Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e5895e9-07c3-30ed-b7bd-b3d9e7f7896b.roa
File:                     4e5895e9-07c3-30ed-b7bd-b3d9e7f7896b.roa (raw, json)
Hash identifier:          8J2d5/UuNx4vfmWH8KnqfTFLbXBN4XVzwdn7S+lnHcs=
Subject key identifier:   8F:2D:3B:80:91:95:94:8D:2B:8B:02:38:2D:C9:10:8E:FA:7D:76:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858477EBCC7E0F6B5867D03DA8000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e5895e9-07c3-30ed-b7bd-b3d9e7f7896b.roa
Signing time:             Thu 10 Oct 2024 12:52:10 +0000
ROA not before:           Thu 10 Oct 2024 12:52:10 +0000
ROA not after:            Wed 08 Jan 2025 13:52:10 +0000
asID:                     397212
IP address blocks:        192.42.176.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:bc:c7:e0:f6:b5:86:7d:03:da:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 12:52:10 2024 GMT
            Not After : Jan  8 13:52:10 2025 GMT
        Subject: CN=6618df73-ca73-40ad-896d-18a97b12889d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0a:97:22:f7:d4:5d:9d:4f:91:c1:c1:14:e3:
                    8e:8b:3b:29:f0:89:fb:b4:36:b0:50:59:e3:ef:ca:
                    77:a0:d3:3c:3e:86:30:b0:f7:75:4f:c2:83:72:a0:
                    87:21:a7:ed:6e:d3:ea:18:0f:5c:02:71:91:ca:22:
                    3f:21:9d:f3:02:b9:ad:9e:7e:96:62:a9:c2:dc:92:
                    4c:4a:02:3e:ca:19:60:fb:f1:d9:db:b4:a9:8c:fa:
                    d9:61:68:9f:52:19:d8:4b:2b:f4:4b:8a:7f:14:d7:
                    f7:f6:04:88:6a:bb:ad:cf:cb:4a:1f:bd:80:9b:8b:
                    20:58:ac:8c:a9:da:5c:1f:91:f3:91:d4:23:ca:5e:
                    89:4f:75:fa:e0:15:82:76:71:b1:4e:c8:2a:cc:8b:
                    f5:8c:d4:3b:eb:d1:0b:66:10:2a:4a:ad:68:0c:0e:
                    ea:9b:89:8f:c9:cb:ae:b2:3e:e0:e1:bb:50:2f:57:
                    6a:aa:17:bb:78:49:02:9e:58:cf:b4:1a:44:e9:4f:
                    94:2f:d7:41:91:a0:93:fb:3f:fc:ee:a5:67:16:a9:
                    2e:ef:9d:fd:ec:78:8e:c9:9b:21:05:ac:2c:63:d3:
                    e3:e7:fe:20:e2:44:ab:17:7e:7d:f1:2c:28:fb:12:
                    5f:8c:da:ce:c3:d2:6e:05:20:fd:5c:75:02:ad:fb:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2D:3B:80:91:95:94:8D:2B:8B:02:38:2D:C9:10:8E:FA:7D:76:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e5895e9-07c3-30ed-b7bd-b3d9e7f7896b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c6:af:30:45:e2:e7:7e:f9:93:7b:73:4c:d5:5c:cd:af:37:
         bb:51:cf:be:0b:d9:03:11:df:06:95:9a:f3:40:68:0a:6c:2c:
         2f:a8:3b:a9:a2:18:94:ea:86:a6:0d:76:84:21:f7:be:4c:ae:
         2e:14:8c:00:60:d5:9f:39:5b:dd:a8:7e:2e:31:23:a8:e0:a2:
         35:69:b0:a9:a4:de:4c:b2:f1:e6:88:63:cf:26:a5:83:43:60:
         13:08:84:93:11:92:b4:77:f1:a4:5c:30:39:7c:1f:5b:ce:ac:
         58:e2:db:78:e8:43:af:f5:7c:6e:6e:03:80:80:af:f9:8e:29:
         1f:d0:09:3e:88:45:45:83:ef:9e:74:c7:d9:dc:47:f3:71:56:
         50:00:5c:0e:40:08:ba:27:97:af:ef:00:35:11:15:f0:57:e5:
         d8:32:1c:08:2a:db:15:dc:7f:cb:6c:b4:64:28:42:06:89:a3:
         7d:5d:c7:c9:eb:9b:fa:15:58:0b:83:52:39:00:3d:17:df:42:
         12:c7:36:33:64:90:9b:20:66:84:e7:7c:59:85:eb:78:48:cc:
         1d:2e:59:ac:e0:94:a1:19:48:48:05:b4:69:82:a0:8e:ba:55:
         10:29:00:24:a3:c1:56:a5:8a:89:c1:d7:26:18:dd:f1:7a:ba:
         d5:25:32:0d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEd+vMfg9rWGfQPagAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxMDEyNTIxMFoXDTI1MDEwODEzNTIxMFowLzEtMCsGA1UEAxMk
NjYxOGRmNzMtY2E3My00MGFkLTg5NmQtMThhOTdiMTI4ODlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwqXIvfUXZ1PkcHBFOOOizsp8In7tDawUFnj
78p3oNM8PoYwsPd1T8KDcqCHIaftbtPqGA9cAnGRyiI/IZ3zArmtnn6WYqnC3JJM
SgI+yhlg+/HZ27SpjPrZYWifUhnYSyv0S4p/FNf39gSIarutz8tKH72Am4sgWKyM
qdpcH5HzkdQjyl6JT3X64BWCdnGxTsgqzIv1jNQ769ELZhAqSq1oDA7qm4mPycuu
sj7g4btQL1dqqhe7eEkCnljPtBpE6U+UL9dBkaCT+z/87qVnFqku75397HiOyZsh
BawsY9Pj5/4g4kSrF3598Swo+xJfjNrOw9JuBSD9XHUCrftqbQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFI8tO4CRlZSNK4sCOC3JEI76fXbnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGU1ODk1ZTktMDdjMy0z
MGVkLWI3YmQtYjNkOWU3Zjc4OTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAwxq8wReLnfvmTe3NM1VzNrze7Uc++C9kDEd8GlZrzQGgKbCwvqDup
ohiU6oamDXaEIfe+TK4uFIwAYNWfOVvdqH4uMSOo4KI1abCppN5MsvHmiGPPJqWD
Q2ATCISTEZK0d/GkXDA5fB9bzqxY4tt46EOv9XxubgOAgK/5jikf0Ak+iEVFg++e
dMfZ3EfzcVZQAFwOQAi6J5ev7wA1ERXwV+XYMhwIKtsV3H/LbLRkKEIGiaN9XcfJ
65v6FVgLg1I5AD0X30ISxzYzZJCbIGaE53xZhet4SMwdLlms4JShGUhIBbRpgqCO
ulUQKQAko8FWpYqJwdcmGN3xerrVJTIN
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:03 2024 by rpki-client on console-ams.rpki-client.org