Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6545af6b-94b2-349f-9771-ae16f40b41b7.roa
File:                     6545af6b-94b2-349f-9771-ae16f40b41b7.roa (raw, json)
Hash identifier:          yodX5KOaurA6899lhcLb+e5GDe1wdmhq3/l4DZ+O17Q=
Subject key identifier:   AA:D8:40:E0:A8:6C:3B:33:1A:B8:72:F2:4B:EA:A6:4F:46:3D:E7:39
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C7923104A45F89214700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6545af6b-94b2-349f-9771-ae16f40b41b7.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     397206
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c7:92:31:04:a4:5f:89:21:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=3fcbbd14-0b29-4ed8-b3ae-7060e890b132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:b8:77:17:4a:8c:69:a3:dc:f0:0f:ce:3b:
                    c7:20:73:79:42:19:e4:a6:75:2e:40:86:af:c2:e7:
                    4d:b9:3c:22:6f:cc:df:c1:43:84:f6:4f:39:f5:ad:
                    e1:22:fb:a6:a3:fe:7c:08:d9:bc:d9:c1:fe:20:c1:
                    8a:3e:a2:f2:87:c6:f1:6c:9b:45:19:bb:68:19:a3:
                    cd:3a:c5:28:21:4d:05:dd:7e:6c:63:b5:0f:41:c5:
                    b1:7e:3a:65:af:65:a2:d9:b7:b2:06:3e:ae:ff:04:
                    37:1b:73:ff:24:7c:63:89:ed:35:f4:35:34:89:a8:
                    e7:2d:36:e4:3c:03:77:62:c1:f1:f2:29:ca:9a:55:
                    ef:29:76:97:13:58:3d:9d:31:53:da:e1:1e:25:a7:
                    64:ee:6a:e4:5a:b5:cb:a9:95:5e:a4:f9:d6:61:76:
                    cd:d8:da:08:0e:77:89:4d:91:4a:57:f3:15:c9:00:
                    14:b8:f2:7b:53:d7:dc:e1:7b:01:72:bd:30:d4:63:
                    b9:95:9c:04:3a:5b:9a:3d:f7:bb:a1:6e:b7:1f:03:
                    3e:28:8f:33:ae:e9:ba:68:e3:7b:f3:2b:f5:2c:3c:
                    7d:59:e0:c8:59:55:c0:e9:88:f5:46:d3:7a:cb:2f:
                    34:5a:84:b1:f1:cc:f9:79:18:b2:bc:48:a8:bd:e7:
                    85:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D8:40:E0:A8:6C:3B:33:1A:B8:72:F2:4B:EA:A6:4F:46:3D:E7:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6545af6b-94b2-349f-9771-ae16f40b41b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:98:fb:01:8b:8a:79:01:b0:c9:7f:e0:08:e3:d0:87:08:0a:
         d7:6a:ae:2c:26:ed:a5:21:16:b7:5f:70:bb:04:54:43:c8:73:
         78:de:d8:4e:39:5a:75:85:f6:7c:a6:d0:40:4f:2c:c9:a6:49:
         2e:57:d6:3e:f9:8f:af:50:77:23:a1:db:2c:e0:90:41:67:1b:
         a8:99:bb:eb:a4:6b:b3:3f:2c:f4:dc:cb:80:fd:e4:f6:71:57:
         ed:a7:d5:db:c6:21:9a:a1:3a:b9:1e:86:74:b6:d7:41:02:c4:
         e2:97:be:5b:8b:6e:1d:09:47:80:a4:21:06:6b:5c:50:3f:79:
         cd:1e:28:42:64:6e:38:8e:3b:c7:91:1e:98:9f:4b:10:3e:4a:
         c4:73:68:0f:51:35:c4:91:d8:f3:6a:3e:56:e4:41:59:31:23:
         0c:e0:d5:bf:9a:70:a1:a8:95:7d:99:cc:6b:99:a4:54:22:11:
         7f:22:ed:83:58:43:10:02:61:26:19:5a:8d:30:50:55:c5:0a:
         c4:4b:89:00:78:d8:d1:8a:69:67:55:0b:88:22:a2:89:e0:61:
         6d:49:ed:ec:4f:83:e8:5e:08:3c:c2:0a:7f:dd:b3:56:10:24:
         75:9b:74:80:d0:a9:c7:7f:3a:36:cf:de:c1:4c:f8:09:31:a7:
         c2:14:09:16
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdhcMeSMQSkX4khRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MDkzMDAxMDAzMVoXDTI0MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
M2ZjYmJkMTQtMGIyOS00ZWQ4LWIzYWUtNzA2MGU4OTBiMTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroC4dxdKjGmj3PAPzjvHIHN5QhnkpnUuQIav
wudNuTwib8zfwUOE9k859a3hIvumo/58CNm82cH+IMGKPqLyh8bxbJtFGbtoGaPN
OsUoIU0F3X5sY7UPQcWxfjplr2Wi2beyBj6u/wQ3G3P/JHxjie019DU0iajnLTbk
PAN3YsHx8inKmlXvKXaXE1g9nTFT2uEeJadk7mrkWrXLqZVepPnWYXbN2NoIDneJ
TZFKV/MVyQAUuPJ7U9fc4XsBcr0w1GO5lZwEOluaPfe7oW63HwM+KI8zrum6aON7
8yv1LDx9WeDIWVXA6Yj1RtN6yy80WoSx8cz5eRiyvEioveeFHwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKrYQOCobDszGrhy8kvqpk9GPec5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjU0NWFmNmItOTRiMi0z
NDlmLTk3NzEtYWUxNmY0MGI0MWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBkmPsBi4p5AbDJf+AI49CHCArXaq4sJu2lIRa3X3C7BFRDyHN43thO
OVp1hfZ8ptBATyzJpkkuV9Y++Y+vUHcjodss4JBBZxuombvrpGuzPyz03MuA/eT2
cVftp9XbxiGaoTq5HoZ0ttdBAsTil75bi24dCUeApCEGa1xQP3nNHihCZG44jjvH
kR6Yn0sQPkrEc2gPUTXEkdjzaj5W5EFZMSMM4NW/mnChqJV9mcxrmaRUIhF/Iu2D
WEMQAmEmGVqNMFBVxQrES4kAeNjRimlnVQuIIqKJ4GFtSe3sT4PoXgg8wgp/3bNW
ECR1m3SA0KnHfzo2z97BTPgJMafCFAkW
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:31 2024 by rpki-client on console-fra.rpki-client.org