Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12df8d8a-0580-3ee0-8aae-7d4f583376f5.roa
File:                     12df8d8a-0580-3ee0-8aae-7d4f583376f5.roa (raw, json)
Hash identifier:          ZM0LZZcVTg6BqDLhtexIV3Pzqqcj4BaMuNumYZW/4F0=
Subject key identifier:   A7:73:D0:05:08:35:14:69:A3:EC:38:AE:34:42:84:32:A4:5E:6C:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858477EBCC1C8C7F4A15295772320
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12df8d8a-0580-3ee0-8aae-7d4f583376f5.roa
Signing time:             Thu 10 Oct 2024 12:52:07 +0000
ROA not before:           Thu 10 Oct 2024 12:52:07 +0000
ROA not after:            Wed 08 Jan 2025 13:52:07 +0000
asID:                     396563
IP address blocks:        192.42.176.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:bc:c1:c8:c7:f4:a1:52:95:77:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 12:52:07 2024 GMT
            Not After : Jan  8 13:52:07 2025 GMT
        Subject: CN=2c7bdb21-12bc-457b-96be-570bde154526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:46:5f:66:f5:14:af:79:49:7b:e5:f8:3e:59:
                    93:f8:39:38:66:29:4c:5b:75:cf:51:a2:37:13:6d:
                    20:b8:36:00:9b:37:33:59:26:92:c0:6d:24:10:c6:
                    50:27:85:ab:16:f7:71:56:2c:94:c0:14:dc:3a:1a:
                    1d:ef:8b:35:a5:34:a3:b5:ba:b1:14:8f:33:97:9a:
                    a4:54:9f:76:39:07:7b:28:77:c5:d6:50:10:72:bf:
                    e8:a5:06:62:6a:0f:0f:16:66:0d:fe:02:ff:8a:70:
                    b8:1e:59:fc:f2:e7:58:19:f6:72:83:3c:09:e8:1e:
                    90:97:a4:d2:76:3f:0b:cb:e9:40:1d:29:dd:aa:e7:
                    db:a7:74:52:0f:7c:30:d9:a5:ab:7d:22:aa:0c:85:
                    51:f5:cd:e6:77:3c:25:00:ba:65:3b:2a:28:a3:e4:
                    e0:e3:7c:cd:f9:18:b5:c0:3d:18:b9:0f:45:3a:1b:
                    fa:4d:f3:98:d7:fd:57:27:8d:29:8a:95:80:e1:2c:
                    b7:af:f8:ec:d8:8f:03:c8:1a:04:c8:76:9b:5b:2c:
                    53:52:76:6d:ed:46:3d:90:6b:16:c2:24:64:18:fb:
                    fb:26:47:70:00:1a:62:ee:f9:ef:52:81:2e:15:ea:
                    33:7b:95:1d:c9:de:f8:db:f2:54:59:32:0a:a4:be:
                    ba:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:73:D0:05:08:35:14:69:A3:EC:38:AE:34:42:84:32:A4:5E:6C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12df8d8a-0580-3ee0-8aae-7d4f583376f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f8:42:27:63:4c:42:df:76:1d:6a:3e:f7:4a:c3:9d:c2:f9:
         41:02:6c:d3:9d:2f:b5:92:49:88:53:40:e4:ab:4d:ea:87:2a:
         06:e3:41:51:3f:3a:17:b9:12:da:bb:46:49:63:07:40:78:bb:
         a2:0e:68:b0:32:e9:89:7f:71:05:62:50:1b:8c:50:43:60:58:
         23:ce:db:7b:a6:08:a1:27:bf:47:06:d7:0f:24:60:69:cc:b3:
         14:c1:dc:07:b2:c8:07:4b:2b:e2:d0:4d:e6:f9:37:f8:46:24:
         54:ed:87:3a:ae:ed:41:e6:99:df:1c:07:7d:e1:99:62:a0:08:
         06:01:d3:7b:7a:f0:64:27:35:d3:83:15:90:51:69:dd:29:63:
         76:6d:f5:ed:0e:ea:91:0a:8a:2c:8a:6d:7e:a9:98:3f:bc:da:
         d8:af:72:b0:26:70:d8:43:d0:d0:9b:e8:84:30:75:67:a6:99:
         69:55:43:89:ea:0c:de:74:84:ef:ca:62:b3:74:63:45:16:64:
         44:db:76:3f:ec:5c:c1:2f:93:11:b7:f4:56:e8:02:70:6c:33:
         db:4f:bf:fb:3a:d2:e8:b9:cd:38:63:76:ec:20:9c:23:2e:93:
         1d:8e:9a:23:a3:71:30:bb:4f:6a:a6:a4:7e:f8:68:40:54:a1:
         d7:7b:43:82
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEd+vMHIx/ShUpV3IyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxMDEyNTIwN1oXDTI1MDEwODEzNTIwN1owLzEtMCsGA1UEAxMk
MmM3YmRiMjEtMTJiYy00NTdiLTk2YmUtNTcwYmRlMTU0NTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUZfZvUUr3lJe+X4PlmT+Dk4ZilMW3XPUaI3
E20guDYAmzczWSaSwG0kEMZQJ4WrFvdxViyUwBTcOhod74s1pTSjtbqxFI8zl5qk
VJ92OQd7KHfF1lAQcr/opQZiag8PFmYN/gL/inC4Hln88udYGfZygzwJ6B6Ql6TS
dj8Ly+lAHSndqufbp3RSD3ww2aWrfSKqDIVR9c3mdzwlALplOyooo+Tg43zN+Ri1
wD0YuQ9FOhv6TfOY1/1XJ40pipWA4Sy3r/js2I8DyBoEyHabWyxTUnZt7UY9kGsW
wiRkGPv7JkdwABpi7vnvUoEuFeoze5Udyd742/JUWTIKpL66bQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKdz0AUINRRpo+w4rjRChDKkXmwoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTJkZjhkOGEtMDU4MC0z
ZWUwLThhYWUtN2Q0ZjU4MzM3NmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAm+EInY0xC33Ydaj73SsOdwvlBAmzTnS+1kkmIU0Dkq03qhyoG40FR
PzoXuRLau0ZJYwdAeLuiDmiwMumJf3EFYlAbjFBDYFgjztt7pgihJ79HBtcPJGBp
zLMUwdwHssgHSyvi0E3m+Tf4RiRU7Yc6ru1B5pnfHAd94ZlioAgGAdN7evBkJzXT
gxWQUWndKWN2bfXtDuqRCoosim1+qZg/vNrYr3KwJnDYQ9DQm+iEMHVnpplpVUOJ
6gzedITvymKzdGNFFmRE23Y/7FzBL5MRt/RW6AJwbDPbT7/7OtLouc04Y3bsIJwj
LpMdjpojo3Ewu09qpqR++GhAVKHXe0OC
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:57 2024 by rpki-client on console-ams.rpki-client.org