Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9425dec1-6891-3c5c-a87a-db7b63520cb4.roa
File:                     9425dec1-6891-3c5c-a87a-db7b63520cb4.roa (raw, json)
Hash identifier:          zvtw6Q3HLgFgjTo0olgfh/BZObx5vLh32QzvkIhk2zI=
Subject key identifier:   0E:FD:27:AE:63:43:04:C0:8F:7B:CD:EE:4C:CC:26:C2:22:F4:4D:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B3EDBDB461BC55EDEEBA7D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9425dec1-6891-3c5c-a87a-db7b63520cb4.roa
Signing time:             Tue 29 Oct 2024 14:08:40 +0000
ROA not before:           Tue 29 Oct 2024 14:08:40 +0000
ROA not after:            Mon 27 Jan 2025 15:08:40 +0000
asID:                     36629
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:ed:bd:b4:61:bc:55:ed:ee:ba:7d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 14:08:40 2024 GMT
            Not After : Jan 27 15:08:40 2025 GMT
        Subject: CN=9eeddb15-9fdf-4ef1-bda7-30865200426a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:aa:2e:f7:5b:d4:1b:4e:f6:bd:38:09:fe:
                    d1:56:8a:9c:72:e1:f1:87:d5:32:c4:9c:3a:04:42:
                    db:a7:90:e6:54:db:89:55:c4:00:78:3e:d1:27:74:
                    50:e9:3c:46:ab:2b:13:bb:1c:8b:85:90:a9:2f:46:
                    c1:cb:8a:64:fa:81:a1:c6:32:8a:25:f4:46:42:4c:
                    b1:55:96:e9:4d:65:fa:f8:5f:c9:d5:46:43:a4:dd:
                    95:c7:0a:35:36:87:85:6f:ba:0e:28:b2:b6:a9:4b:
                    74:7a:a4:fe:48:c9:57:a9:47:55:81:cb:93:ec:fa:
                    5a:82:8c:f8:21:8f:e5:14:22:05:75:43:39:46:8e:
                    91:20:53:de:da:56:b3:7e:7d:b8:e0:4a:a6:7e:07:
                    67:bf:e6:cd:5c:ab:d8:4f:1f:7b:5a:b0:10:a8:58:
                    0c:1d:16:b9:7e:2e:43:80:a2:41:5d:52:05:b6:5e:
                    e5:be:c6:1d:b9:0f:c9:04:d7:7d:14:3a:64:94:a0:
                    51:8e:f6:1a:ab:5d:90:19:90:d9:59:07:77:f4:59:
                    11:d4:6b:de:57:64:6d:48:81:50:31:c4:e9:96:1e:
                    4e:5d:d0:a8:f4:1d:01:dc:5b:61:f8:56:1e:e8:c7:
                    b8:45:8d:e5:2d:37:9c:71:1a:0c:0a:53:39:89:d4:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FD:27:AE:63:43:04:C0:8F:7B:CD:EE:4C:CC:26:C2:22:F4:4D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9425dec1-6891-3c5c-a87a-db7b63520cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:e6:1c:f8:ef:6a:4a:46:3b:ba:50:bc:ae:df:1f:ed:2b:bc:
         b6:0f:b0:bf:b7:aa:1f:0a:43:a2:97:b6:aa:57:14:ba:74:98:
         15:a1:90:05:34:ff:73:eb:d9:a1:4f:b5:d6:e0:1f:19:2c:d9:
         cb:98:7e:eb:9c:3b:d1:98:cc:a2:58:56:b2:e5:f0:b7:37:fc:
         fe:00:3d:e6:23:8d:75:d3:f1:31:63:ea:4b:44:b0:ea:19:d2:
         36:f6:19:8d:9b:17:72:97:ee:7b:57:80:81:4d:0b:cf:4e:7d:
         66:c4:a1:23:a4:e0:04:ed:61:60:18:1c:e5:c9:b1:57:58:fa:
         f9:cb:4a:ac:c4:ab:dd:29:f2:b7:c0:88:f9:fa:4f:d5:a2:f8:
         09:a8:f5:0e:64:f7:43:7e:6e:d5:72:3a:c0:ac:a5:2a:13:1f:
         2d:cf:4e:f3:11:0a:a8:a3:51:cc:22:af:52:da:88:3a:33:8e:
         cf:24:39:1f:54:7d:08:54:bc:fa:b6:0b:1b:63:91:9c:19:b1:
         ad:fc:8b:10:16:e4:20:75:c5:3f:62:19:c7:9f:36:fe:2c:41:
         d1:ef:89:ee:e6:59:1f:64:fb:a0:fb:4e:d9:58:9e:44:3e:f6:
         b9:08:16:2e:63:4f:e1:d9:bc:d9:6b:8b:65:d5:20:9b:d4:fc:
         ba:fe:e6:86
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEez7b20YbxV7e66fSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAyOTE0MDg0MFoXDTI1MDEyNzE1MDg0MFowLzEtMCsGA1UEAxMk
OWVlZGRiMTUtOWZkZi00ZWYxLWJkYTctMzA4NjUyMDA0MjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmKqLvdb1BtO9r04Cf7RVoqccuHxh9UyxJw6
BELbp5DmVNuJVcQAeD7RJ3RQ6TxGqysTuxyLhZCpL0bBy4pk+oGhxjKKJfRGQkyx
VZbpTWX6+F/J1UZDpN2Vxwo1NoeFb7oOKLK2qUt0eqT+SMlXqUdVgcuT7Ppagoz4
IY/lFCIFdUM5Ro6RIFPe2lazfn244Eqmfgdnv+bNXKvYTx97WrAQqFgMHRa5fi5D
gKJBXVIFtl7lvsYduQ/JBNd9FDpklKBRjvYaq12QGZDZWQd39FkR1GveV2RtSIFQ
McTplh5OXdCo9B0B3Fth+FYe6Me4RY3lLTeccRoMClM5idT3DQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA79J65jQwTAj3vN7kzMJsIi9E2fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTQyNWRlYzEtNjg5MS0z
YzVjLWE4N2EtZGI3YjYzNTIwY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCu5hz472pKRju6ULyu3x/tK7y2D7C/t6ofCkOil7aqVxS6dJgVoZAF
NP9z69mhT7XW4B8ZLNnLmH7rnDvRmMyiWFay5fC3N/z+AD3mI4110/ExY+pLRLDq
GdI29hmNmxdyl+57V4CBTQvPTn1mxKEjpOAE7WFgGBzlybFXWPr5y0qsxKvdKfK3
wIj5+k/VovgJqPUOZPdDfm7VcjrArKUqEx8tz07zEQqoo1HMIq9S2og6M47PJDkf
VH0IVLz6tgsbY5GcGbGt/IsQFuQgdcU/YhnHnzb+LEHR74nu5lkfZPug+07ZWJ5E
Pva5CBYuY0/h2bzZa4tl1SCb1Py6/uaG
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:36 2024 by rpki-client on console-fra.rpki-client.org