Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17198c14-0a53-31a7-aa1d-ee8f2a5db40b.roa
File:                     17198c14-0a53-31a7-aa1d-ee8f2a5db40b.roa (raw, json)
Hash identifier:          NUlktm8h+IMm/0n9CAqhAEuKosKjpwHPtJiRCAWnNc0=
Subject key identifier:   F7:4D:D8:AA:B9:D0:F2:B8:A9:C6:46:A5:0F:4D:92:84:9B:56:80:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B78444B7DF7F509B9E2E0E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17198c14-0a53-31a7-aa1d-ee8f2a5db40b.roa
Signing time:             Thu 30 Jan 2025 13:46:19 +0000
ROA not before:           Thu 30 Jan 2025 13:46:19 +0000
ROA not after:            Wed 30 Apr 2025 12:46:19 +0000
asID:                     397211
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:44:b7:df:7f:50:9b:9e:2e:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:19 2025 GMT
            Not After : Apr 30 12:46:19 2025 GMT
        Subject: CN=b4118943-eb68-4bf9-9a8c-44f7a6128438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:f4:31:2a:8e:93:f5:e7:a7:0d:e0:0c:5e:
                    48:e6:44:38:88:8e:47:b9:c0:59:1d:75:88:71:56:
                    e2:b2:d1:95:4b:a8:a5:c7:95:9b:6c:04:e3:49:28:
                    8c:c0:55:d1:bd:4d:c4:03:69:13:b5:12:39:c4:4f:
                    bd:b9:6c:e2:db:2a:42:a8:79:af:b2:8e:27:1f:0b:
                    c1:1d:14:b3:0b:7d:22:2a:8f:f1:84:f7:aa:b4:4d:
                    6b:d0:5a:6c:7b:fa:d8:3a:25:ff:d8:2d:6b:a4:35:
                    0c:ab:f6:05:ff:71:c3:6a:aa:a0:9b:46:ff:e6:45:
                    5c:5a:77:ce:e5:d3:74:31:c0:27:c1:c4:05:26:d2:
                    fd:a5:00:e5:4d:46:71:54:6f:ed:9b:68:12:86:bb:
                    2d:0f:c3:46:2c:15:00:6f:ab:47:6f:fd:15:67:83:
                    9a:dd:83:85:f4:aa:a3:0f:6a:27:7c:6b:59:94:c3:
                    7b:e9:51:2b:34:8c:5a:ef:49:29:af:8a:81:fe:01:
                    94:ec:d0:bb:9a:26:dc:03:95:65:ca:50:ad:b0:22:
                    67:ad:ba:06:b1:66:8a:93:e7:cd:61:cc:21:8c:9a:
                    94:15:98:ea:6a:44:32:33:18:48:16:a0:30:60:7f:
                    ce:1a:dd:77:ee:ff:e0:f5:11:c9:11:53:ac:d9:f0:
                    58:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4D:D8:AA:B9:D0:F2:B8:A9:C6:46:A5:0F:4D:92:84:9B:56:80:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17198c14-0a53-31a7-aa1d-ee8f2a5db40b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:aa:58:39:10:b6:c8:04:f3:28:e4:85:a7:2a:35:d2:28:6f:
         55:c7:ce:5e:df:90:e6:27:0e:b5:d3:34:66:c3:3f:77:73:52:
         a7:1d:26:b3:25:2c:65:23:8b:d2:1e:5c:c3:4e:e6:90:96:18:
         ab:81:e8:92:24:23:ed:0d:75:de:dd:c5:a4:30:44:93:96:ea:
         7e:13:40:95:e1:ab:88:93:63:1c:bd:31:50:de:17:7b:23:2d:
         d5:56:c0:57:fe:09:57:ab:45:1d:8c:56:17:fa:b0:a3:08:56:
         6b:6b:cf:92:ad:b1:84:d6:6c:56:1f:d3:f2:38:3a:41:02:a5:
         73:46:a4:19:bc:40:09:5c:25:9d:22:c2:50:2d:dd:04:29:fa:
         64:eb:de:aa:e8:ae:ff:13:87:53:5e:e6:f4:90:b0:ad:00:12:
         4b:de:19:13:ad:15:db:8e:32:f7:85:37:ac:15:2f:62:c5:1b:
         81:e1:ab:9e:d4:4d:d0:a7:29:2d:11:4b:51:92:3e:93:e7:5e:
         dc:61:55:47:fa:5a:fc:be:ed:3c:3f:1b:d0:62:45:c9:51:1f:
         d8:60:32:54:14:02:71:36:46:52:ca:ba:a7:38:be:f7:28:18:
         0a:77:3e:c9:9f:f4:4d:aa:6c:0e:54:61:4f:76:04:35:13:20:
         43:25:9f:53
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi3hES3339Qm54uDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEzMDEzNDYxOVoXDTI1MDQzMDEyNDYxOVowLzEtMCsGA1UEAxMk
YjQxMTg5NDMtZWI2OC00YmY5LTlhOGMtNDRmN2E2MTI4NDM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgz0MSqOk/Xnpw3gDF5I5kQ4iI5HucBZHXWI
cVbistGVS6ilx5WbbATjSSiMwFXRvU3EA2kTtRI5xE+9uWzi2ypCqHmvso4nHwvB
HRSzC30iKo/xhPeqtE1r0Fpse/rYOiX/2C1rpDUMq/YF/3HDaqqgm0b/5kVcWnfO
5dN0McAnwcQFJtL9pQDlTUZxVG/tm2gShrstD8NGLBUAb6tHb/0VZ4Oa3YOF9Kqj
D2onfGtZlMN76VErNIxa70kpr4qB/gGU7NC7mibcA5VlylCtsCJnrboGsWaKk+fN
YcwhjJqUFZjqakQyMxhIFqAwYH/OGt137v/g9RHJEVOs2fBYtwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPdN2Kq50PK4qcZGpQ9NkoSbVoAxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTcxOThjMTQtMGE1My0z
MWE3LWFhMWQtZWU4ZjJhNWRiNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBFqlg5ELbIBPMo5IWnKjXSKG9Vx85e35DmJw610zRmwz93c1KnHSaz
JSxlI4vSHlzDTuaQlhirgeiSJCPtDXXe3cWkMESTlup+E0CV4auIk2McvTFQ3hd7
Iy3VVsBX/glXq0UdjFYX+rCjCFZra8+SrbGE1mxWH9PyODpBAqVzRqQZvEAJXCWd
IsJQLd0EKfpk696q6K7/E4dTXub0kLCtABJL3hkTrRXbjjL3hTesFS9ixRuB4aue
1E3QpyktEUtRkj6T517cYVVH+lr8vu08PxvQYkXJUR/YYDJUFAJxNkZSyrqnOL73
KBgKdz7Jn/RNqmwOVGFPdgQ1EyBDJZ9T
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:18:34 2025 by rpki-client