Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d8a1571-9690-3008-8560-ae9d1d7e2a38.roa
File:                     6d8a1571-9690-3008-8560-ae9d1d7e2a38.roa (raw, json)
Hash identifier:          YpmhdGQ1WaGyaATFLQxKSMsO4IM4t+fIzZ3nu5p7wng=
Subject key identifier:   B3:41:0C:0B:7E:F7:8A:E2:CA:B8:B4:80:9E:AB:EC:B5:E0:34:11:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858477EBCC6C005E92A303B772100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d8a1571-9690-3008-8560-ae9d1d7e2a38.roa
Signing time:             Thu 10 Oct 2024 12:52:10 +0000
ROA not before:           Thu 10 Oct 2024 12:52:10 +0000
ROA not after:            Wed 08 Jan 2025 13:52:10 +0000
asID:                     22547
IP address blocks:        192.42.176.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:bc:c6:c0:05:e9:2a:30:3b:77:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 12:52:10 2024 GMT
            Not After : Jan  8 13:52:10 2025 GMT
        Subject: CN=9d109e69-6396-4f1a-86a5-d0ad3c87b415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a2:29:f6:11:68:46:20:76:cd:57:82:89:ea:
                    97:c4:83:68:82:a7:44:b9:d3:2a:42:6a:a2:ac:42:
                    87:a4:a1:23:df:c0:fc:61:19:69:87:16:24:b8:75:
                    81:d0:d6:7c:3b:20:0b:8e:dc:17:31:be:08:4d:53:
                    e9:11:31:d6:37:8a:72:27:a2:dd:45:8c:d8:34:c9:
                    42:ac:a7:58:51:be:06:55:e9:d6:48:bb:a3:1d:b9:
                    43:a1:94:0e:2e:da:47:cf:87:00:e2:72:3f:0e:70:
                    35:7d:b6:00:02:cb:6b:a0:b7:09:be:5c:ac:d0:1c:
                    5a:7d:dd:8e:e8:ac:48:44:33:40:30:ad:89:86:cf:
                    e8:40:24:fd:72:7e:7f:0a:9c:fe:f1:eb:88:6b:24:
                    ec:0f:fc:79:1f:f1:30:cd:6c:9f:3a:59:cc:91:e0:
                    87:58:83:e7:ec:ad:51:a9:1d:fa:da:18:ca:07:df:
                    f9:29:93:5e:bc:1f:1d:3b:4c:cf:a2:90:9e:aa:5e:
                    df:bf:dc:d1:15:63:89:08:c6:19:85:98:5f:a4:cb:
                    c5:e6:18:ea:00:5e:f0:83:b6:b8:23:00:e3:1e:ed:
                    5f:1d:13:b7:77:7c:a0:a2:df:ab:4a:69:9f:7c:28:
                    fe:b8:9c:2a:2f:2f:de:38:1b:cc:7b:66:3a:6c:51:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:41:0C:0B:7E:F7:8A:E2:CA:B8:B4:80:9E:AB:EC:B5:E0:34:11:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d8a1571-9690-3008-8560-ae9d1d7e2a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:2d:f5:99:10:ad:0d:1b:ee:45:b5:d5:66:a1:d4:46:ab:a0:
         36:e3:61:45:ed:12:2f:f1:50:b2:b9:7c:14:47:47:5a:00:cd:
         3c:c4:28:83:25:25:d4:97:5b:f3:59:14:3c:f9:aa:a2:a3:1d:
         e8:89:f5:3c:f6:08:3d:ca:5f:7e:0e:d4:f6:c7:dc:eb:41:d8:
         b1:bc:f8:61:96:73:0c:7c:3c:08:4a:36:f2:98:c6:6d:03:bc:
         30:5f:b5:64:53:24:92:a0:e7:bf:c6:5d:87:67:8e:43:42:f7:
         23:31:88:22:95:2e:3e:43:65:2f:cd:ab:2f:2a:77:fa:74:de:
         9f:c8:66:4e:c6:9f:e0:fb:1a:a2:f9:34:de:dc:bb:b0:21:38:
         bc:b5:3d:09:11:3c:77:38:28:53:40:16:aa:7d:f3:b9:80:c0:
         de:42:4e:ed:c0:f4:18:b7:24:10:a4:cb:bc:b1:33:82:8a:e2:
         6f:d3:66:ae:0c:49:d7:54:0b:f0:b2:de:6a:d4:a1:e4:ec:50:
         ea:f5:1e:d2:ec:41:a0:f2:83:6c:d3:58:58:8a:43:8a:84:7f:
         20:37:27:d3:52:4d:01:de:fe:86:ba:47:d1:41:94:09:f3:53:
         15:35:70:3c:6d:38:79:48:c2:31:f7:54:53:2c:52:c3:1e:3b:
         90:58:58:ee
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEd+vMbABekqMDt3IQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxMDEyNTIxMFoXDTI1MDEwODEzNTIxMFowLzEtMCsGA1UEAxMk
OWQxMDllNjktNjM5Ni00ZjFhLTg2YTUtZDBhZDNjODdiNDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaIp9hFoRiB2zVeCieqXxINogqdEudMqQmqi
rEKHpKEj38D8YRlphxYkuHWB0NZ8OyALjtwXMb4ITVPpETHWN4pyJ6LdRYzYNMlC
rKdYUb4GVenWSLujHblDoZQOLtpHz4cA4nI/DnA1fbYAAstroLcJvlys0Bxafd2O
6KxIRDNAMK2Jhs/oQCT9cn5/Cpz+8euIayTsD/x5H/EwzWyfOlnMkeCHWIPn7K1R
qR362hjKB9/5KZNevB8dO0zPopCeql7fv9zRFWOJCMYZhZhfpMvF5hjqAF7wg7a4
IwDjHu1fHRO3d3ygot+rSmmffCj+uJwqLy/eOBvMe2Y6bFFgVwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLNBDAt+94riyri0gJ6r7LXgNBHWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmQ4YTE1NzEtOTY5MC0z
MDA4LTg1NjAtYWU5ZDFkN2UyYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBNLfWZEK0NG+5FtdVmodRGq6A242FF7RIv8VCyuXwUR0daAM08xCiD
JSXUl1vzWRQ8+aqiox3oifU89gg9yl9+DtT2x9zrQdixvPhhlnMMfDwISjbymMZt
A7wwX7VkUySSoOe/xl2HZ45DQvcjMYgilS4+Q2UvzasvKnf6dN6fyGZOxp/g+xqi
+TTe3LuwITi8tT0JETx3OChTQBaqffO5gMDeQk7twPQYtyQQpMu8sTOCiuJv02au
DEnXVAvwst5q1KHk7FDq9R7S7EGg8oNs01hYikOKhH8gNyfTUk0B3v6GukfRQZQJ
81MVNXA8bTh5SMIx91RTLFLDHjuQWFju
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:05 2024 by rpki-client on console-ams.rpki-client.org