Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fce8cac9-8615-3bf7-9bfb-f95895c1e947.roa
File:                     fce8cac9-8615-3bf7-9bfb-f95895c1e947.roa (raw, json)
Hash identifier:          HcY2HXK8vWt9uS8ej3wvIFQtbHdPg2ZzL9raezguanI=
Subject key identifier:   7C:71:D9:8C:5C:6F:6B:74:52:AC:EF:D7:AB:E1:D2:DA:BD:9D:E4:96
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B3EDBD30A90B5BE66E0A4880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fce8cac9-8615-3bf7-9bfb-f95895c1e947.roa
Signing time:             Tue 29 Oct 2024 14:08:40 +0000
ROA not before:           Tue 29 Oct 2024 14:08:40 +0000
ROA not after:            Mon 27 Jan 2025 15:08:40 +0000
asID:                     396572
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:ed:bd:30:a9:0b:5b:e6:6e:0a:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 14:08:40 2024 GMT
            Not After : Jan 27 15:08:40 2025 GMT
        Subject: CN=a1f930e5-6b41-40f6-aecc-6ceea6a2aa50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:44:bc:6d:9d:c8:b9:72:2c:7f:fc:41:33:5f:
                    23:86:8b:41:8e:31:87:f6:c0:1e:aa:33:c0:77:54:
                    17:4c:bb:6a:a4:d7:ce:65:44:79:29:8b:b7:1e:ee:
                    ab:71:98:e1:3b:8b:35:fc:86:a9:f2:b2:1f:0f:45:
                    55:92:e4:2c:11:43:9b:6b:3c:7d:77:a6:7d:e9:1e:
                    7a:62:73:0a:a1:36:6f:dd:e7:99:90:cb:72:6d:27:
                    af:9e:71:c2:6b:ec:bc:a4:5d:e5:15:31:41:fd:a5:
                    9f:7b:84:8d:be:5d:c6:d1:cc:1a:01:ee:21:31:ff:
                    d4:c6:81:13:e6:12:e7:f7:d0:28:2e:74:10:fa:97:
                    2c:ea:cf:0d:72:5a:31:24:f1:97:ef:1f:ea:35:92:
                    75:f8:e4:13:aa:d9:0d:97:58:44:31:fd:d2:68:e5:
                    8a:33:86:cf:3a:da:e5:aa:06:8b:c2:d7:ff:90:67:
                    25:64:16:0f:7e:c9:f5:7c:e8:40:a1:5d:4c:6e:fc:
                    71:80:56:ac:cc:66:3a:bc:2b:ce:99:73:4a:3e:99:
                    7d:58:e8:2d:df:d2:89:dc:34:cc:7e:b3:d6:52:a3:
                    8e:b8:29:b0:9f:1f:51:43:56:2d:d9:9e:9c:47:b1:
                    f9:c0:3f:ba:4b:b5:51:e2:b2:38:47:41:96:7a:c4:
                    7f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:71:D9:8C:5C:6F:6B:74:52:AC:EF:D7:AB:E1:D2:DA:BD:9D:E4:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fce8cac9-8615-3bf7-9bfb-f95895c1e947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:11:9b:4c:b7:1b:37:9b:61:37:8b:4c:2d:a2:26:11:6c:40:
         48:f3:93:52:77:46:2b:c4:5b:d1:21:14:97:09:db:62:12:15:
         5c:d2:b6:e9:56:d0:da:f0:54:8b:3d:55:b0:49:24:87:45:09:
         33:b9:86:7d:6c:25:32:f7:ce:a4:d9:57:ef:3e:79:03:d1:8b:
         b9:3e:c3:6a:7a:d3:3d:b0:bf:0a:48:be:04:fd:9e:8f:81:e0:
         fe:3b:07:de:8d:3f:84:fd:ee:04:6b:ad:bc:e6:a7:a1:b8:39:
         7a:1b:c1:48:6c:45:72:32:5b:cf:ed:8c:4a:33:76:cb:dc:ff:
         45:78:68:ce:8d:9a:8b:88:63:1e:d1:5b:40:55:c4:6e:95:57:
         41:f6:cc:10:fc:c9:26:02:4d:ec:a7:6a:a1:e7:7e:03:54:d0:
         6a:f6:57:b7:21:5c:35:ee:4a:93:e2:75:dd:a1:6f:6f:99:8e:
         ea:f1:ce:86:01:f3:77:d3:42:84:ec:42:e0:b3:4a:40:6f:ef:
         fc:99:f2:4c:45:f7:66:ee:d7:fc:3c:41:4d:68:3a:0d:28:7c:
         d5:d6:48:a5:9c:32:b6:49:92:96:ae:d2:fd:ec:d4:2d:e5:6d:
         18:c8:16:6a:56:4f:58:dd:00:3f:21:d5:24:6f:34:bc:2b:9c:
         e5:d7:1e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:20 2024 by rpki-client on console-ams.rpki-client.org