Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b2130f-629d-3aed-8986-dcb239ea0420.roa
File:                     29b2130f-629d-3aed-8986-dcb239ea0420.roa (raw, json)
Hash identifier:          EZwZp5AtR8t+l0+QknZyxUvo5iNwQBYNETZjMkq2MCY=
Subject key identifier:   BD:77:E9:41:AF:E4:F7:48:EB:A7:D1:8C:4A:22:29:A8:68:DB:51:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C870790E55C1A1849A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b2130f-629d-3aed-8986-dcb239ea0420.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     396592
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c8:70:79:0e:55:c1:a1:84:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=9503f667-a25a-4971-a3db-65cb63fab2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:9b:8c:fa:c0:47:89:94:91:55:19:b6:a9:
                    e6:ca:9a:2e:80:bc:5b:68:3c:5f:91:6e:d1:88:fa:
                    1c:07:e1:35:2e:e1:54:ad:c3:e8:43:28:39:1d:75:
                    8f:74:6c:f9:53:fc:5a:5c:8c:94:d4:f2:f8:17:18:
                    40:d5:fa:3c:07:7a:51:d6:c7:7e:74:80:1a:3f:41:
                    af:13:b0:53:69:51:0b:33:1f:c0:8e:8a:fe:0c:98:
                    2d:4a:61:f9:97:8b:b7:41:84:77:99:18:d7:e1:53:
                    14:42:8c:49:3d:fb:2a:d9:cc:a6:a1:a6:59:2a:97:
                    b1:b2:9f:f6:2f:52:89:60:54:47:bf:f2:0b:d1:56:
                    5f:a0:56:88:64:4a:8b:3f:9c:7d:b7:be:1e:e4:ef:
                    03:1a:2e:bd:6e:00:7d:df:46:10:1e:d4:2b:23:87:
                    c0:4d:4d:ed:e5:ef:3a:fb:3e:5d:7a:b4:af:d9:36:
                    bd:fa:40:ff:e1:38:e5:9a:57:4c:b7:f6:7f:02:e1:
                    ca:0c:37:72:fd:49:2d:f3:97:68:86:6d:8c:ec:25:
                    60:2b:46:f6:ce:e9:5c:f5:35:77:d2:7d:8e:15:a4:
                    fb:af:e1:0b:f3:1d:5d:c0:ca:f1:a3:3c:36:2b:71:
                    b5:5a:b5:20:7c:55:89:7e:07:ee:f0:75:ec:ce:fd:
                    e9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:77:E9:41:AF:E4:F7:48:EB:A7:D1:8C:4A:22:29:A8:68:DB:51:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b2130f-629d-3aed-8986-dcb239ea0420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a0:a1:32:43:83:f3:29:79:19:11:f1:91:97:16:d3:08:6b:
         11:e2:b9:ec:cd:03:68:9c:6d:5f:dd:18:d6:c7:93:09:ec:7c:
         f1:4e:46:5d:81:bf:d8:ba:8d:24:1f:a3:8f:e8:67:7b:6d:aa:
         fb:dc:27:2a:11:b0:69:5f:63:84:8e:52:88:6f:11:f4:7b:ed:
         e8:f3:dd:eb:4c:2e:e8:a8:45:a0:0e:c2:3d:27:f5:d5:48:0a:
         d2:79:e7:fd:39:88:18:72:1c:35:e3:cb:71:03:06:18:f8:ce:
         a6:37:5e:18:29:e1:ee:fb:e0:73:46:4f:83:f4:b3:60:7d:a9:
         df:96:e4:7c:57:d1:1b:27:43:3b:c5:95:ed:56:26:62:a7:2a:
         4f:f9:6c:c1:0b:2c:4a:32:dc:a4:3d:15:8c:5d:ef:53:41:0f:
         82:e3:b7:af:52:0e:83:99:22:7a:28:e2:45:f1:a7:eb:88:37:
         33:8f:98:8f:59:b9:5a:c8:db:13:8c:64:85:5c:e8:b9:20:74:
         58:59:49:bb:66:4e:6a:4d:00:bf:f7:24:ca:fa:9f:51:c7:3b:
         cc:d3:62:4c:ff:3e:62:70:2c:8f:b6:a9:ea:42:c8:8d:45:15:
         46:9f:75:79:b2:64:bd:27:c2:5d:90:56:b9:05:78:c7:ad:24:
         9f:bd:93:e4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdhcMhweQ5VwaGEmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MDkzMDAxMDAzMVoXDTI0MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
OTUwM2Y2NjctYTI1YS00OTcxLWEzZGItNjVjYjYzZmFiMmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMKbjPrAR4mUkVUZtqnmypougLxbaDxfkW7R
iPocB+E1LuFUrcPoQyg5HXWPdGz5U/xaXIyU1PL4FxhA1fo8B3pR1sd+dIAaP0Gv
E7BTaVELMx/Ajor+DJgtSmH5l4u3QYR3mRjX4VMUQoxJPfsq2cymoaZZKpexsp/2
L1KJYFRHv/IL0VZfoFaIZEqLP5x9t74e5O8DGi69bgB930YQHtQrI4fATU3t5e86
+z5derSv2Ta9+kD/4TjlmldMt/Z/AuHKDDdy/Ukt85dohm2M7CVgK0b2zulc9TV3
0n2OFaT7r+EL8x1dwMrxozw2K3G1WrUgfFWJfgfu8HXszv3phwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL136UGv5PdI66fRjEoiKaho21F9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjliMjEzMGYtNjI5ZC0z
YWVkLTg5ODYtZGNiMjM5ZWEwNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBXoKEyQ4PzKXkZEfGRlxbTCGsR4rnszQNonG1f3RjWx5MJ7HzxTkZd
gb/Yuo0kH6OP6Gd7bar73CcqEbBpX2OEjlKIbxH0e+3o893rTC7oqEWgDsI9J/XV
SArSeef9OYgYchw148txAwYY+M6mN14YKeHu++BzRk+D9LNgfanfluR8V9EbJ0M7
xZXtViZipypP+WzBCyxKMtykPRWMXe9TQQ+C47evUg6DmSJ6KOJF8afriDczj5iP
WblayNsTjGSFXOi5IHRYWUm7Zk5qTQC/9yTK+p9RxzvM02JM/z5icCyPtqnqQsiN
RRVGn3V5smS9J8JdkFa5BXjHrSSfvZPk
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:59 2024 by rpki-client on console-ams.rpki-client.org