Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ca68ef4-8d35-3b2b-9d0e-fe460425ea72.roa
File:                     2ca68ef4-8d35-3b2b-9d0e-fe460425ea72.roa (raw, json)
Hash identifier:          5ltSdneWoPxMVIsl9kZ+AsmGDHAYdLIX/HcotV3cUnM=
Subject key identifier:   AB:2B:F8:38:57:41:1D:9D:6C:77:4C:9F:AA:7C:DB:F5:41:3A:31:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A2202E0EAA75697F063C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ca68ef4-8d35-3b2b-9d0e-fe460425ea72.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     36625
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:22:02:e0:ea:a7:56:97:f0:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=69affeaf-62f9-4a25-9b33-f35e530057e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:93:85:ec:70:2b:d0:70:c0:62:37:b9:90:96:
                    07:ba:01:75:99:c9:67:9d:6e:ad:0b:82:1f:c5:38:
                    ff:1d:f6:58:10:fc:eb:7f:aa:fb:37:89:d9:47:58:
                    67:f5:34:5a:7f:fe:97:a0:56:6e:dc:d4:0b:7f:d1:
                    fe:bc:aa:0e:52:da:84:9c:dd:03:fc:a8:46:2d:a8:
                    95:fd:a9:37:50:33:3d:b5:cf:9d:a2:1e:0c:fa:c5:
                    f5:51:dd:5d:2c:96:16:1a:4f:eb:08:8e:72:f9:f0:
                    dc:59:1d:67:95:5f:9d:c6:fd:70:a2:8b:50:da:f7:
                    3e:8a:0c:f3:92:a6:06:0d:9d:c4:ed:9d:27:c3:70:
                    00:76:1a:02:5a:1e:df:92:80:88:0b:ae:cf:15:e0:
                    e8:18:bf:68:a3:0f:fe:be:0f:63:90:4d:7b:f9:4b:
                    0b:49:7c:18:e6:a8:bf:79:57:86:b9:f4:ff:44:3a:
                    67:f3:6a:9d:91:71:60:79:c9:fc:36:39:64:44:14:
                    e1:b6:59:fa:3c:e4:ac:77:9c:ec:de:73:a2:25:63:
                    1a:df:6e:a0:e7:8f:cb:79:fc:dd:6f:19:2b:26:f6:
                    6c:80:51:66:08:54:b1:7b:b3:02:f9:a1:28:f7:07:
                    b8:8a:4f:c0:c0:59:a9:a1:7c:bf:a9:68:0c:c5:c1:
                    a0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2B:F8:38:57:41:1D:9D:6C:77:4C:9F:AA:7C:DB:F5:41:3A:31:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ca68ef4-8d35-3b2b-9d0e-fe460425ea72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:71:0d:0c:f4:45:d4:22:63:2c:4f:29:c8:7e:ef:73:65:59:
         3b:a8:00:29:b2:c5:cf:03:28:38:7b:09:ed:61:ba:bf:29:e7:
         55:5a:f6:ba:38:d8:a2:24:37:e9:a4:3d:7b:bc:93:b3:ba:99:
         6b:1d:26:06:e8:13:ef:2b:55:67:09:94:67:86:21:a3:bc:7e:
         16:6f:ec:fc:9e:a2:5f:86:3d:39:2c:d2:d8:e5:f6:2e:ae:b5:
         ef:ad:0c:67:a0:42:52:b5:f0:75:6f:2a:b1:e4:ae:12:8f:f9:
         f3:d4:9a:89:f5:61:04:4a:17:7c:f0:e3:6f:2c:af:0a:5f:32:
         9b:12:4a:f8:2a:e2:18:06:81:b9:8a:c0:00:f5:76:31:67:bb:
         a7:4f:b1:08:cb:df:0b:81:30:97:f0:6b:67:1b:bc:0e:6d:65:
         10:16:e4:da:7a:07:10:31:7a:eb:7e:77:60:7c:c3:97:0f:40:
         4d:64:b7:d6:eb:81:15:a3:76:05:2f:c6:87:76:08:aa:f1:5e:
         9d:33:9e:47:18:c5:15:ca:f3:62:c0:fa:73:e0:b6:eb:15:6a:
         6d:17:a3:50:54:80:a1:40:18:30:1b:dc:10:8d:47:db:70:82:
         bc:ad:a8:52:d1:d7:ba:a2:31:a9:02:85:f5:4b:a3:b3:f4:50:
         ed:19:ad:e0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfVaiIC4OqnVpfwY8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk
NjlhZmZlYWYtNjJmOS00YTI1LTliMzMtZjM1ZTUzMDA1N2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJOF7HAr0HDAYje5kJYHugF1mclnnW6tC4If
xTj/HfZYEPzrf6r7N4nZR1hn9TRaf/6XoFZu3NQLf9H+vKoOUtqEnN0D/KhGLaiV
/ak3UDM9tc+doh4M+sX1Ud1dLJYWGk/rCI5y+fDcWR1nlV+dxv1wootQ2vc+igzz
kqYGDZ3E7Z0nw3AAdhoCWh7fkoCIC67PFeDoGL9oow/+vg9jkE17+UsLSXwY5qi/
eVeGufT/RDpn82qdkXFgecn8NjlkRBThtln6POSsd5zs3nOiJWMa326g54/Lefzd
bxkrJvZsgFFmCFSxe7MC+aEo9we4ik/AwFmpoXy/qWgMxcGgqwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKsr+DhXQR2dbHdMn6p82/VBOjHCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmNhNjhlZjQtOGQzNS0z
YjJiLTlkMGUtZmU0NjA0MjVlYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAQcQ0M9EXUImMsTynIfu9zZVk7qAApssXPAyg4ewntYbq/KedVWva6
ONiiJDfppD17vJOzuplrHSYG6BPvK1VnCZRnhiGjvH4Wb+z8nqJfhj05LNLY5fYu
rrXvrQxnoEJStfB1byqx5K4Sj/nz1JqJ9WEEShd88ONvLK8KXzKbEkr4KuIYBoG5
isAA9XYxZ7unT7EIy98LgTCX8GtnG7wObWUQFuTaegcQMXrrfndgfMOXD0BNZLfW
64EVo3YFL8aHdgiq8V6dM55HGMUVyvNiwPpz4LbrFWptF6NQVIChQBgwG9wQjUfb
cIK8rahS0de6ojGpAoX1S6Oz9FDtGa3g
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:59 2024 by rpki-client on console-ams.rpki-client.org