Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a0a2411-7068-3310-8e34-0ccbcc31a6fc.roa
File:                     1a0a2411-7068-3310-8e34-0ccbcc31a6fc.roa (raw, json)
Hash identifier:          cEOnTvnClWUsz0U1i7nAasDMpfZTW1SpbSpgwE3Qgy4=
Subject key identifier:   B5:82:A9:1C:5E:49:5D:7F:AA:64:99:08:77:0D:D4:D1:B9:EA:A1:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847872115FD6DAA9E5037B17F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a0a2411-7068-3310-8e34-0ccbcc31a6fc.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     19836
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:15:fd:6d:aa:9e:50:37:b1:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=4ab1ac5e-4bba-4d2e-8f0c-130c5bdc59ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:83:44:80:e6:8a:ed:95:3f:5c:01:72:05:
                    99:85:59:c7:20:e6:de:99:d0:1d:74:05:b4:e6:19:
                    c2:1c:88:b7:07:12:61:7e:a1:63:4b:eb:19:2b:2b:
                    ec:38:1d:7f:fa:ed:c3:fe:a3:79:65:a2:2f:e7:cc:
                    00:18:1b:39:16:25:10:5a:90:ff:d4:37:ec:23:73:
                    5a:16:8c:53:76:29:90:5c:c8:a2:3b:d7:f2:55:d0:
                    29:10:61:0d:fa:00:e0:1a:20:63:8a:29:f6:2c:55:
                    67:9a:6f:48:97:53:c1:e6:c9:39:77:82:da:02:01:
                    0b:90:80:b3:cd:45:5e:71:a0:0a:64:86:ff:54:b5:
                    a1:85:76:55:57:d0:30:27:00:c1:63:17:93:31:ee:
                    22:b4:1c:8f:2f:e5:a1:ab:fa:c4:ec:ab:d1:1e:6b:
                    a4:9b:2f:5a:85:5e:5d:db:b5:42:6b:dc:0c:62:51:
                    1b:3c:77:2f:ed:56:15:0d:8e:93:8e:e6:eb:1e:12:
                    49:ee:99:81:97:76:f6:24:06:f3:3c:ba:88:6b:5e:
                    35:1f:0f:be:97:1a:d5:b4:30:95:ed:99:a3:57:87:
                    74:e6:42:bf:33:18:62:25:04:14:33:3e:2b:74:cc:
                    61:43:7a:cf:69:74:2d:9a:e8:20:77:2a:f5:bd:5b:
                    c8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:82:A9:1C:5E:49:5D:7F:AA:64:99:08:77:0D:D4:D1:B9:EA:A1:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a0a2411-7068-3310-8e34-0ccbcc31a6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:07:71:47:d1:ae:11:f4:d0:89:06:04:3d:2e:47:08:19:06:
         00:18:54:a5:8b:bd:62:d2:93:c8:27:be:18:9d:96:fd:a2:13:
         c1:18:fd:22:4a:24:99:8a:d0:8c:0b:79:7c:d7:ab:f0:82:a1:
         b0:6c:cf:0b:2e:53:08:56:41:d9:d2:d8:ef:6a:4a:ff:20:13:
         01:a2:0b:79:d6:2d:78:93:54:0d:cf:f9:9d:60:d4:b9:a4:5f:
         19:68:f4:5f:a6:e7:5f:1e:af:68:90:a0:12:5f:87:f0:51:78:
         5c:be:ba:31:66:e3:66:44:ed:14:c3:f8:36:09:6e:68:1b:b4:
         04:28:32:22:8f:65:46:7a:15:31:a7:14:aa:e4:58:10:57:39:
         5c:9f:4b:16:c1:25:da:57:a6:5b:20:80:b0:fc:3e:9a:3e:f6:
         0d:6c:f1:4b:82:47:fb:a0:a1:53:0c:e7:6b:15:62:d0:04:11:
         c0:9b:c3:36:27:0a:82:14:90:67:99:b9:09:56:b4:8c:55:ca:
         22:56:95:db:0a:8a:ee:e1:b8:57:54:9c:1c:4f:fe:ab:d6:6b:
         a5:b3:03:72:26:08:5d:8f:e8:c3:5d:15:72:0b:ac:48:82:7c:
         a1:d7:f5:59:26:2a:9d:88:38:63:b9:aa:63:bf:7a:2f:79:b1:
         54:d6:10:d0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeHIRX9baqeUDexfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
NGFiMWFjNWUtNGJiYS00ZDJlLThmMGMtMTMwYzViZGM1OWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbqDRIDmiu2VP1wBcgWZhVnHIObemdAddAW0
5hnCHIi3BxJhfqFjS+sZKyvsOB1/+u3D/qN5ZaIv58wAGBs5FiUQWpD/1DfsI3Na
FoxTdimQXMiiO9fyVdApEGEN+gDgGiBjiin2LFVnmm9Il1PB5sk5d4LaAgELkICz
zUVecaAKZIb/VLWhhXZVV9AwJwDBYxeTMe4itByPL+Whq/rE7KvRHmukmy9ahV5d
27VCa9wMYlEbPHcv7VYVDY6TjubrHhJJ7pmBl3b2JAbzPLqIa141Hw++lxrVtDCV
7ZmjV4d05kK/MxhiJQQUMz4rdMxhQ3rPaXQtmuggdyr1vVvIewIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLWCqRxeSV1/qmSZCHcN1NG56qFpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWEwYTI0MTEtNzA2OC0z
MzEwLThlMzQtMGNjYmNjMzFhNmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCWB3FH0a4R9NCJBgQ9LkcIGQYAGFSli71i0pPIJ74YnZb9ohPBGP0i
SiSZitCMC3l816vwgqGwbM8LLlMIVkHZ0tjvakr/IBMBogt51i14k1QNz/mdYNS5
pF8ZaPRfpudfHq9okKASX4fwUXhcvroxZuNmRO0Uw/g2CW5oG7QEKDIij2VGehUx
pxSq5FgQVzlcn0sWwSXaV6ZbIICw/D6aPvYNbPFLgkf7oKFTDOdrFWLQBBHAm8M2
JwqCFJBnmbkJVrSMVcoiVpXbCoru4bhXVJwcT/6r1mulswNyJghdj+jDXRVyC6xI
gnyh1/VZJiqdiDhjuapjv3ovebFU1hDQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:58 2024 by rpki-client on console-ams.rpki-client.org