Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/533bf02d-90ff-3458-8546-b964adca0455.roa
File:                     533bf02d-90ff-3458-8546-b964adca0455.roa (raw, json)
Hash identifier:          K3vRO5ny/cy6ykF0J1tDuPukseYAhoQD4LAzc3BtrjE=
Subject key identifier:   8B:B3:D0:73:FE:53:A4:E9:BB:9E:1C:20:EB:82:88:52:40:BB:6D:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D14A5497AAE698AD1871C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/533bf02d-90ff-3458-8546-b964adca0455.roa
Signing time:             Thu 24 Oct 2024 12:50:01 +0000
ROA not before:           Thu 24 Oct 2024 12:50:01 +0000
ROA not after:            Wed 22 Jan 2025 13:50:01 +0000
asID:                     396592
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:4a:54:97:aa:e6:98:ad:18:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:50:01 2024 GMT
            Not After : Jan 22 13:50:01 2025 GMT
        Subject: CN=f202a93c-63cd-4aa1-8f36-fa1379ba4c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:cb:02:67:c2:6b:e7:a9:22:45:40:42:15:
                    96:2c:9e:15:db:e7:93:67:87:d4:97:45:f5:08:a3:
                    41:a1:53:9d:59:fc:fb:9f:8f:e8:67:c8:54:71:20:
                    3c:ce:24:44:1f:fc:e6:9f:6f:1d:b2:8d:ff:f6:86:
                    8c:66:c3:ea:fe:d8:02:37:a8:1c:e5:6e:b3:64:d2:
                    f3:20:4d:8b:85:c0:e7:fb:2f:6b:1c:ab:38:38:3e:
                    43:55:c9:19:5a:21:3f:ed:78:b4:f8:3d:b6:54:4a:
                    bf:18:00:a0:84:82:ef:75:f6:82:81:4f:45:56:e4:
                    57:2f:b3:87:58:65:fb:c9:52:21:98:c5:e1:06:fb:
                    09:d5:b2:94:65:64:33:da:5d:0e:4a:a4:62:0b:f7:
                    ac:60:61:b2:e8:c5:d2:1e:44:f2:0f:74:a7:48:99:
                    36:9d:f2:53:15:8e:fd:2b:12:12:ec:34:b2:90:bf:
                    0d:e3:66:78:77:d9:6b:ba:60:66:46:f1:08:05:8d:
                    bf:d0:fa:b8:3e:7e:df:ff:f4:d9:22:3f:c0:01:1c:
                    93:e8:89:ab:4c:af:82:18:39:32:75:fe:b9:f3:8e:
                    89:64:00:66:3f:41:57:2d:e4:1b:aa:35:58:37:5d:
                    e1:74:62:33:c1:d7:2a:b9:7c:f7:20:6d:9f:cb:2c:
                    a7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B3:D0:73:FE:53:A4:E9:BB:9E:1C:20:EB:82:88:52:40:BB:6D:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/533bf02d-90ff-3458-8546-b964adca0455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:e1:90:ce:65:13:fc:22:e0:cd:5a:77:49:f9:32:4c:4a:88:
         66:09:be:13:a8:c0:ec:32:86:b5:cb:09:1c:bb:e2:41:23:51:
         7d:fe:35:49:eb:c5:dc:ea:ec:87:d6:40:75:f5:ce:c7:fd:fd:
         bf:24:7f:19:af:51:a9:2e:92:ff:77:34:d6:27:a6:8c:66:28:
         55:0d:a2:99:42:b1:7c:70:37:6c:8a:a5:ce:77:c8:ec:e8:98:
         a2:86:2a:a0:7c:1b:0b:f7:e5:39:02:fc:37:e5:c5:90:83:a0:
         ea:c2:30:0b:af:36:86:55:f5:21:83:42:df:76:13:2a:d6:68:
         b5:74:02:15:48:0e:d1:06:ca:1e:b5:86:96:2d:0d:d4:78:8d:
         1d:31:c0:eb:39:72:30:20:3d:b5:74:4a:b1:17:73:cb:b3:93:
         ea:ef:8f:e1:f0:64:f4:30:22:dd:5c:65:ce:49:dc:0d:57:08:
         74:e6:20:6c:49:18:17:6e:02:fd:50:61:af:f8:42:82:73:29:
         69:13:d0:9d:f4:2e:58:49:48:39:cd:2e:97:69:23:58:ec:0f:
         f0:31:0f:ea:17:20:fe:75:51:44:a7:f4:2c:3c:ca:2f:b5:42:
         2b:e2:e3:52:35:57:61:1b:03:d2:c7:17:05:82:ca:ea:e5:bc:
         ef:62:f4:a7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEel0UpUl6rmmK0YccAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAyNDEyNTAwMVoXDTI1MDEyMjEzNTAwMVowLzEtMCsGA1UEAxMk
ZjIwMmE5M2MtNjNjZC00YWExLThmMzYtZmExMzc5YmE0YzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUvLAmfCa+epIkVAQhWWLJ4V2+eTZ4fUl0X1
CKNBoVOdWfz7n4/oZ8hUcSA8ziREH/zmn28dso3/9oaMZsPq/tgCN6gc5W6zZNLz
IE2LhcDn+y9rHKs4OD5DVckZWiE/7Xi0+D22VEq/GACghILvdfaCgU9FVuRXL7OH
WGX7yVIhmMXhBvsJ1bKUZWQz2l0OSqRiC/esYGGy6MXSHkTyD3SnSJk2nfJTFY79
KxIS7DSykL8N42Z4d9lrumBmRvEIBY2/0Pq4Pn7f//TZIj/AARyT6ImrTK+CGDky
df65846JZABmP0FXLeQbqjVYN13hdGIzwdcquXz3IG2fyyynfwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIuz0HP+U6Tpu54cIOuCiFJAu20wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTMzYmYwMmQtOTBmZi0z
NDU4LTg1NDYtYjk2NGFkY2EwNDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCw4ZDOZRP8IuDNWndJ+TJMSohmCb4TqMDsMoa1ywkcu+JBI1F9/jVJ
68Xc6uyH1kB19c7H/f2/JH8Zr1GpLpL/dzTWJ6aMZihVDaKZQrF8cDdsiqXOd8js
6JiihiqgfBsL9+U5Avw35cWQg6DqwjALrzaGVfUhg0LfdhMq1mi1dAIVSA7RBsoe
tYaWLQ3UeI0dMcDrOXIwID21dEqxF3PLs5Pq74/h8GT0MCLdXGXOSdwNVwh05iBs
SRgXbgL9UGGv+EKCcylpE9Cd9C5YSUg5zS6XaSNY7A/wMQ/qFyD+dVFEp/QsPMov
tUIr4uNSNVdhGwPSxxcFgsrq5bzvYvSn
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:30 2024 by rpki-client on console-fra.rpki-client.org