Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ed3c2f4-a5cd-3723-b337-07ec529bfe2b.roa
File:                     2ed3c2f4-a5cd-3723-b337-07ec529bfe2b.roa (raw, json)
Hash identifier:          H8AJzgcPzcWzZZUNMnHQvuKNtDRdPVA4iMdCRLUtgaM=
Subject key identifier:   8A:B5:63:8B:AC:10:E2:55:EE:B3:38:D3:F8:B3:7D:44:30:E5:DE:6B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B98714798A90E594A3AA31A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ed3c2f4-a5cd-3723-b337-07ec529bfe2b.roa
Signing time:             Thu 31 Oct 2024 14:16:40 +0000
ROA not before:           Thu 31 Oct 2024 14:16:40 +0000
ROA not after:            Wed 29 Jan 2025 15:16:40 +0000
asID:                     36631
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:87:14:79:8a:90:e5:94:a3:aa:31:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 31 14:16:40 2024 GMT
            Not After : Jan 29 15:16:40 2025 GMT
        Subject: CN=1bd12dcc-837b-41ab-b2e6-7031f368e5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:3b:b8:fd:d6:9b:a7:3f:48:1a:05:e5:ba:
                    8c:62:d5:a6:c9:65:79:a9:80:d8:68:ef:13:20:5d:
                    89:f6:bf:a6:6b:7b:7f:32:05:8b:15:d3:52:d3:6d:
                    f4:30:c4:25:f4:af:79:58:fa:47:d0:41:6d:e3:3e:
                    a4:9f:1f:c9:6f:7b:89:e5:72:7e:c5:8e:a0:b9:75:
                    ba:45:da:b0:80:18:f1:d4:e9:a0:64:f4:30:fa:0f:
                    a4:1e:3f:22:52:2f:12:60:1b:b8:f8:25:bd:06:30:
                    7e:dd:ff:14:11:df:b1:db:08:e2:ad:ca:02:9c:e3:
                    41:e3:06:c9:7e:4a:95:6b:bd:7f:70:88:a1:b2:b5:
                    9d:8c:a8:54:af:13:c9:28:2e:ba:3c:09:fb:8d:53:
                    9e:db:c9:a0:57:a1:ca:4a:9c:f4:84:37:96:eb:ed:
                    58:74:f5:22:b2:35:90:48:b3:f4:2e:35:89:15:bf:
                    f9:0a:bf:7c:58:e9:69:17:67:43:9b:ce:ac:08:5a:
                    6d:3a:f8:2e:60:41:cd:82:de:b5:ca:8b:7b:3d:f6:
                    5d:2d:c8:31:10:fd:01:a3:37:03:fe:f2:2d:c0:05:
                    d5:d2:a5:20:49:7d:f0:5a:ee:a9:42:5d:5f:60:76:
                    c4:5d:7d:3d:04:a5:d9:7f:83:84:ff:8b:3d:3f:4d:
                    2a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B5:63:8B:AC:10:E2:55:EE:B3:38:D3:F8:B3:7D:44:30:E5:DE:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ed3c2f4-a5cd-3723-b337-07ec529bfe2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4f:79:23:c7:44:cb:e0:b3:e3:44:2a:51:33:d7:fd:ed:7d:
         69:3e:bf:0f:7f:cf:a4:b5:93:2e:22:fb:a3:66:d5:de:88:22:
         61:a7:64:b9:28:00:55:cc:9b:f3:9f:24:ed:04:28:03:71:05:
         20:e2:14:f2:1d:f5:79:7d:bf:5c:56:86:39:56:87:b4:8b:ce:
         63:16:d5:6c:f6:5c:87:77:49:21:14:e1:e7:fe:3a:bb:ae:7c:
         22:db:7e:38:67:87:25:4c:55:86:9d:60:f3:cf:70:02:b6:76:
         70:31:34:15:53:9e:92:de:5c:e4:91:6a:37:5b:3d:d9:ca:0d:
         2a:0e:37:c4:8d:74:04:51:6a:0d:52:ec:8c:de:5a:68:a1:92:
         3b:8a:25:b6:21:31:c0:16:53:56:61:d2:c6:e2:ad:1d:4e:98:
         45:15:67:e3:54:96:b8:63:71:53:f8:73:d3:5c:56:3c:41:38:
         13:f1:16:e1:54:35:6f:54:d1:fd:fa:6c:07:ef:da:53:cd:e7:
         c9:51:63:e4:e7:37:9a:40:a6:03:33:d6:37:0c:77:7c:57:ee:
         75:44:0d:cc:87:ae:54:3a:3c:2e:63:c8:a5:c9:c3:7a:f4:06:
         9d:ba:66:76:d5:fe:31:9c:31:03:53:f0:de:e3:65:6f:15:00:
         98:63:32:c2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEe5hxR5ipDllKOqMaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAzMTE0MTY0MFoXDTI1MDEyOTE1MTY0MFowLzEtMCsGA1UEAxMk
MWJkMTJkY2MtODM3Yi00MWFiLWIyZTYtNzAzMWYzNjhlNWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj87uP3Wm6c/SBoF5bqMYtWmyWV5qYDYaO8T
IF2J9r+ma3t/MgWLFdNS0230MMQl9K95WPpH0EFt4z6knx/Jb3uJ5XJ+xY6guXW6
RdqwgBjx1OmgZPQw+g+kHj8iUi8SYBu4+CW9BjB+3f8UEd+x2wjircoCnONB4wbJ
fkqVa71/cIihsrWdjKhUrxPJKC66PAn7jVOe28mgV6HKSpz0hDeW6+1YdPUisjWQ
SLP0LjWJFb/5Cr98WOlpF2dDm86sCFptOvguYEHNgt61yot7PfZdLcgxEP0BozcD
/vItwAXV0qUgSX3wWu6pQl1fYHbEXX09BKXZf4OE/4s9P00qqQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIq1Y4usEOJV7rM40/izfUQw5d5rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmVkM2MyZjQtYTVjZC0z
NzIzLWIzMzctMDdlYzUyOWJmZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAtT3kjx0TL4LPjRCpRM9f97X1pPr8Pf8+ktZMuIvujZtXeiCJhp2S5
KABVzJvznyTtBCgDcQUg4hTyHfV5fb9cVoY5Voe0i85jFtVs9lyHd0khFOHn/jq7
rnwi2344Z4clTFWGnWDzz3ACtnZwMTQVU56S3lzkkWo3Wz3Zyg0qDjfEjXQEUWoN
UuyM3lpooZI7iiW2ITHAFlNWYdLG4q0dTphFFWfjVJa4Y3FT+HPTXFY8QTgT8Rbh
VDVvVNH9+mwH79pTzefJUWPk5zeaQKYDM9Y3DHd8V+51RA3Mh65UOjwuY8ilycN6
9AadumZ21f4xnDEDU/De42VvFQCYYzLC
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:26 2024 by rpki-client on console-fra.rpki-client.org