Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/d073aae1-8f59-3168-b25f-b243d21a1738.roa
File:                     d073aae1-8f59-3168-b25f-b243d21a1738.roa (raw, json)
Hash identifier:          pXNO3Xx1a29KV+FZnjjiQ+Pl1vOrY0XD6fHoHL2g8V4=
Subject key identifier:   DA:2B:EB:CE:6D:EE:28:57:67:30:81:06:86:F7:57:57:97:53:A4:2C
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F43285847DF2F54057081F0B738B9EE00
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/d073aae1-8f59-3168-b25f-b243d21a1738.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     293
IP address blocks:        192.188.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:54:05:70:81:f0:b7:38:b9:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=aacb3693-71ae-4ad9-a7a5-1c7fc133d29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d7:8c:f5:c6:e4:46:f4:7f:40:62:56:3e:5c:
                    08:73:be:5f:16:a1:14:30:d0:17:78:14:e8:f1:c3:
                    c5:47:26:5a:f8:96:f5:91:ad:51:d5:db:80:96:e1:
                    6f:f0:5d:c3:61:60:fc:7b:62:6b:06:e0:5d:53:fc:
                    c4:34:b0:bf:a8:2b:fe:aa:0f:2b:12:e6:41:72:17:
                    07:89:ae:2f:04:fd:3d:f2:97:e6:ba:f3:d6:46:d6:
                    52:59:d9:45:8a:88:c1:4b:c1:7e:4f:6c:06:35:2b:
                    24:c3:c9:54:ac:a0:f4:2d:c7:eb:f1:8a:61:47:79:
                    dc:18:27:04:90:52:b8:63:e9:fd:79:78:08:fa:7e:
                    c7:37:9d:a3:95:1d:80:67:55:b0:e3:f8:19:a7:aa:
                    c4:f9:74:a6:a1:d7:5f:20:da:f2:64:6f:32:af:50:
                    1c:76:be:0f:8f:6b:c2:12:40:51:55:b1:33:74:b3:
                    ba:53:e3:9a:99:17:53:12:53:ac:77:08:9b:6e:e5:
                    9a:1a:71:e2:8d:6b:e5:c8:b6:95:52:2d:3b:cb:32:
                    57:ef:f5:95:92:d6:b9:7d:ea:a0:cd:62:74:87:0c:
                    70:10:62:92:08:2b:7e:47:ab:6b:6a:d8:9e:72:af:
                    e4:d3:55:4c:0c:6d:78:52:95:f5:f8:09:6e:62:6f:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2B:EB:CE:6D:EE:28:57:67:30:81:06:86:F7:57:57:97:53:A4:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/d073aae1-8f59-3168-b25f-b243d21a1738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:16:c4:4d:40:8c:b6:fd:10:d3:6b:94:b1:74:cd:7d:79:0d:
         89:3f:d4:64:23:df:0f:fa:5a:c1:3e:ee:91:94:07:82:c2:93:
         94:1e:b1:45:50:d2:07:41:b0:a4:aa:4a:81:f9:0f:f5:db:af:
         62:ff:87:ee:a2:53:fa:9c:a8:4e:b2:d3:16:0f:b9:98:41:72:
         c3:e6:d0:9c:2e:75:48:39:59:5b:e8:9f:f4:61:41:6b:4d:15:
         f8:3b:8f:c5:c0:da:0c:b8:cb:6a:ac:3a:19:42:cc:c4:98:c8:
         58:f0:b0:ba:a1:5b:20:33:fa:1c:1d:6c:48:41:9e:7d:0d:fc:
         18:c7:5f:46:44:ca:ea:8f:1e:b1:8e:f0:8d:47:eb:0d:3a:9e:
         6d:b0:02:84:e0:96:ad:73:bb:bb:22:c0:ee:a5:b9:80:b0:69:
         d5:bf:78:e3:11:8a:ef:34:39:16:56:40:31:b2:44:61:f7:70:
         cc:3b:03:c2:c7:5f:cb:4a:8d:5d:1a:b0:f8:76:d3:f4:02:81:
         0b:ac:df:c2:4e:2b:db:eb:ce:d4:10:19:6a:fa:7d:03:2f:44:
         74:27:3d:39:2a:5c:ef:0f:58:ed:14:07:55:b6:55:36:3f:4a:
         62:98:a1:f8:6f:78:c5:8c:81:b9:0c:f1:2c:b5:bd:b0:e6:fa:
         01:8c:cb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org