Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0926ae73-a4d0-3d7b-af03-4cfc2c9280aa.roa
File:                     0926ae73-a4d0-3d7b-af03-4cfc2c9280aa.roa (raw, json)
Hash identifier:          nXJuVFLd9u4XWm/PVDVLLFNylzfrsEfl18dPviuEBW8=
Subject key identifier:   AF:85:EE:96:5A:22:BD:EC:F6:39:5D:15:E0:4F:2B:9F:4F:6F:D0:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B7843C72F3571A98B0DB63C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0926ae73-a4d0-3d7b-af03-4cfc2c9280aa.roa
Signing time:             Thu 30 Jan 2025 13:46:15 +0000
ROA not before:           Thu 30 Jan 2025 13:46:15 +0000
ROA not after:            Wed 30 Apr 2025 12:46:15 +0000
asID:                     396542
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:3c:72:f3:57:1a:98:b0:db:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:15 2025 GMT
            Not After : Apr 30 12:46:15 2025 GMT
        Subject: CN=d0fb3ac5-587f-458f-aba7-a1022d5813e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:0b:04:38:42:4e:50:fd:8a:1b:b9:12:18:
                    c4:49:12:c4:b3:d4:f8:cb:e0:cc:8c:c5:00:d5:8a:
                    43:1f:a7:79:af:fd:fd:66:0d:f0:f4:1c:be:9c:c1:
                    f6:88:67:cf:3f:7b:0c:f4:31:c7:65:6c:5c:de:cc:
                    35:bf:6c:a6:79:3e:68:bd:a1:ff:8d:50:e4:87:56:
                    da:73:1f:9e:c0:cf:5f:66:9c:21:ad:58:96:cd:50:
                    af:0e:ed:1d:bc:51:d2:8b:f7:d3:6f:65:da:78:9f:
                    00:88:16:3d:2a:dd:54:76:02:19:0b:4d:7f:5b:27:
                    03:ed:df:65:e4:d1:f1:f6:8d:69:03:5e:0e:6a:4f:
                    fe:d6:24:4c:95:aa:4e:4c:94:13:e5:61:bb:fd:bf:
                    30:cf:86:23:fc:7f:26:f4:ed:1b:14:11:2f:57:16:
                    01:24:75:57:d4:23:27:4d:96:01:e1:e5:42:94:9e:
                    dc:48:81:ee:5f:76:f5:a9:d4:a6:88:ca:00:d4:7f:
                    7b:50:25:14:71:c0:7f:0c:e1:fe:af:84:c4:3d:8e:
                    46:fb:55:37:ad:a7:4c:37:77:46:70:c6:8b:41:05:
                    0a:d2:61:aa:d8:ad:a6:24:6a:7a:36:ee:22:fc:96:
                    a1:12:b7:2b:ec:dc:f7:e3:63:d7:5d:4a:5c:fe:b6:
                    da:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:85:EE:96:5A:22:BD:EC:F6:39:5D:15:E0:4F:2B:9F:4F:6F:D0:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0926ae73-a4d0-3d7b-af03-4cfc2c9280aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:cc:3a:31:3a:8e:31:4c:2b:c1:9e:1d:91:8b:83:f1:9f:
         9f:0f:71:4a:b3:9b:0c:77:35:74:81:4a:f2:1a:02:46:b4:5b:
         99:6d:ff:22:24:1b:de:6a:fe:3e:bd:16:c4:71:f1:89:b3:4f:
         f2:55:ee:9b:28:d4:4f:24:c0:86:59:0c:83:f4:ff:ad:cf:97:
         4f:bd:e7:8c:25:e4:0c:4b:ce:8a:31:ff:f7:50:36:f8:10:e4:
         d4:d7:70:64:0a:bb:8b:e1:16:0e:26:56:60:09:4a:87:6c:16:
         c2:e5:fe:5d:e2:5c:59:6c:96:76:29:68:1b:d1:e3:12:89:a4:
         bc:d9:28:e0:75:64:b0:2b:b2:ce:28:04:48:d5:6b:2c:b9:b8:
         64:eb:12:13:69:8b:05:92:74:86:9d:35:af:70:50:e7:89:76:
         05:56:5d:96:fa:58:60:1f:d6:b4:a9:b5:1f:ff:06:6d:ca:3f:
         cc:06:80:16:5c:71:15:c5:78:fe:89:b4:0d:04:79:c1:cc:e3:
         45:3f:1d:27:90:63:33:5e:bf:3a:c0:36:74:5f:85:d0:fd:91:
         3e:33:e6:95:30:c2:11:90:53:51:4c:f6:98:25:81:87:3e:57:
         ae:e8:f4:a0:e8:59:f0:a2:8f:40:e4:dd:30:22:e8:7a:d2:3c:
         48:a7:07:b3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi3hDxy81camLDbY8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEzMDEzNDYxNVoXDTI1MDQzMDEyNDYxNVowLzEtMCsGA1UEAxMk
ZDBmYjNhYzUtNTg3Zi00NThmLWFiYTctYTEwMjJkNTgxM2U0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGsLBDhCTlD9ihu5EhjESRLEs9T4y+DMjMUA
1YpDH6d5r/39Zg3w9By+nMH2iGfPP3sM9DHHZWxc3sw1v2ymeT5ovaH/jVDkh1ba
cx+ewM9fZpwhrViWzVCvDu0dvFHSi/fTb2XaeJ8AiBY9Kt1UdgIZC01/WycD7d9l
5NHx9o1pA14Oak/+1iRMlapOTJQT5WG7/b8wz4Yj/H8m9O0bFBEvVxYBJHVX1CMn
TZYB4eVClJ7cSIHuX3b1qdSmiMoA1H97UCUUccB/DOH+r4TEPY5G+1U3radMN3dG
cMaLQQUK0mGq2K2mJGp6Nu4i/JahErcr7Nz342PXXUpc/rbakwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFK+F7pZaIr3s9jldFeBPK59Pb9DJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDkyNmFlNzMtYTRkMC0z
ZDdiLWFmMDMtNGNmYzJjOTI4MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB12cw6MTqOMUwrwZ4dkYuD8Z+fD3FKs5sMdzV0gUryGgJGtFuZbf8i
JBveav4+vRbEcfGJs0/yVe6bKNRPJMCGWQyD9P+tz5dPveeMJeQMS86KMf/3UDb4
EOTU13BkCruL4RYOJlZgCUqHbBbC5f5d4lxZbJZ2KWgb0eMSiaS82SjgdWSwK7LO
KARI1Wssubhk6xITaYsFknSGnTWvcFDniXYFVl2W+lhgH9a0qbUf/wZtyj/MBoAW
XHEVxXj+ibQNBHnBzONFPx0nkGMzXr86wDZ0X4XQ/ZE+M+aVMMIRkFNRTPaYJYGH
Pleu6PSg6Fnwoo9A5N0wIuh60jxIpwez
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:02:12 2025 by rpki-client