Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9ef8a8-6b08-3a07-b2ee-da36b025ed2e.roa
File:                     4f9ef8a8-6b08-3a07-b2ee-da36b025ed2e.roa (raw, json)
Hash identifier:          uxXEfmNNEYsrTHAX14RoNw+mCD9+ACHNvVzTRm41png=
Subject key identifier:   41:90:C3:E2:8C:6B:3E:FD:AC:FC:CE:89:17:85:CB:1A:F0:F4:F2:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CFD4CE67F96B509F9F274240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9ef8a8-6b08-3a07-b2ee-da36b025ed2e.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     396557
IP address blocks:        192.81.185.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:ce:67:f9:6b:50:9f:9f:27:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=fbb93e30-7027-45df-b61b-0b06c1fd7202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:01:a0:52:80:c3:15:63:a2:ed:82:16:ec:3e:
                    90:7a:36:d5:1c:61:fc:41:2c:16:28:36:29:85:09:
                    50:91:1b:db:50:96:33:60:f5:7f:d8:2e:ee:53:f6:
                    ff:36:5a:86:4f:4a:6a:30:41:74:ee:54:ed:e2:95:
                    14:1c:25:98:ba:96:96:47:10:ab:1c:bc:84:41:9f:
                    22:54:89:48:42:4a:66:0f:d9:e9:b8:17:1a:41:99:
                    21:de:5a:b2:f0:78:47:18:71:64:72:b3:22:77:f2:
                    d2:c8:8b:f9:bb:6f:fc:cb:35:9a:a4:d0:7f:d1:66:
                    47:bd:ee:eb:75:e1:56:16:33:75:b8:46:2f:7f:e4:
                    88:08:bf:8d:de:af:00:43:20:a1:6d:57:fe:4d:b6:
                    e5:a8:dd:3b:07:12:c3:2e:dd:c9:65:cf:8f:ac:18:
                    46:d7:1f:eb:bd:72:0c:2d:fa:02:fb:96:e3:72:c8:
                    51:26:dd:3a:15:38:db:b0:5f:c7:d9:4a:95:df:68:
                    9d:22:85:a5:4d:4f:b2:78:8d:90:fa:af:fe:8f:2c:
                    6a:04:19:46:66:be:45:b3:22:bd:20:73:50:59:02:
                    ba:07:7f:d5:7a:a2:06:83:74:33:dd:89:34:b4:bb:
                    e1:5d:96:63:8f:9a:8b:91:27:97:0f:68:20:ec:6e:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:90:C3:E2:8C:6B:3E:FD:AC:FC:CE:89:17:85:CB:1A:F0:F4:F2:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9ef8a8-6b08-3a07-b2ee-da36b025ed2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c4:f8:27:b3:84:41:3f:b5:49:6b:b7:0d:c8:d4:30:84:fc:
         69:8f:4a:52:d0:c2:46:8f:11:c2:c5:45:27:3f:6a:3e:ac:98:
         cd:f2:0a:9a:bf:32:c7:e9:d4:00:5e:3d:d2:ea:a7:3e:58:c9:
         a7:a2:89:df:37:49:c2:75:ea:56:5e:f8:94:6f:29:d1:91:48:
         87:08:da:33:cc:24:55:27:01:a2:e1:b7:6b:4a:5f:46:ce:51:
         d9:10:b7:01:74:fa:e1:fd:24:2b:91:7e:b5:e5:29:4c:e0:e2:
         c8:27:c1:d1:f3:59:83:bc:bd:f1:17:0f:e3:34:a9:6e:aa:db:
         a7:d0:ef:0f:6f:6c:b5:d4:87:17:b3:53:5f:25:28:c5:78:bd:
         6f:fb:c7:3c:c0:24:d0:5d:3e:f1:20:3d:2c:f1:5e:61:0b:7e:
         ed:64:05:e4:40:84:99:58:74:ed:2f:10:1f:71:24:cd:a7:cc:
         df:e5:55:dd:49:ed:e3:cc:a8:8f:5f:7c:d8:20:2e:d7:e3:fe:
         32:ca:0e:65:09:ae:ed:d1:72:2e:50:7a:42:11:df:31:95:98:
         dc:a0:7d:43:e1:23:ac:c0:ce:45:af:1b:7c:0e:35:da:57:10:
         20:e0:be:13:70:af:30:f0:9b:82:99:89:a9:7b:fb:48:e9:ad:
         31:e6:9b:e9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfP1M5n+WtQn58nQkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk
ZmJiOTNlMzAtNzAyNy00NWRmLWI2MWItMGIwNmMxZmQ3MjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQGgUoDDFWOi7YIW7D6QejbVHGH8QSwWKDYp
hQlQkRvbUJYzYPV/2C7uU/b/NlqGT0pqMEF07lTt4pUUHCWYupaWRxCrHLyEQZ8i
VIlIQkpmD9npuBcaQZkh3lqy8HhHGHFkcrMid/LSyIv5u2/8yzWapNB/0WZHve7r
deFWFjN1uEYvf+SICL+N3q8AQyChbVf+TbblqN07BxLDLt3JZc+PrBhG1x/rvXIM
LfoC+5bjcshRJt06FTjbsF/H2UqV32idIoWlTU+yeI2Q+q/+jyxqBBlGZr5FsyK9
IHNQWQK6B3/VeqIGg3Qz3Yk0tLvhXZZjj5qLkSeXD2gg7G7x8wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEGQw+KMaz79rPzOiReFyxrw9PIQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGY5ZWY4YTgtNmIwOC0z
YTA3LWIyZWUtZGEzNmIwMjVlZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFG5HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAXxPgns4RBP7VJa7cNyNQwhPxpj0pS0MJGjxHCxUUnP2o+rJjN8gqa
vzLH6dQAXj3S6qc+WMmnoonfN0nCdepWXviUbynRkUiHCNozzCRVJwGi4bdrSl9G
zlHZELcBdPrh/SQrkX615SlM4OLIJ8HR81mDvL3xFw/jNKluqtun0O8Pb2y11IcX
s1NfJSjFeL1v+8c8wCTQXT7xID0s8V5hC37tZAXkQISZWHTtLxAfcSTNp8zf5VXd
Se3jzKiPX3zYIC7X4/4yyg5lCa7t0XIuUHpCEd8xlZjcoH1D4SOswM5Frxt8DjXa
VxAg4L4TcK8w8JuCmYmpe/tI6a0x5pvp
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:29 2024 by rpki-client on console-fra.rpki-client.org