Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99138138-0849-359b-9736-a8f84dafd543.roa
File:                     99138138-0849-359b-9736-a8f84dafd543.roa (raw, json)
Hash identifier:          e6Wi1Hn24whwy1qJMCnU+yS0eFcy3jq2WCjO4u+vVi8=
Subject key identifier:   5D:21:A9:C3:6D:67:8B:DB:2B:9E:AF:FA:97:DC:09:CB:91:30:2D:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858477EBCC36920B067A7C22EE540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99138138-0849-359b-9736-a8f84dafd543.roa
Signing time:             Thu 10 Oct 2024 12:52:08 +0000
ROA not before:           Thu 10 Oct 2024 12:52:08 +0000
ROA not after:            Wed 08 Jan 2025 13:52:08 +0000
asID:                     396541
IP address blocks:        192.42.176.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:bc:c3:69:20:b0:67:a7:c2:2e:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 12:52:08 2024 GMT
            Not After : Jan  8 13:52:08 2025 GMT
        Subject: CN=a434db09-76c9-42bc-a7f0-b0a95b93ce94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:05:85:01:2f:98:a4:26:87:2c:6a:de:a9:94:
                    75:78:4c:27:1a:0e:d3:3a:a3:01:d8:39:3d:85:08:
                    64:0d:d6:aa:bf:ea:c2:2c:07:11:82:41:26:12:d3:
                    db:63:fb:4a:3c:3c:02:47:92:24:55:4c:39:54:d3:
                    ea:f5:c9:fb:65:2c:18:d7:42:d9:8a:d7:ed:c0:8a:
                    ab:02:c6:f2:66:02:66:af:ca:30:6b:8f:44:2a:5a:
                    33:fe:9b:e2:f2:55:31:e8:41:2c:19:66:30:c1:ef:
                    c7:e6:da:a7:8a:56:8c:85:d5:de:95:cc:9a:79:57:
                    52:8a:6a:a6:22:d5:a0:a2:ca:83:d5:31:11:3a:bf:
                    ca:43:63:68:e8:6a:5e:bd:3a:c2:76:1b:17:99:a1:
                    69:dc:b9:92:9b:9b:8d:22:67:65:ab:b0:ad:83:64:
                    24:1f:ef:92:90:bc:d3:d2:bf:c6:3e:42:06:d5:4b:
                    08:9f:8f:32:e6:c1:19:e1:05:f4:21:19:ae:66:9d:
                    3d:80:7a:31:9f:6a:bd:6c:d3:02:0a:bc:a9:08:a3:
                    f7:ac:f2:d2:17:fe:ac:10:09:e8:f3:5f:a7:90:bf:
                    b0:28:d7:6d:20:16:2a:f2:96:fe:ba:b3:97:49:0c:
                    34:2f:a2:10:39:03:75:ce:3e:56:d5:cf:23:f9:e9:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:21:A9:C3:6D:67:8B:DB:2B:9E:AF:FA:97:DC:09:CB:91:30:2D:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99138138-0849-359b-9736-a8f84dafd543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:71:6f:01:8f:d3:e0:b7:7d:1c:28:dd:0a:31:ee:2e:de:6f:
         9a:2a:33:f2:bc:d3:5f:bb:b8:57:02:ac:9f:c4:61:6d:ad:6a:
         6b:84:09:1d:05:01:68:2d:69:e1:c3:d7:dd:a3:7a:9c:46:a7:
         7b:30:eb:3d:c5:be:22:3f:85:a9:b6:93:58:2a:33:96:63:90:
         14:75:90:33:20:e4:f9:e4:49:44:68:c2:17:ed:a0:ff:16:d0:
         7c:33:17:45:6b:80:10:36:c7:2b:25:99:7f:8d:fc:a4:69:6f:
         50:db:09:9a:3c:c5:03:ef:6c:a4:51:3d:d4:09:0f:2e:bb:9d:
         dd:73:f2:2e:f3:e3:bd:9d:5c:77:37:88:83:af:43:37:f4:c8:
         0f:00:d1:e5:70:b2:9e:1e:aa:57:77:96:fc:47:0b:db:6a:4a:
         4e:d2:c8:92:e3:48:17:9a:e4:55:3e:3c:16:c8:cb:e6:8b:5d:
         b1:ec:3f:3b:36:2c:de:38:47:ec:70:5b:50:6a:a2:54:2f:54:
         34:a1:3b:a0:02:51:4f:8e:4a:7e:e6:02:3c:b2:86:1d:ab:02:
         1c:b1:f0:67:49:e2:6f:2e:51:ca:4b:8a:f3:b6:23:31:0e:d2:
         3c:22:1f:55:45:22:7c:29:6e:a0:de:07:75:c5:a6:f6:49:1d:
         ec:fe:77:2f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEd+vMNpILBnp8Iu5UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxMDEyNTIwOFoXDTI1MDEwODEzNTIwOFowLzEtMCsGA1UEAxMk
YTQzNGRiMDktNzZjOS00MmJjLWE3ZjAtYjBhOTViOTNjZTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwWFAS+YpCaHLGreqZR1eEwnGg7TOqMB2Dk9
hQhkDdaqv+rCLAcRgkEmEtPbY/tKPDwCR5IkVUw5VNPq9cn7ZSwY10LZitftwIqr
AsbyZgJmr8owa49EKloz/pvi8lUx6EEsGWYwwe/H5tqnilaMhdXelcyaeVdSimqm
ItWgosqD1TEROr/KQ2No6GpevTrCdhsXmaFp3LmSm5uNImdlq7Ctg2QkH++SkLzT
0r/GPkIG1UsIn48y5sEZ4QX0IRmuZp09gHoxn2q9bNMCCrypCKP3rPLSF/6sEAno
81+nkL+wKNdtIBYq8pb+urOXSQw0L6IQOQN1zj5W1c8j+en6XQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFF0hqcNtZ4vbK56v+pfcCcuRMC0+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTkxMzgxMzgtMDg0OS0z
NTliLTk3MzYtYThmODRkYWZkNTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQApcW8Bj9Pgt30cKN0KMe4u3m+aKjPyvNNfu7hXAqyfxGFtrWprhAkd
BQFoLWnhw9fdo3qcRqd7MOs9xb4iP4WptpNYKjOWY5AUdZAzIOT55ElEaMIX7aD/
FtB8MxdFa4AQNscrJZl/jfykaW9Q2wmaPMUD72ykUT3UCQ8uu53dc/Iu8+O9nVx3
N4iDr0M39MgPANHlcLKeHqpXd5b8RwvbakpO0siS40gXmuRVPjwWyMvmi12x7D87
NizeOEfscFtQaqJUL1Q0oTugAlFPjkp+5gI8soYdqwIcsfBnSeJvLlHKS4rztiMx
DtI8Ih9VRSJ8KW6g3gd1xab2SR3s/ncv
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:10 2024 by rpki-client on console-ams.rpki-client.org