Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/143a3cca-1d7e-3819-b73f-68c77d745b22.roa
File:                     143a3cca-1d7e-3819-b73f-68c77d745b22.roa (raw, json)
Hash identifier:          tTzh5bnvPXYGda1BjjFD2cYO3ttyJ6ehypeEZSLsLbU=
Subject key identifier:   82:2E:46:37:C9:C4:3C:58:A7:5E:9E:45:D6:07:F5:6E:E8:C7:A0:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847951680EF801A47ED8DEAAE40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/143a3cca-1d7e-3819-b73f-68c77d745b22.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     21313
IP address blocks:        192.153.247.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:80:ef:80:1a:47:ed:8d:ea:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=f6ebffd8-34c8-4b7d-8f85-7251f029f751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fa:02:5a:89:40:c4:d8:8a:35:71:ca:e0:69:
                    f9:ef:c2:80:58:af:89:fb:45:58:1e:cc:25:48:bb:
                    72:41:98:08:e6:fb:0a:d5:7a:ee:ac:b7:42:55:8e:
                    9b:a1:78:0c:27:94:22:2e:87:12:31:8a:0d:f7:0c:
                    10:0a:07:93:97:e2:19:6b:a1:56:98:b1:f1:63:65:
                    6d:d6:1b:99:f4:66:04:49:4c:55:05:b6:1a:67:3d:
                    1e:ad:2e:74:bb:f0:7d:45:ed:8f:39:db:00:0d:fb:
                    ea:46:19:3b:a8:5f:85:10:68:57:dc:ab:6d:e7:23:
                    64:35:f5:34:c6:94:d1:3f:e7:b0:41:c3:2b:19:e3:
                    be:5f:a4:e7:d9:51:9c:df:e0:e5:95:7b:74:6c:63:
                    a1:9b:84:f9:d3:9d:11:79:11:d0:7f:88:3f:64:36:
                    91:af:e0:11:e5:47:8f:3c:ae:a3:8e:a6:73:81:2a:
                    69:fc:93:f3:82:15:aa:9c:a4:ca:55:cd:8c:5c:5b:
                    1e:f8:36:39:2a:4c:14:d7:8b:99:ed:53:7d:7b:54:
                    45:e2:60:49:8e:58:97:44:a9:61:3f:58:73:41:88:
                    e8:32:1b:45:9c:0b:af:5f:70:08:4f:21:c6:b3:52:
                    fb:d4:d2:6a:bb:ac:24:56:00:90:2f:4f:20:6e:a6:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2E:46:37:C9:C4:3C:58:A7:5E:9E:45:D6:07:F5:6E:E8:C7:A0:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/143a3cca-1d7e-3819-b73f-68c77d745b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f2:f2:41:e3:bb:f8:7d:85:c1:28:68:c2:c8:8f:2b:0a:fe:
         87:97:09:85:14:11:8c:a2:11:4e:fe:a2:42:52:b5:94:00:71:
         15:80:95:02:4c:55:b3:7f:56:70:ee:e9:92:d8:ff:d1:ae:3a:
         d0:4f:4b:a7:73:8c:9b:fb:db:1e:6f:bd:7d:a4:14:85:18:39:
         d9:99:f8:4b:71:f6:7e:25:12:ac:ac:c7:e4:ac:61:85:2c:57:
         0a:05:04:e9:a1:f1:1f:15:b9:ea:5b:4e:12:b4:70:fc:b5:70:
         57:1c:b3:82:56:72:ab:b4:38:fb:ae:4d:d7:41:b8:9a:1a:e8:
         4f:8f:93:e0:01:3f:0a:48:99:10:f7:aa:b3:81:0b:87:ac:69:
         df:d1:75:c2:08:27:43:87:fe:86:bf:37:bb:bf:17:cb:18:b7:
         dc:68:7b:73:54:de:01:07:23:b9:31:7e:ae:7d:10:b3:5b:de:
         99:1e:98:ad:e0:d2:26:ab:e8:b0:c7:81:51:05:bc:3d:63:5b:
         f5:e8:96:e2:06:5c:ab:52:19:c5:c9:95:be:e6:cc:75:d5:eb:
         b9:e7:0c:c3:bf:b9:2b:97:13:92:90:ea:95:5b:65:68:f5:25:
         7e:5f:43:ac:92:8e:90:3b:9b:e8:e2:08:97:a9:33:56:6d:d0:
         c4:b5:93:cb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeVFoDvgBpH7Y3qrkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxODEzMDA0MVoXDTI1MDExNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZjZlYmZmZDgtMzRjOC00YjdkLThmODUtNzI1MWYwMjlmNzUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPoCWolAxNiKNXHK4Gn578KAWK+J+0VYHswl
SLtyQZgI5vsK1XrurLdCVY6boXgMJ5QiLocSMYoN9wwQCgeTl+IZa6FWmLHxY2Vt
1huZ9GYESUxVBbYaZz0erS50u/B9Re2POdsADfvqRhk7qF+FEGhX3Ktt5yNkNfU0
xpTRP+ewQcMrGeO+X6Tn2VGc3+DllXt0bGOhm4T5050ReRHQf4g/ZDaRr+AR5UeP
PK6jjqZzgSpp/JPzghWqnKTKVc2MXFse+DY5KkwU14uZ7VN9e1RF4mBJjliXRKlh
P1hzQYjoMhtFnAuvX3AITyHGs1L71NJqu6wkVgCQL08gbqZN/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIIuRjfJxDxYp16eRdYH9W7ox6AIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTQzYTNjY2EtMWQ3ZS0z
ODE5LWI3M2YtNjhjNzdkNzQ1YjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCj8vJB47v4fYXBKGjCyI8rCv6HlwmFFBGMohFO/qJCUrWUAHEVgJUC
TFWzf1Zw7umS2P/RrjrQT0unc4yb+9seb719pBSFGDnZmfhLcfZ+JRKsrMfkrGGF
LFcKBQTpofEfFbnqW04StHD8tXBXHLOCVnKrtDj7rk3XQbiaGuhPj5PgAT8KSJkQ
96qzgQuHrGnf0XXCCCdDh/6Gvze7vxfLGLfcaHtzVN4BByO5MX6ufRCzW96ZHpit
4NImq+iwx4FRBbw9Y1v16JbiBlyrUhnFyZW+5sx11eu55wzDv7krlxOSkOqVW2Vo
9SV+X0Osko6QO5vo4giXqTNWbdDEtZPL
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:23 2024 by rpki-client on console-fra.rpki-client.org