Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bc5790b-3806-39a2-8ced-ee7c1147b08a.roa
File:                     0bc5790b-3806-39a2-8ced-ee7c1147b08a.roa (raw, json)
Hash identifier:          soriWvxHoCknv8ZQSaYZKpXZH1W5twfF4tq7V9197wA=
Subject key identifier:   BD:AF:84:FF:5B:02:8D:4D:DC:37:FF:E1:13:9D:96:57:62:08:D8:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A24291777AFE89E128CE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bc5790b-3806-39a2-8ced-ee7c1147b08a.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     396587
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:24:29:17:77:af:e8:9e:12:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=59fcd491-f900-472e-a6df-c3727ce09616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f4:d3:2a:66:b0:a6:cf:8b:2f:cf:56:05:54:
                    8c:7b:0c:77:b7:2a:3f:6d:33:a6:56:84:94:7b:05:
                    43:d8:33:85:7d:85:33:05:a7:1b:b2:36:d8:28:ff:
                    4b:69:e9:b0:8c:e4:46:01:74:83:8f:b9:d6:f2:6e:
                    04:a9:bf:36:1b:a9:da:26:5f:03:4e:62:c7:7a:34:
                    f8:6f:80:77:28:43:4a:5d:7f:ac:60:2e:63:84:08:
                    bb:17:52:0c:f5:b5:cb:55:9b:2b:ba:53:ce:c2:b2:
                    34:3f:3e:c4:71:b8:1c:06:32:54:14:93:59:6c:3e:
                    0b:86:c0:2e:4a:b3:92:2b:39:63:69:0f:31:1a:7a:
                    3e:30:66:3c:b3:f0:75:d0:1c:e4:3a:9a:c3:1a:4a:
                    22:f9:cb:0d:f6:39:ec:73:c7:cc:be:e1:61:ea:b1:
                    fa:1a:29:65:e5:b4:87:7f:80:94:e4:81:e4:36:dc:
                    98:b6:34:25:00:d7:1a:a4:d2:02:f7:52:87:b1:cd:
                    9c:75:86:05:f5:8d:e6:a9:b3:e5:06:31:5f:ff:29:
                    07:fc:60:31:e9:85:7d:b9:11:3f:68:b1:19:f2:95:
                    75:3f:b0:2e:4b:a0:31:a1:58:77:08:fb:4b:b6:94:
                    16:8a:b0:6e:da:d9:b1:8c:d0:ac:8c:fb:1c:7b:bf:
                    99:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AF:84:FF:5B:02:8D:4D:DC:37:FF:E1:13:9D:96:57:62:08:D8:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bc5790b-3806-39a2-8ced-ee7c1147b08a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2c:a3:33:d8:a3:b6:5e:b4:13:a5:ac:5e:11:9d:d8:57:d0:
         94:cf:fc:ee:c7:67:b0:94:58:f8:bd:e5:1e:e1:6c:05:10:76:
         7f:ee:0f:7d:a9:cc:1a:8c:a6:61:55:81:9a:ed:96:7a:10:71:
         16:af:e6:18:2f:20:7c:08:a9:d9:c7:e4:e6:31:88:ab:cc:18:
         6b:f4:28:49:ac:e4:dd:25:c8:72:4c:e6:de:61:44:2d:c4:07:
         be:20:55:2d:29:9d:d5:b3:40:58:c4:dd:45:10:53:19:25:f5:
         e7:cb:cb:21:15:47:1e:19:66:52:2e:04:ff:fb:4e:7d:f8:1e:
         e7:f4:ce:24:f2:31:54:49:d4:5c:20:e9:28:74:b5:6a:cd:6d:
         91:49:65:4f:28:30:8c:32:20:12:87:12:24:c8:6a:33:3a:bd:
         a8:b1:40:e8:7e:88:8c:3d:55:5b:fc:58:26:21:93:5f:c8:7c:
         a1:58:7f:93:10:67:94:52:1f:21:e8:eb:b3:f7:af:86:52:71:
         20:7e:62:4d:1a:dd:5c:84:16:3f:79:e1:fb:c4:a5:b3:15:27:
         08:81:19:18:e5:3f:58:be:84:c4:c4:41:80:6c:95:9a:0b:fe:
         ce:56:2d:f1:31:06:0f:a6:2f:9c:c7:21:84:04:f8:b9:16:84:
         f4:5a:da:5e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfVaiQpF3ev6J4SjOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk
NTlmY2Q0OTEtZjkwMC00NzJlLWE2ZGYtYzM3MjdjZTA5NjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PTTKmawps+LL89WBVSMewx3tyo/bTOmVoSU
ewVD2DOFfYUzBacbsjbYKP9LaemwjORGAXSDj7nW8m4Eqb82G6naJl8DTmLHejT4
b4B3KENKXX+sYC5jhAi7F1IM9bXLVZsrulPOwrI0Pz7EcbgcBjJUFJNZbD4LhsAu
SrOSKzljaQ8xGno+MGY8s/B10BzkOprDGkoi+csN9jnsc8fMvuFh6rH6Gill5bSH
f4CU5IHkNtyYtjQlANcapNIC91KHsc2cdYYF9Y3mqbPlBjFf/ykH/GAx6YV9uRE/
aLEZ8pV1P7AuS6AxoVh3CPtLtpQWirBu2tmxjNCsjPsce7+ZZwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL2vhP9bAo1N3Df/4ROdlldiCNheMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGJjNTc5MGItMzgwNi0z
OWEyLThjZWQtZWU3YzExNDdiMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAWLKMz2KO2XrQTpaxeEZ3YV9CUz/zux2ewlFj4veUe4WwFEHZ/7g99
qcwajKZhVYGa7ZZ6EHEWr+YYLyB8CKnZx+TmMYirzBhr9ChJrOTdJchyTObeYUQt
xAe+IFUtKZ3Vs0BYxN1FEFMZJfXny8shFUceGWZSLgT/+059+B7n9M4k8jFUSdRc
IOkodLVqzW2RSWVPKDCMMiAShxIkyGozOr2osUDofoiMPVVb/FgmIZNfyHyhWH+T
EGeUUh8h6Ouz96+GUnEgfmJNGt1chBY/eeH7xKWzFScIgRkY5T9YvoTExEGAbJWa
C/7OVi3xMQYPpi+cxyGEBPi5FoT0Wtpe
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:57 2024 by rpki-client on console-ams.rpki-client.org