Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d115860-06d4-3099-8c7a-3f7d8608cce9.roa
File:                     7d115860-06d4-3099-8c7a-3f7d8608cce9.roa (raw, json)
Hash identifier:          5fMGuCoSfyXCh9brwEJbTVV0FZMXLuao9BVLPqe7Zx0=
Subject key identifier:   00:64:1F:DD:B7:CF:76:1B:2A:EB:28:85:48:18:EB:49:1C:78:2A:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B3EDBBD985F0783F21BC6740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d115860-06d4-3099-8c7a-3f7d8608cce9.roa
Signing time:             Tue 29 Oct 2024 14:08:39 +0000
ROA not before:           Tue 29 Oct 2024 14:08:39 +0000
ROA not after:            Mon 27 Jan 2025 15:08:39 +0000
asID:                     396540
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:ed:bb:d9:85:f0:78:3f:21:bc:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 14:08:39 2024 GMT
            Not After : Jan 27 15:08:39 2025 GMT
        Subject: CN=c406634e-a585-4c0f-b5d9-51a31d81d80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:01:ec:dc:5d:b6:43:06:62:75:7b:0b:12:ab:
                    41:42:c5:5f:8e:25:89:21:4f:7c:2f:83:8c:7a:09:
                    46:4b:21:d7:bf:63:7a:c2:e0:31:79:98:f1:6d:ab:
                    2c:74:cb:ab:ea:be:97:eb:67:c8:8c:0f:f8:43:df:
                    ef:27:88:6a:74:0a:62:8c:1f:94:d6:0a:1a:51:a0:
                    5b:b9:ba:fb:bb:17:94:b8:24:cf:51:80:15:17:bd:
                    49:4d:77:63:93:93:27:d4:bf:c7:5e:1c:c1:f9:69:
                    90:ec:ef:4d:05:1f:6e:f1:13:b5:df:09:42:b6:35:
                    5b:f6:ed:7f:76:4e:76:c5:c6:ed:09:c6:22:5a:33:
                    b2:fa:43:31:ce:ff:b1:10:3a:5d:05:b0:d5:dd:3b:
                    23:68:de:b2:b0:b8:c0:de:ed:1d:ae:ea:bc:c7:ba:
                    23:f9:e4:ee:c3:75:3a:9d:ab:d6:ef:5c:98:4e:38:
                    4c:81:03:f3:67:02:c0:38:34:e9:67:4c:ed:35:a4:
                    d6:35:5d:ba:81:bd:8d:29:1f:46:ff:74:8c:e1:48:
                    0a:10:e3:bc:19:84:5e:3f:a9:f6:f8:fb:75:20:9f:
                    42:48:d9:db:95:08:ab:9e:92:61:70:86:00:5f:58:
                    df:bc:2e:38:f4:01:9f:a0:50:93:f5:ad:d2:57:f3:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:64:1F:DD:B7:CF:76:1B:2A:EB:28:85:48:18:EB:49:1C:78:2A:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d115860-06d4-3099-8c7a-3f7d8608cce9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0e:d2:36:06:1b:f3:3c:d7:c6:a6:13:99:54:03:7b:3b:4b:
         4e:e8:4b:f9:a2:58:cf:87:b5:24:18:c2:23:da:5c:e3:fe:f2:
         f3:57:8c:a5:fb:3e:bc:62:32:f6:28:a3:9f:5b:0b:56:97:31:
         d0:12:81:50:b3:14:2d:62:a5:75:83:2f:c3:aa:13:42:34:9b:
         bd:18:f6:f4:75:0c:88:39:1a:d9:91:80:e6:71:0f:78:ad:e3:
         16:84:a7:c6:92:36:6b:96:d3:97:f4:af:4a:86:0c:1c:d1:ef:
         b6:5d:d6:bb:71:20:fb:5d:25:1b:b0:ce:01:59:ee:82:fb:47:
         44:bd:57:ac:17:4d:33:74:85:25:be:6f:e3:45:b5:8a:df:3b:
         bc:e1:c9:fe:c6:e0:f9:ac:9e:b9:c0:9b:34:88:9d:3d:a3:a6:
         0c:d0:48:8c:fa:a8:0c:0b:d0:a2:d5:18:3c:f1:9d:e4:37:b1:
         77:d6:d7:d4:b6:85:d9:69:ab:1d:bc:eb:07:52:49:5d:a3:33:
         60:ab:d4:f8:04:4b:d9:f7:b2:f6:cf:69:40:71:c7:15:ec:9a:
         48:65:8c:23:70:cb:e3:38:4b:49:d0:33:1f:36:a6:e7:a1:54:
         86:1f:0b:cd:87:94:fa:be:fc:cf:3f:52:54:63:ba:85:f4:1f:
         fc:07:0b:0d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEez7bvZhfB4PyG8Z0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAyOTE0MDgzOVoXDTI1MDEyNzE1MDgzOVowLzEtMCsGA1UEAxMk
YzQwNjYzNGUtYTU4NS00YzBmLWI1ZDktNTFhMzFkODFkODBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgHs3F22QwZidXsLEqtBQsVfjiWJIU98L4OM
eglGSyHXv2N6wuAxeZjxbassdMur6r6X62fIjA/4Q9/vJ4hqdApijB+U1goaUaBb
ubr7uxeUuCTPUYAVF71JTXdjk5Mn1L/HXhzB+WmQ7O9NBR9u8RO13wlCtjVb9u1/
dk52xcbtCcYiWjOy+kMxzv+xEDpdBbDV3TsjaN6ysLjA3u0druq8x7oj+eTuw3U6
navW71yYTjhMgQPzZwLAODTpZ0ztNaTWNV26gb2NKR9G/3SM4UgKEOO8GYReP6n2
+Pt1IJ9CSNnblQirnpJhcIYAX1jfvC449AGfoFCT9a3SV/OkFQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFABkH923z3YbKusohUgY60kceCq3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2QxMTU4NjAtMDZkNC0z
MDk5LThjN2EtM2Y3ZDg2MDhjY2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBHDtI2BhvzPNfGphOZVAN7O0tO6Ev5oljPh7UkGMIj2lzj/vLzV4yl
+z68YjL2KKOfWwtWlzHQEoFQsxQtYqV1gy/DqhNCNJu9GPb0dQyIORrZkYDmcQ94
reMWhKfGkjZrltOX9K9Khgwc0e+2Xda7cSD7XSUbsM4BWe6C+0dEvVesF00zdIUl
vm/jRbWK3zu84cn+xuD5rJ65wJs0iJ09o6YM0EiM+qgMC9Ci1Rg88Z3kN7F31tfU
toXZaasdvOsHUkldozNgq9T4BEvZ97L2z2lAcccV7JpIZYwjcMvjOEtJ0DMfNqbn
oVSGHwvNh5T6vvzPP1JUY7qF9B/8BwsN
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:34 2024 by rpki-client on console-fra.rpki-client.org