Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/611ca866-8c3b-3c5c-a6e4-13ba3cb60e23.roa
File:                     611ca866-8c3b-3c5c-a6e4-13ba3cb60e23.roa (raw, json)
Hash identifier:          DO7KEwJKVM6pLp+Oa6JO3/pEViq+NPI1l1TTWCXPwMY=
Subject key identifier:   5E:60:F9:7D:06:20:98:FC:7A:D4:B7:3E:16:F9:8D:9D:88:E0:2E:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A218D41296A5806999700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/611ca866-8c3b-3c5c-a6e4-13ba3cb60e23.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     25485
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:21:8d:41:29:6a:58:06:99:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=9077042a-fcbd-45e7-a613-5a139915a26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:02:cc:7b:81:46:dd:29:57:0a:2d:11:24:24:
                    fe:16:bd:73:42:f6:93:d3:19:d0:67:c9:b3:51:93:
                    41:25:ea:f1:cd:0a:5d:b0:04:8f:6a:53:b6:90:4c:
                    6a:be:40:cf:db:28:eb:59:01:91:92:b4:89:90:d8:
                    29:59:36:b0:c9:cc:e1:2a:d5:0b:34:7b:8e:56:eb:
                    9d:3f:55:b4:32:d4:62:6b:a4:4c:b4:32:62:b6:ad:
                    9a:62:bd:ff:9a:e7:f0:ae:c6:26:82:05:a2:61:af:
                    70:3b:f6:eb:b4:df:4d:e6:5f:39:32:a2:3f:ff:9e:
                    bb:87:7e:83:62:73:9e:63:d8:31:29:8a:3a:d2:ce:
                    c5:cd:8b:68:e5:d9:64:3e:6e:7b:9b:88:8d:62:e5:
                    72:54:35:f3:fd:3b:41:b9:f0:91:e5:31:5c:4f:be:
                    72:72:d9:e0:5a:18:0b:69:a2:e9:c8:5b:da:01:9f:
                    fd:62:55:6e:75:f5:f5:18:37:b2:d1:65:3c:3d:8f:
                    6d:3d:21:66:b6:9f:e7:fa:5b:3c:93:2b:dc:5d:aa:
                    70:5a:ed:0d:37:8c:f0:ee:eb:1c:42:04:54:2f:d8:
                    ef:f2:a6:89:10:fa:32:86:08:5a:d7:6b:f1:44:d3:
                    8d:6a:d2:fa:51:26:f7:79:f1:e1:27:6b:b4:2a:b3:
                    6c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:60:F9:7D:06:20:98:FC:7A:D4:B7:3E:16:F9:8D:9D:88:E0:2E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/611ca866-8c3b-3c5c-a6e4-13ba3cb60e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:0b:a6:a5:93:70:7a:a9:a8:b8:51:10:75:3d:82:1c:39:ac:
         67:34:17:8f:26:a3:0c:d6:95:fa:32:4e:a7:7a:a9:56:23:16:
         a0:f8:14:e6:25:51:9b:ea:2d:74:25:1e:d9:d9:22:e7:45:d2:
         de:3f:63:4c:ee:80:ea:52:2c:82:3f:d3:3d:7a:18:d6:e1:6c:
         81:1c:3e:0e:49:94:1c:29:db:bf:5c:32:da:45:0c:f2:12:d8:
         8c:56:06:11:e3:5f:bb:07:72:d8:a9:01:d0:7f:eb:fb:2c:ce:
         40:f5:46:92:d5:29:59:f5:73:87:3f:5d:f0:1f:b4:94:4d:69:
         ee:57:f0:2e:3f:df:59:0d:8c:15:88:8c:cd:f9:ed:3f:43:5a:
         1a:96:08:a7:31:98:68:8d:5d:88:f2:f8:c9:a8:40:36:25:71:
         46:f5:25:7a:61:ed:38:7e:3a:8f:36:3e:3c:d7:a2:28:7f:8e:
         c3:a8:ce:0b:bc:87:3d:b5:1a:d0:34:42:c9:56:2d:08:52:9f:
         d3:e2:f1:f4:73:b2:d6:84:ed:0e:5b:e0:04:42:a6:23:99:46:
         df:82:5e:80:c3:00:41:2d:8e:00:ac:9b:42:d1:30:b6:b2:48:
         7b:21:f5:66:10:bf:7b:42:d4:46:4e:44:8b:c6:ba:ef:4e:70:
         e4:5a:08:15
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfVaiGNQSlqWAaZlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk
OTA3NzA0MmEtZmNiZC00NWU3LWE2MTMtNWExMzk5MTVhMjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgLMe4FG3SlXCi0RJCT+Fr1zQvaT0xnQZ8mz
UZNBJerxzQpdsASPalO2kExqvkDP2yjrWQGRkrSJkNgpWTawyczhKtULNHuOVuud
P1W0MtRia6RMtDJitq2aYr3/mufwrsYmggWiYa9wO/brtN9N5l85MqI//567h36D
YnOeY9gxKYo60s7FzYto5dlkPm57m4iNYuVyVDXz/TtBufCR5TFcT75yctngWhgL
aaLpyFvaAZ/9YlVudfX1GDey0WU8PY9tPSFmtp/n+ls8kyvcXapwWu0NN4zw7usc
QgRUL9jv8qaJEPoyhgha12vxRNONatL6USb3efHhJ2u0KrNsIwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFF5g+X0GIJj8etS3Phb5jZ2I4C6MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjExY2E4NjYtOGMzYi0z
YzVjLWE2ZTQtMTNiYTNjYjYwZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAAC6alk3B6qai4URB1PYIcOaxnNBePJqMM1pX6Mk6neqlWIxag+BTm
JVGb6i10JR7Z2SLnRdLeP2NM7oDqUiyCP9M9ehjW4WyBHD4OSZQcKdu/XDLaRQzy
EtiMVgYR41+7B3LYqQHQf+v7LM5A9UaS1SlZ9XOHP13wH7SUTWnuV/AuP99ZDYwV
iIzN+e0/Q1oalginMZhojV2I8vjJqEA2JXFG9SV6Ye04fjqPNj4816Iof47DqM4L
vIc9tRrQNELJVi0IUp/T4vH0c7LWhO0OW+AEQqYjmUbfgl6AwwBBLY4ArJtC0TC2
skh7IfVmEL97QtRGTkSLxrrvTnDkWggV
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:31 2024 by rpki-client on console-fra.rpki-client.org