Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fe7904f-2f12-3250-936d-1e32a552ec27.roa
File:                     6fe7904f-2f12-3250-936d-1e32a552ec27.roa (raw, json)
Hash identifier:          W1klQ2ujLHiYiJu9XbW+6VYApx3Gd3N9ifHMlSqkchM=
Subject key identifier:   3F:D6:EF:F1:EE:EA:92:9C:A0:38:94:99:67:D2:32:FD:44:9F:2B:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584787211CCD58C708A2BA679F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fe7904f-2f12-3250-936d-1e32a552ec27.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     396542
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:1c:cd:58:c7:08:a2:ba:67:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=708fbdfd-a73e-464b-adfd-9eba4631e236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:01:4a:08:23:73:d2:db:32:de:11:89:ee:d4:
                    e3:0a:11:85:db:95:47:00:52:81:c3:86:b5:a6:66:
                    e9:3f:79:36:a4:b1:6d:13:02:33:88:3f:90:33:8b:
                    88:ff:7a:82:c3:3d:ef:ef:e9:b0:4d:e8:e3:48:f3:
                    0c:06:44:53:c4:63:a5:12:db:bb:51:96:45:c6:f6:
                    83:4a:8a:ff:83:75:47:80:8d:c8:21:9a:ab:2b:9f:
                    95:4f:25:91:4a:9b:67:fa:cc:3c:2a:34:17:da:b1:
                    e6:9e:fc:e4:8d:8b:75:6d:10:20:a9:c9:72:ef:5b:
                    8c:e0:b1:9e:3f:6f:e8:1a:2b:86:f2:4f:28:51:9d:
                    89:d6:df:8c:60:16:d3:db:45:17:47:9c:30:01:7a:
                    f0:4a:cf:c8:c4:1f:d9:0c:57:b1:d4:83:2c:e9:7d:
                    37:b9:8e:a5:2a:5f:cc:40:bd:d3:de:ff:f2:7c:80:
                    fc:67:a0:bf:f0:3e:40:d6:c9:7e:04:3a:34:b7:d2:
                    3f:85:92:b1:11:75:a6:59:a0:7d:07:af:01:48:32:
                    5b:f1:b2:10:18:60:e0:90:0a:5e:3e:c1:92:16:28:
                    f0:28:e6:aa:b5:c2:07:e5:50:4b:b8:d5:23:48:25:
                    59:bc:40:ff:e8:21:1f:19:97:27:77:08:f8:16:fc:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D6:EF:F1:EE:EA:92:9C:A0:38:94:99:67:D2:32:FD:44:9F:2B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fe7904f-2f12-3250-936d-1e32a552ec27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:2e:c6:75:b4:99:0c:d2:6f:c3:2d:03:a9:30:b4:83:eb:5a:
         1b:7d:46:41:1c:05:84:37:9f:56:28:f8:6f:20:04:66:e7:63:
         11:14:1b:7f:6b:50:66:72:2c:2e:4c:07:4f:0b:aa:ab:f4:8f:
         37:b5:5d:43:4f:b1:ee:c0:6f:47:66:20:f1:56:84:81:0e:7c:
         e7:57:36:59:e5:17:10:28:25:dc:4d:73:a9:69:d7:5e:30:9e:
         ef:2c:4e:28:c6:df:b7:ca:bb:03:15:4a:b1:81:a0:e1:dc:5f:
         f8:a3:d2:3b:58:49:9d:d5:de:fa:8f:35:07:48:61:1e:18:3a:
         00:6f:95:eb:1f:ad:42:d1:12:e2:43:ea:53:f4:13:ef:79:ba:
         7d:0a:a1:37:e9:df:89:8a:38:42:f6:e1:b9:02:2f:9d:89:86:
         36:50:db:29:3a:03:31:cd:c2:d7:f2:0c:66:0d:f6:24:e5:85:
         ad:df:de:c3:fa:93:eb:45:8a:48:67:82:9b:10:67:ee:24:c1:
         ce:d4:19:c5:93:78:5f:3c:d9:fa:bf:2f:1c:db:82:1b:76:59:
         0b:82:a5:6c:f3:cd:97:a5:a8:3c:4b:1c:fc:82:74:11:51:2e:
         3b:03:3b:2e:c7:69:b9:5b:aa:c2:29:5f:87:fc:cc:50:2a:21:
         f7:24:38:4d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeHIRzNWMcIorpnn0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
NzA4ZmJkZmQtYTczZS00NjRiLWFkZmQtOWViYTQ2MzFlMjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwFKCCNz0tsy3hGJ7tTjChGF25VHAFKBw4a1
pmbpP3k2pLFtEwIziD+QM4uI/3qCwz3v7+mwTejjSPMMBkRTxGOlEtu7UZZFxvaD
Sor/g3VHgI3IIZqrK5+VTyWRSptn+sw8KjQX2rHmnvzkjYt1bRAgqcly71uM4LGe
P2/oGiuG8k8oUZ2J1t+MYBbT20UXR5wwAXrwSs/IxB/ZDFex1IMs6X03uY6lKl/M
QL3T3v/yfID8Z6C/8D5A1sl+BDo0t9I/hZKxEXWmWaB9B68BSDJb8bIQGGDgkApe
PsGSFijwKOaqtcIH5VBLuNUjSCVZvED/6CEfGZcndwj4Fvx3UwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFD/W7/Hu6pKcoDiUmWfSMv1Enyt7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmZlNzkwNGYtMmYxMi0z
MjUwLTkzNmQtMWUzMmE1NTJlYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA1LsZ1tJkM0m/DLQOpMLSD61obfUZBHAWEN59WKPhvIARm52MRFBt/
a1BmciwuTAdPC6qr9I83tV1DT7HuwG9HZiDxVoSBDnznVzZZ5RcQKCXcTXOpadde
MJ7vLE4oxt+3yrsDFUqxgaDh3F/4o9I7WEmd1d76jzUHSGEeGDoAb5XrH61C0RLi
Q+pT9BPvebp9CqE36d+JijhC9uG5Ai+diYY2UNspOgMxzcLX8gxmDfYk5YWt397D
+pPrRYpIZ4KbEGfuJMHO1BnFk3hfPNn6vy8c24IbdlkLgqVs882Xpag8Sxz8gnQR
US47Azsux2m5W6rCKV+H/MxQKiH3JDhN
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:33 2024 by rpki-client on console-fra.rpki-client.org