Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdc70b3f-0938-3895-a01d-b3dcd08876c2.roa
File:                     fdc70b3f-0938-3895-a01d-b3dcd08876c2.roa (raw, json)
Hash identifier:          B7cPsz6lUygDKkJbJvIhen8cuV795ET9mKed0bdGUyU=
Subject key identifier:   CC:6F:49:BD:47:F5:86:45:06:AC:06:2D:43:E0:11:BB:25:3E:B6:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A24502A4772BF7DC4BB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdc70b3f-0938-3895-a01d-b3dcd08876c2.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     36626
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:24:50:2a:47:72:bf:7d:c4:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=35f4a9d4-2271-4bcc-ac3c-d1fd22aa2751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0d:3f:30:01:37:e1:2b:d9:b4:fb:7a:6b:5c:
                    3c:a0:15:e5:c6:ee:88:53:1a:b5:60:b3:f8:43:5a:
                    5d:1a:0c:55:ac:46:a1:e7:4e:2e:b2:5a:5f:e9:9b:
                    b7:44:d3:61:d2:ca:cb:d6:56:53:b9:83:c8:89:5e:
                    96:c7:4a:0c:71:25:5c:42:5c:e0:49:aa:ef:c5:23:
                    a5:80:af:1a:1c:5d:1d:1e:d5:08:8c:5f:fc:dd:f0:
                    3b:10:6f:5e:9b:82:ce:7f:41:35:6e:73:69:a2:4b:
                    26:40:5d:ae:be:c3:60:e0:0b:79:5f:03:19:a1:90:
                    cb:b4:26:e8:97:8c:8f:1d:06:82:f5:dd:86:02:06:
                    1d:85:03:c5:b9:61:50:41:75:7b:d2:76:f7:95:a2:
                    8e:42:de:0b:f8:74:4d:f5:17:eb:44:02:9e:96:c8:
                    37:a8:0d:cb:2f:40:39:31:a3:45:01:6a:8e:30:e5:
                    00:75:e6:03:63:9a:93:5d:26:4f:23:7b:ce:75:6f:
                    c4:7e:7b:08:cd:d4:70:57:1b:60:46:a4:46:38:1a:
                    19:68:1c:45:29:26:3b:f0:0c:c3:6c:d0:3a:4a:df:
                    98:da:ac:01:c0:23:95:22:a0:ea:36:a9:7c:70:92:
                    d3:eb:a9:1a:ca:46:f7:70:d0:59:b2:88:65:9b:8f:
                    8f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6F:49:BD:47:F5:86:45:06:AC:06:2D:43:E0:11:BB:25:3E:B6:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdc70b3f-0938-3895-a01d-b3dcd08876c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:57:9e:80:d0:cf:6d:1d:ee:30:ae:23:5e:29:86:03:42:2c:
         6c:f6:23:b9:9f:0a:31:66:f9:63:83:1c:c2:c9:18:e1:d0:52:
         e2:cd:cb:a1:12:21:aa:cb:38:1c:e7:b5:40:7e:33:8c:df:a4:
         14:33:29:19:74:97:00:56:b4:33:3a:2c:cb:fb:c0:87:bc:a8:
         f5:f8:de:eb:2e:01:c4:98:e9:4d:d3:b7:0a:e2:a2:32:27:92:
         72:96:96:dd:80:85:d4:be:b7:25:29:f9:11:08:83:41:88:85:
         71:7e:c5:d1:64:23:e4:8b:e5:4a:2c:7a:90:4c:bb:f6:b6:f9:
         e7:de:d2:dc:9e:0e:d2:88:47:18:d0:20:9d:ca:d4:c3:63:1e:
         30:5e:36:9d:c4:7c:20:91:9a:1c:e8:ff:3e:7b:0d:fe:e7:c7:
         9b:e8:14:89:33:72:b3:64:96:46:c4:17:c4:41:16:3e:85:92:
         86:e3:6f:0a:37:89:e9:97:7d:86:52:ce:a3:9b:e0:76:0d:0b:
         1b:10:2e:50:dd:2c:0b:62:2e:76:50:83:08:48:42:93:fa:4f:
         d9:a9:bd:e4:fe:f8:99:a4:fd:ba:1b:0d:07:a1:fc:42:19:5a:
         f2:3b:38:af:e0:48:b5:29:77:ca:5b:aa:ff:fb:04:8d:7c:93:
         29:bc:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:20 2024 by rpki-client on console-ams.rpki-client.org