Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8357f385-187f-3953-a344-1f369a16deef.roa
File:                     8357f385-187f-3953-a344-1f369a16deef.roa (raw, json)
Hash identifier:          CoCe3FS65gqBiFrMeXQRAoT3HUUqNmHO4fk63q84b68=
Subject key identifier:   64:1D:06:66:FA:EF:97:A4:20:D7:9D:F4:B2:10:71:E9:3C:75:76:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584795168836AF91C21776E00FE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8357f385-187f-3953-a344-1f369a16deef.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     396544
IP address blocks:        192.153.247.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:88:36:af:91:c2:17:76:e0:0f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=5b12ddd9-c366-47fe-a1fe-26ee1f2f6fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:9f:1b:5b:82:95:d2:22:83:ff:69:fd:2c:
                    87:ce:b7:4a:e9:df:ea:7a:89:a5:2d:80:6f:45:c4:
                    f8:58:12:71:64:14:8a:37:3b:9e:dc:f4:e5:43:6f:
                    20:a4:ca:d6:b1:f0:39:d5:4b:65:97:e0:a1:84:a0:
                    9b:04:9c:2e:9a:3c:5f:85:62:73:30:d0:35:f3:41:
                    62:c3:d5:36:a1:ee:4f:db:29:9e:ac:f1:c6:6d:8e:
                    b5:2b:2a:0d:62:1b:94:7e:a9:d4:31:60:c5:5b:d9:
                    e1:8e:f2:61:dd:20:cf:35:5d:3c:a0:35:76:33:08:
                    07:66:ba:b2:33:c8:45:33:dd:88:01:39:be:1d:0b:
                    e3:24:74:6b:48:ae:bc:6b:75:50:95:7a:06:fb:18:
                    2c:e8:e9:0d:e2:92:a1:18:f5:44:92:bb:f0:c9:1c:
                    3b:10:51:28:17:da:b9:ae:94:06:16:0f:3e:65:46:
                    e1:fb:0c:4e:71:41:0e:6f:c1:48:b3:d8:4a:f9:55:
                    f7:fe:0e:69:92:c3:d0:d7:7b:5c:cb:d6:50:22:58:
                    48:81:e3:dd:e5:4e:05:3b:2e:6f:07:b9:98:38:3a:
                    1f:7c:5d:e0:f2:1e:ce:f3:cf:75:39:36:15:d2:07:
                    bc:66:65:c6:8d:86:24:14:63:82:d5:b3:44:43:97:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1D:06:66:FA:EF:97:A4:20:D7:9D:F4:B2:10:71:E9:3C:75:76:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8357f385-187f-3953-a344-1f369a16deef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7c:63:b5:6a:72:f1:a4:f2:af:aa:5b:a7:03:a4:d0:6d:f3:
         3e:c0:5e:bc:7a:64:6a:b3:91:ea:1f:00:0a:2b:4d:8e:53:63:
         29:aa:cb:78:cb:da:7b:66:ca:ec:f2:da:d3:35:56:1d:9b:dc:
         3f:76:36:a9:79:7a:43:e8:7e:7f:77:b5:fa:cd:8e:85:52:5b:
         1a:2e:8b:d4:7a:5f:a1:a5:2c:21:0f:e1:a8:8c:ff:a1:81:44:
         05:c4:d7:4d:22:a3:0e:b8:ce:45:03:3d:70:47:3e:31:2d:62:
         8a:e8:73:fd:9e:29:fc:d3:69:8f:0b:1a:53:84:0c:9e:f6:13:
         3e:6a:1c:48:14:03:20:f5:8f:dd:fe:e2:cc:77:b9:94:b7:1a:
         9f:01:e1:9c:fe:9c:e5:e0:76:75:11:70:e8:8b:00:fe:d8:e5:
         f5:f4:0a:24:c9:e5:c6:9b:05:b7:a2:b0:be:9c:f2:80:d0:37:
         97:5c:2b:f6:48:ab:c0:86:ce:86:1a:eb:84:0e:0c:72:29:4f:
         9a:f6:0a:cc:8c:02:f8:73:a4:1d:97:74:06:cb:25:3c:1e:5d:
         4b:e2:15:36:c4:8f:83:95:ac:e6:d9:57:4d:21:8a:ad:2a:6b:
         da:61:74:a4:dc:1c:20:ce:68:8b:fa:92:47:40:a7:fd:a6:d6:
         b8:5c:a9:e7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeVFog2r5HCF3bgD+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxODEzMDA0MVoXDTI1MDExNjE0MDA0MVowLzEtMCsGA1UEAxMk
NWIxMmRkZDktYzM2Ni00N2ZlLWExZmUtMjZlZTFmMmY2ZmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJifG1uCldIig/9p/SyHzrdK6d/qeomlLYBv
RcT4WBJxZBSKNzue3PTlQ28gpMrWsfA51Utll+ChhKCbBJwumjxfhWJzMNA180Fi
w9U2oe5P2ymerPHGbY61KyoNYhuUfqnUMWDFW9nhjvJh3SDPNV08oDV2MwgHZrqy
M8hFM92IATm+HQvjJHRrSK68a3VQlXoG+xgs6OkN4pKhGPVEkrvwyRw7EFEoF9q5
rpQGFg8+ZUbh+wxOcUEOb8FIs9hK+VX3/g5pksPQ13tcy9ZQIlhIgePd5U4FOy5v
B7mYODoffF3g8h7O8891OTYV0ge8ZmXGjYYkFGOC1bNEQ5dgNwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGQdBmb675ekINed9LIQcek8dXbXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODM1N2YzODUtMTg3Zi0z
OTUzLWEzNDQtMWYzNjlhMTZkZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAPfGO1anLxpPKvqlunA6TQbfM+wF68emRqs5HqHwAKK02OU2Mpqst4
y9p7Zsrs8trTNVYdm9w/djapeXpD6H5/d7X6zY6FUlsaLovUel+hpSwhD+GojP+h
gUQFxNdNIqMOuM5FAz1wRz4xLWKK6HP9nin802mPCxpThAye9hM+ahxIFAMg9Y/d
/uLMd7mUtxqfAeGc/pzl4HZ1EXDoiwD+2OX19AokyeXGmwW3orC+nPKA0DeXXCv2
SKvAhs6GGuuEDgxyKU+a9grMjAL4c6Qdl3QGyyU8Hl1L4hU2xI+Dlazm2VdNIYqt
KmvaYXSk3BwgzmiL+pJHQKf9pta4XKnn
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:34 2024 by rpki-client on console-fra.rpki-client.org