Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89f44f4b-7124-38dc-9fef-c1d0b4248251.roa
File:                     89f44f4b-7124-38dc-9fef-c1d0b4248251.roa (raw, json)
Hash identifier:          75xZe3rZy9TwVWMcwxrF13LU58M3uOAnFhuHGVaEZe4=
Subject key identifier:   5E:42:EF:70:31:F6:E5:79:71:7A:D0:87:F5:54:FE:2F:22:90:0F:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847A5D13B3B68737E5D67C69000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89f44f4b-7124-38dc-9fef-c1d0b4248251.roa
Signing time:             Thu 24 Oct 2024 12:49:54 +0000
ROA not before:           Thu 24 Oct 2024 12:49:54 +0000
ROA not after:            Wed 22 Jan 2025 13:49:54 +0000
asID:                     396583
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d1:3b:3b:68:73:7e:5d:67:c6:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 24 12:49:54 2024 GMT
            Not After : Jan 22 13:49:54 2025 GMT
        Subject: CN=4e384ce8-9b60-41bf-9de9-1c5c06ac557e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a6:a2:27:90:f2:9e:11:49:c5:4f:78:ae:9a:
                    79:bf:01:09:32:42:06:cb:45:29:f6:a0:9f:36:ef:
                    5e:3d:84:3a:2d:e3:f7:ca:45:e7:b4:5e:49:2e:85:
                    2f:62:12:4a:d6:16:34:ef:cc:a3:41:26:80:66:33:
                    42:08:6f:78:e6:60:35:99:bf:4c:a9:ac:66:0f:13:
                    ad:15:1d:4b:99:8b:f4:3f:1d:45:41:7e:b0:09:ee:
                    c4:00:0e:ab:cb:a9:a3:67:4e:0e:93:aa:cb:30:6d:
                    d8:89:39:b0:83:d1:d0:87:9c:35:55:cb:ca:92:dd:
                    d6:35:54:e3:54:85:6f:a2:30:c4:31:28:40:13:24:
                    55:b9:d0:67:bd:fe:aa:8d:46:cb:45:8c:2a:5e:3d:
                    e5:84:de:1d:6c:8d:be:d3:12:32:54:64:24:0e:6c:
                    c2:6d:56:37:bd:57:f3:7e:16:e9:85:ed:e9:88:43:
                    5e:5b:6c:f9:43:81:c0:17:da:01:d4:11:9a:7f:e4:
                    62:22:f5:ba:d3:a7:4a:94:3e:11:e6:38:be:9e:95:
                    82:51:5b:60:55:70:5f:45:92:45:18:d0:fe:41:6d:
                    50:36:3f:cd:61:b3:90:9d:36:77:2e:a9:d8:e3:4d:
                    ca:68:9d:7e:a6:56:5a:88:50:48:08:52:d1:9c:00:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:42:EF:70:31:F6:E5:79:71:7A:D0:87:F5:54:FE:2F:22:90:0F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89f44f4b-7124-38dc-9fef-c1d0b4248251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:18:16:83:94:ee:18:c3:de:f2:10:a6:11:9a:54:53:10:3d:
         b0:e3:16:26:40:fc:25:f2:14:46:f7:c7:f3:10:43:98:34:40:
         99:90:15:19:ef:fd:35:fc:f6:84:bc:5c:b5:00:9f:a4:ae:de:
         de:9b:24:a9:42:45:04:22:fb:83:ce:7a:17:06:24:d8:d5:38:
         a1:27:13:03:4d:d2:f9:98:80:45:fc:55:42:87:7d:f8:f2:dc:
         30:c2:22:ca:c4:69:dc:75:b7:e3:b0:8b:ff:46:dd:8e:8b:58:
         18:04:9f:50:d6:8a:ef:f9:53:e2:c2:f2:18:e0:a5:06:ec:f5:
         2e:e5:52:25:93:28:98:e5:e7:4f:f1:e6:fc:61:f1:2a:d2:b7:
         62:fb:d9:fe:8c:0b:32:08:02:c6:07:10:92:a8:c1:f2:d7:48:
         40:5a:71:10:94:df:65:76:a1:c8:d3:c2:fe:8c:e5:a2:22:e0:
         d1:3c:c5:e9:99:75:47:79:72:56:ef:24:56:2d:50:cb:5a:8c:
         a9:00:a3:f8:a3:3a:5d:fa:2d:5f:c0:56:56:3e:c2:b4:eb:79:
         ef:d9:be:16:6e:99:a7:ed:3b:65:31:f2:e1:a8:5f:ca:b0:8d:
         7f:6f:0a:23:43:b1:ff:10:fb:fd:7d:bf:ba:2a:e8:d6:87:70:
         01:97:c5:5c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEel0Ts7aHN+XWfGkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAyNDEyNDk1NFoXDTI1MDEyMjEzNDk1NFowLzEtMCsGA1UEAxMk
NGUzODRjZTgtOWI2MC00MWJmLTlkZTktMWM1YzA2YWM1NTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KaiJ5DynhFJxU94rpp5vwEJMkIGy0Up9qCf
Nu9ePYQ6LeP3ykXntF5JLoUvYhJK1hY078yjQSaAZjNCCG945mA1mb9MqaxmDxOt
FR1LmYv0Px1FQX6wCe7EAA6ry6mjZ04Ok6rLMG3YiTmwg9HQh5w1VcvKkt3WNVTj
VIVvojDEMShAEyRVudBnvf6qjUbLRYwqXj3lhN4dbI2+0xIyVGQkDmzCbVY3vVfz
fhbphe3piENeW2z5Q4HAF9oB1BGaf+RiIvW606dKlD4R5ji+npWCUVtgVXBfRZJF
GND+QW1QNj/NYbOQnTZ3LqnY403KaJ1+plZaiFBICFLRnACn8wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFF5C73Ax9uV5cXrQh/VU/i8ikA8MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODlmNDRmNGItNzEyNC0z
OGRjLTlmZWYtYzFkMGI0MjQ4MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC+GBaDlO4Yw97yEKYRmlRTED2w4xYmQPwl8hRG98fzEEOYNECZkBUZ
7/01/PaEvFy1AJ+krt7emySpQkUEIvuDznoXBiTY1TihJxMDTdL5mIBF/FVCh334
8twwwiLKxGncdbfjsIv/Rt2Oi1gYBJ9Q1orv+VPiwvIY4KUG7PUu5VIlkyiY5edP
8eb8YfEq0rdi+9n+jAsyCALGBxCSqMHy10hAWnEQlN9ldqHI08L+jOWiIuDRPMXp
mXVHeXJW7yRWLVDLWoypAKP4ozpd+i1fwFZWPsK063nv2b4Wbpmn7TtlMfLhqF/K
sI1/bwojQ7H/EPv9fb+6KujWh3ABl8Vc
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:07 2024 by rpki-client on console-ams.rpki-client.org