Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29d3871a-be25-3d43-b04e-08a983dccdb2.roa
File:                     29d3871a-be25-3d43-b04e-08a983dccdb2.roa (raw, json)
Hash identifier:          IRTq6rmilA3HM39KqD4WgTsNCYrR9i5/xpN6/wlCcJE=
Subject key identifier:   40:1E:95:AA:73:FC:63:69:46:00:7C:25:2A:20:BE:D0:7E:92:84:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D14A1DDB0CD1563E516C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29d3871a-be25-3d43-b04e-08a983dccdb2.roa
Signing time:             Thu 24 Oct 2024 12:50:01 +0000
ROA not before:           Thu 24 Oct 2024 12:50:01 +0000
ROA not after:            Wed 22 Jan 2025 13:50:01 +0000
asID:                     396609
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:4a:1d:db:0c:d1:56:3e:51:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:50:01 2024 GMT
            Not After : Jan 22 13:50:01 2025 GMT
        Subject: CN=c6af58ae-9133-4efd-af04-18b835c50dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:e0:24:7e:05:4f:38:6d:fa:1b:04:e5:b8:
                    44:74:af:59:7d:6d:a5:a5:79:c6:45:7e:82:51:28:
                    8d:d6:75:66:8e:02:b0:a1:80:5c:fe:1b:94:00:99:
                    3a:f1:61:e5:7c:01:70:af:1c:4c:62:03:ae:5f:55:
                    23:6a:ca:26:ba:f7:4f:f0:0d:e0:00:c0:2e:96:32:
                    a1:69:9e:f7:41:ea:8a:02:05:aa:fa:47:64:ae:4a:
                    b6:90:82:18:9a:d0:e7:aa:21:f6:cb:da:6c:9f:08:
                    60:0b:13:0a:72:4b:5c:8e:0e:29:9d:dc:8e:a3:bb:
                    0e:3b:07:cf:f5:ea:0a:8c:7e:06:af:7d:68:4e:43:
                    53:2f:f2:a3:04:0c:aa:8c:3a:3f:57:70:17:2c:89:
                    b9:e8:4e:49:c8:ae:c8:ef:b0:8c:a4:63:dd:05:ca:
                    ad:3e:6a:bf:8f:1a:d0:a2:48:4b:44:bc:e3:3d:64:
                    c3:14:e5:25:dc:fb:b2:3c:86:6a:ca:b2:19:c0:a0:
                    11:a9:38:70:58:ae:01:07:c3:c5:1c:ab:89:a7:c2:
                    55:ea:85:6b:0c:84:b3:1b:8d:b7:94:88:6b:cb:05:
                    61:59:7a:85:41:8e:a5:4c:6c:8e:ee:5d:9d:f9:32:
                    e7:49:18:3b:26:e9:fb:1e:67:11:15:c7:fd:c7:07:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1E:95:AA:73:FC:63:69:46:00:7C:25:2A:20:BE:D0:7E:92:84:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29d3871a-be25-3d43-b04e-08a983dccdb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:46:24:01:cf:70:21:ca:ed:16:22:45:de:b6:a5:68:0e:a1:
         ff:7d:b3:75:a8:11:31:30:9c:be:0a:b9:4d:69:e6:ab:b2:16:
         19:7b:db:46:e9:af:db:31:c1:8f:62:08:05:ad:0e:83:c1:0a:
         35:93:dd:30:ab:d7:01:2f:1a:42:7c:60:47:3a:96:9c:23:2c:
         a9:e8:e1:8a:b9:c5:ac:e6:d2:63:cd:30:d0:12:c5:81:77:13:
         8d:4b:c0:84:4e:0d:7b:da:0d:92:20:0d:13:f3:4f:f4:75:e0:
         79:e7:ed:8a:1b:98:7b:f9:1d:be:70:68:87:ec:37:0f:05:a3:
         f8:0b:10:e7:57:b2:55:9d:dd:fb:88:53:d0:a1:16:1b:e7:de:
         03:25:81:9c:6d:0c:3e:ff:9a:03:22:8a:a5:34:e9:01:63:1a:
         15:b8:19:bf:85:66:82:9c:52:9e:ad:4e:4b:9a:65:0f:f2:36:
         5f:f4:25:d9:12:20:7f:f3:b9:c8:af:2a:c9:62:00:94:b2:05:
         03:8c:ba:35:ce:d0:db:0a:42:10:72:b0:6d:e5:a7:b4:c2:94:
         0a:6e:c6:55:fa:b9:4f:2b:77:75:9c:d1:67:a8:f6:93:7a:d7:
         45:08:ec:a8:8f:80:52:a6:98:bd:16:b0:27:ca:d9:84:ac:10:
         f6:c2:6e:7a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEel0Uod2wzRVj5RbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAyNDEyNTAwMVoXDTI1MDEyMjEzNTAwMVowLzEtMCsGA1UEAxMk
YzZhZjU4YWUtOTEzMy00ZWZkLWFmMDQtMThiODM1YzUwZGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1HgJH4FTzht+hsE5bhEdK9ZfW2lpXnGRX6C
USiN1nVmjgKwoYBc/huUAJk68WHlfAFwrxxMYgOuX1UjasomuvdP8A3gAMAuljKh
aZ73QeqKAgWq+kdkrkq2kIIYmtDnqiH2y9psnwhgCxMKcktcjg4pndyOo7sOOwfP
9eoKjH4Gr31oTkNTL/KjBAyqjDo/V3AXLIm56E5JyK7I77CMpGPdBcqtPmq/jxrQ
okhLRLzjPWTDFOUl3PuyPIZqyrIZwKARqThwWK4BB8PFHKuJp8JV6oVrDISzG423
lIhrywVhWXqFQY6lTGyO7l2d+TLnSRg7Jun7HmcRFcf9xwd13wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEAelapz/GNpRgB8JSogvtB+koQiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjlkMzg3MWEtYmUyNS0z
ZDQzLWIwNGUtMDhhOTgzZGNjZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA+RiQBz3Ahyu0WIkXetqVoDqH/fbN1qBExMJy+CrlNaearshYZe9tG
6a/bMcGPYggFrQ6DwQo1k90wq9cBLxpCfGBHOpacIyyp6OGKucWs5tJjzTDQEsWB
dxONS8CETg172g2SIA0T80/0deB55+2KG5h7+R2+cGiH7DcPBaP4CxDnV7JVnd37
iFPQoRYb594DJYGcbQw+/5oDIoqlNOkBYxoVuBm/hWaCnFKerU5LmmUP8jZf9CXZ
EiB/87nIryrJYgCUsgUDjLo1ztDbCkIQcrBt5ae0wpQKbsZV+rlPK3d1nNFnqPaT
etdFCOyoj4BSppi9FrAnytmErBD2wm56
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:25 2024 by rpki-client on console-fra.rpki-client.org