Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86663264-d0be-3b18-8387-15c4db542f5d.roa
File:                     86663264-d0be-3b18-8387-15c4db542f5d.roa (raw, json)
Hash identifier:          j6VugMM6c+ptlSkyBc4Ud8hB5DsnFDtJg76JknznMpo=
Subject key identifier:   31:D8:5F:C0:64:4C:DC:FE:76:18:98:06:09:CD:30:5D:D4:77:BE:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C58A571EACE5926C1C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86663264-d0be-3b18-8387-15c4db542f5d.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     396589
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c5:8a:57:1e:ac:e5:92:6c:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=da56ef0e-8f34-495d-bdf8-91d678d86ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:01:97:77:8e:45:53:b2:c8:c0:4d:8d:58:a7:
                    fe:a8:1c:07:8e:9d:15:92:30:06:dd:8f:1e:46:eb:
                    a7:1b:6c:8d:17:0c:10:eb:97:9a:14:4c:32:da:9b:
                    c2:21:60:75:7d:a4:3b:1a:2c:cf:18:6b:cb:07:6c:
                    10:3e:5e:0e:69:fd:07:79:d6:1c:12:7a:22:82:3f:
                    7c:96:bb:e2:66:96:33:98:63:27:6c:b5:12:4d:17:
                    c5:c7:e4:65:1a:9b:67:e4:cf:c7:a4:38:40:d2:4b:
                    30:8e:6d:c0:6a:cf:31:a7:89:06:cc:0d:4e:ee:1a:
                    5c:50:ae:7c:9d:d1:e4:2f:8f:ae:d5:36:d9:7f:d8:
                    ae:5d:8f:31:e0:73:b7:27:ca:06:07:a1:6a:d1:27:
                    5d:e9:82:10:41:73:97:5b:24:f5:14:49:89:a1:a6:
                    72:e8:87:d6:f2:d7:61:32:0a:d3:ff:67:1e:e9:d5:
                    b2:cd:78:df:de:14:7c:bc:a5:d3:3e:2b:48:33:68:
                    85:17:e9:83:6f:91:ca:80:c9:fa:8d:14:e5:91:7c:
                    eb:3e:b4:76:28:87:83:9f:95:ce:5d:a9:10:0b:f4:
                    e2:21:55:cd:ff:7c:5e:20:54:7f:b3:35:3a:0c:c0:
                    1b:c2:34:b1:f1:30:7d:b7:e1:f0:67:1b:32:65:13:
                    ca:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D8:5F:C0:64:4C:DC:FE:76:18:98:06:09:CD:30:5D:D4:77:BE:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86663264-d0be-3b18-8387-15c4db542f5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:5e:10:bc:fe:22:64:3e:b4:36:53:cd:c8:19:73:67:f3:18:
         5b:01:fa:e2:be:29:1f:fc:1c:71:26:c9:e3:26:c1:7e:de:f5:
         70:a4:c3:23:f5:05:d2:0e:76:eb:23:d4:c4:fe:3b:44:8e:cd:
         b9:29:24:bd:32:93:76:cd:87:ac:ad:8b:81:82:e8:d2:86:08:
         23:2c:a2:5f:c6:38:a7:7c:54:8a:78:e3:18:d1:57:ce:31:ff:
         d5:c3:86:13:96:fd:96:9d:17:17:0b:7b:8c:89:c0:bc:ab:30:
         9b:f1:c7:a1:a0:a8:35:8f:ab:90:1e:a2:55:ec:75:69:ae:78:
         f9:94:85:a0:e7:b4:d4:75:fb:86:85:14:dd:93:29:54:ee:ab:
         81:48:51:7d:62:c6:fe:84:6b:54:d0:f3:db:5b:99:97:5a:4e:
         f5:d8:5e:f8:de:f5:e3:22:ff:41:df:35:d3:2b:d6:99:28:a3:
         4c:c7:6d:f4:b4:e1:5f:2a:1d:a2:b1:cc:9c:55:0f:cf:84:10:
         63:13:b7:40:cb:3e:37:bf:77:e8:e8:15:19:bc:59:ca:22:e2:
         47:2a:6a:d2:9d:18:32:a0:64:46:7d:e1:f8:98:d6:37:3c:b7:
         8d:71:44:5f:c8:2b:1e:5d:72:9b:9c:3c:f0:90:66:37:52:55:
         f3:2b:2c:34
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdhcMWKVx6s5ZJsHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MDkzMDAxMDAzMVoXDTI0MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
ZGE1NmVmMGUtOGYzNC00OTVkLWJkZjgtOTFkNjc4ZDg2ZWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AGXd45FU7LIwE2NWKf+qBwHjp0VkjAG3Y8e
RuunG2yNFwwQ65eaFEwy2pvCIWB1faQ7GizPGGvLB2wQPl4Oaf0HedYcEnoigj98
lrviZpYzmGMnbLUSTRfFx+RlGptn5M/HpDhA0kswjm3Aas8xp4kGzA1O7hpcUK58
ndHkL4+u1TbZf9iuXY8x4HO3J8oGB6Fq0Sdd6YIQQXOXWyT1FEmJoaZy6IfW8tdh
MgrT/2ce6dWyzXjf3hR8vKXTPitIM2iFF+mDb5HKgMn6jRTlkXzrPrR2KIeDn5XO
XakQC/TiIVXN/3xeIFR/szU6DMAbwjSx8TB9t+HwZxsyZRPK6QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDHYX8BkTNz+dhiYBgnNMF3Ud74BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODY2NjMyNjQtZDBiZS0z
YjE4LTgzODctMTVjNGRiNTQyZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBTXhC8/iJkPrQ2U83IGXNn8xhbAfrivikf/BxxJsnjJsF+3vVwpMMj
9QXSDnbrI9TE/jtEjs25KSS9MpN2zYesrYuBgujShggjLKJfxjinfFSKeOMY0VfO
Mf/Vw4YTlv2WnRcXC3uMicC8qzCb8cehoKg1j6uQHqJV7HVprnj5lIWg57TUdfuG
hRTdkylU7quBSFF9Ysb+hGtU0PPbW5mXWk712F743vXjIv9B3zXTK9aZKKNMx230
tOFfKh2iscycVQ/PhBBjE7dAyz43v3fo6BUZvFnKIuJHKmrSnRgyoGRGfeH4mNY3
PLeNcURfyCseXXKbnDzwkGY3UlXzKyw0
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:35 2024 by rpki-client on console-fra.rpki-client.org