba:ef:d5:2b:1a:ef:24:3a:4b:d7:00:af:ad:ef:59:08:30:57:
         53:56:a5:ea:a6:fc:6f:b9:5a:4d:17:b1:57:ba:ef:c9:d1:5e:
         9f:af:d0:56:8e:d4:fc:2e:54:7d:7f:f8:6f:dc:67:b7:f1:07:
         b3:d0:75:6a:4f:a7:f1:9b:13:b1:8b:a5:42:7b:12:50:cd:3b:
         61:32:90:e2:fc:b9:a1:c0:53:a0:ea:0d:d3:6c:53:d6:f4:f0:
         c7:3f:34:a6:48:25:a2:48:c7:05:2f:c5:e5:f1:eb:a1:2c:a8:
         4b:1c:ae:18:66:08:9e:02:ad:bb:58:7e:92:78:d7:73:43:1a:
         08:53:9e:c1:a2:f7:fd:90:a3:ce:7d:d3:c1:fb:79:b3:61:33:
         85:66:68:71:f2:e0:e9:9e:30:33:5e:c4:58:f8:09:60:8e:dd:
         95:64:df:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:20 2024 by rpki-client on console-ams.rpki-client.org