Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7268a7ed-3912-3254-90de-bcabe560eefa.roa
File:                     7268a7ed-3912-3254-90de-bcabe560eefa.roa (raw, json)
Hash identifier:          XPKFtnEVSTIlWwWibd2SbudqpMoM21YeJTwP8vEpnBc=
Subject key identifier:   81:EB:39:6D:B5:A7:AF:25:86:67:11:02:9B:1D:AA:91:F0:0C:7C:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D146DC15E3956FDDEA4D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7268a7ed-3912-3254-90de-bcabe560eefa.roa
Signing time:             Thu 24 Oct 2024 12:50:00 +0000
ROA not before:           Thu 24 Oct 2024 12:50:00 +0000
ROA not after:            Wed 22 Jan 2025 13:50:00 +0000
asID:                     396567
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:46:dc:15:e3:95:6f:dd:ea:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:50:00 2024 GMT
            Not After : Jan 22 13:50:00 2025 GMT
        Subject: CN=707511f2-1194-4e33-aa5b-ede94d50aa85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:7b:28:bd:13:d0:93:f7:71:9f:ab:7f:45:
                    75:ef:c4:62:2e:26:b5:68:92:e4:44:f4:2b:d1:7c:
                    8d:cc:75:72:61:5d:81:df:5d:a0:93:f9:74:5e:e3:
                    1b:4b:f1:7e:b3:32:78:83:03:b4:5d:bd:52:d1:b7:
                    93:e8:4f:86:66:e2:ec:d3:30:ab:59:56:24:9f:e7:
                    9b:24:5c:1c:7a:63:5d:95:8d:3d:1b:d3:46:71:2f:
                    52:15:21:02:73:80:eb:e7:b2:11:04:27:1f:50:83:
                    ee:e5:6a:53:e7:f6:ce:9a:cf:ba:2a:be:77:17:ea:
                    92:4a:e6:bc:82:3e:55:63:f3:a9:38:b6:43:ca:40:
                    66:55:17:cd:c2:08:64:70:8a:6f:72:18:92:48:1c:
                    44:bb:37:fc:da:92:f3:dd:df:7b:cb:f9:ef:20:14:
                    24:03:ef:4c:85:11:ff:5d:01:0a:62:d5:4d:24:a4:
                    e9:13:09:d4:37:1f:77:db:00:84:c9:e5:e9:77:d4:
                    4e:a0:be:f6:86:62:91:36:32:9e:9a:fe:84:ea:ca:
                    57:d9:b3:78:70:dd:3b:2d:b8:02:cd:34:aa:7b:f7:
                    7f:95:93:26:9c:ce:d2:fb:81:2a:d8:a4:16:4d:b1:
                    03:29:5e:db:3a:bb:61:c7:3e:a8:77:eb:3c:da:8d:
                    51:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EB:39:6D:B5:A7:AF:25:86:67:11:02:9B:1D:AA:91:F0:0C:7C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7268a7ed-3912-3254-90de-bcabe560eefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:24:99:37:1f:e9:7f:74:c4:77:dd:fb:fe:42:20:d1:f1:69:
         86:b3:84:5a:46:e9:c9:3c:c3:64:a4:12:9a:ce:0f:61:c0:2b:
         65:ad:e5:0f:8e:ec:d9:5f:92:4b:5e:d0:b9:f4:a7:fd:1d:5f:
         f9:80:1c:90:c3:8a:a0:4a:92:3c:bd:da:ef:31:65:9a:8a:3e:
         55:b8:35:47:d1:61:29:f4:42:32:5d:a6:04:66:b2:e7:ad:38:
         22:57:b1:b3:e5:93:04:87:df:cd:d7:d6:12:17:f2:4d:53:a8:
         8f:16:fb:5b:85:2b:44:ea:55:23:6f:17:7c:32:e6:bb:3a:71:
         5a:b8:b6:68:98:ea:4e:4d:d4:85:57:37:a3:21:72:d2:e7:de:
         6e:60:cf:db:90:d8:34:d8:80:ba:b8:e9:ae:ac:37:c4:ac:a7:
         87:21:c1:fb:87:55:41:ed:3c:f3:3c:41:b9:f2:54:b1:70:8b:
         ce:1f:ed:42:99:0d:bc:bb:cd:73:cd:60:bd:d6:b9:a9:15:81:
         7d:77:54:2f:5a:33:10:94:22:5e:7c:d5:85:86:0e:45:93:53:
         68:c7:7e:0f:4c:f1:28:d7:9a:ee:39:5a:cb:d6:8a:11:9f:d5:
         f7:9d:f9:7a:cc:6f:12:cf:81:0a:7f:1f:79:8d:df:7a:3d:3f:
         e1:c0:e8:06
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEel0UbcFeOVb93qTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAyNDEyNTAwMFoXDTI1MDEyMjEzNTAwMFowLzEtMCsGA1UEAxMk
NzA3NTExZjItMTE5NC00ZTMzLWFhNWItZWRlOTRkNTBhYTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sx7KL0T0JP3cZ+rf0V178RiLia1aJLkRPQr
0XyNzHVyYV2B312gk/l0XuMbS/F+szJ4gwO0Xb1S0beT6E+GZuLs0zCrWVYkn+eb
JFwcemNdlY09G9NGcS9SFSECc4Dr57IRBCcfUIPu5WpT5/bOms+6Kr53F+qSSua8
gj5VY/OpOLZDykBmVRfNwghkcIpvchiSSBxEuzf82pLz3d97y/nvIBQkA+9MhRH/
XQEKYtVNJKTpEwnUNx932wCEyeXpd9ROoL72hmKRNjKemv6E6spX2bN4cN07LbgC
zTSqe/d/lZMmnM7S+4Eq2KQWTbEDKV7bOrthxz6od+s82o1REQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIHrOW21p68lhmcRApsdqpHwDHztMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzI2OGE3ZWQtMzkxMi0z
MjU0LTkwZGUtYmNhYmU1NjBlZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQApJJk3H+l/dMR33fv+QiDR8WmGs4RaRunJPMNkpBKazg9hwCtlreUP
juzZX5JLXtC59Kf9HV/5gByQw4qgSpI8vdrvMWWaij5VuDVH0WEp9EIyXaYEZrLn
rTgiV7Gz5ZMEh9/N19YSF/JNU6iPFvtbhStE6lUjbxd8Mua7OnFauLZomOpOTdSF
VzejIXLS595uYM/bkNg02IC6uOmurDfErKeHIcH7h1VB7TzzPEG58lSxcIvOH+1C
mQ28u81zzWC91rmpFYF9d1QvWjMQlCJefNWFhg5Fk1Nox34PTPEo15ruOVrL1ooR
n9X3nfl6zG8Sz4EKfx95jd96PT/hwOgG
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:06 2024 by rpki-client on console-ams.rpki-client.org