Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0240f69-a8a5-3522-a4fc-72891daecaac.roa
File:                     a0240f69-a8a5-3522-a4fc-72891daecaac.roa (raw, json)
Hash identifier:          XLaDExjdNOI8gqhRNULjsHFB6eHCwJHSlxKCK2gJp+o=
Subject key identifier:   67:F1:76:2E:D5:2D:F7:5C:47:49:11:41:DD:F8:C8:C1:F8:C3:D4:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584787211B4C701E100982A4FB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0240f69-a8a5-3522-a4fc-72891daecaac.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     397202
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:1b:4c:70:1e:10:09:82:a4:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=5c064cdd-9231-470b-ba52-38446cff2716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:05:b3:a8:0a:95:cb:ab:ac:9c:db:b4:e8:
                    22:96:5d:eb:a6:22:e7:f7:fa:aa:d9:16:0d:c9:50:
                    26:ea:8e:e6:60:1b:4b:e3:fe:5c:37:54:d5:4a:a5:
                    2e:26:af:a5:c7:84:9c:62:8f:d5:35:c1:9f:4d:45:
                    b5:25:ae:93:bf:32:f9:da:ac:f5:8d:d3:34:e9:3d:
                    39:1a:e7:70:08:b0:b3:b6:99:0a:00:da:78:88:b8:
                    42:f8:67:a9:81:f7:c6:b3:25:49:1c:16:9b:89:77:
                    51:68:99:60:8e:4a:50:c2:dc:80:ac:66:33:1c:32:
                    43:18:62:ff:ca:80:20:88:1a:a1:72:7c:c6:e5:2f:
                    33:c3:ca:03:d3:7a:5c:b0:17:e9:e0:ef:d3:23:12:
                    92:5c:53:fd:64:57:22:df:12:da:e3:a8:c3:19:33:
                    31:7d:20:ca:4e:3b:2e:7a:60:31:ff:b9:f2:53:46:
                    fb:6b:56:8b:ae:38:fc:34:81:d9:de:c9:00:1c:c3:
                    78:70:38:b0:43:dc:0d:1b:a5:84:72:d9:40:1d:0f:
                    9f:82:a1:94:ee:90:d4:9f:c0:7a:84:f3:3b:bd:8e:
                    5d:17:7c:2a:51:17:0f:8a:25:02:dd:61:67:ce:9b:
                    e8:0d:f4:73:cc:30:29:7a:cd:41:24:89:ea:b5:38:
                    55:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F1:76:2E:D5:2D:F7:5C:47:49:11:41:DD:F8:C8:C1:F8:C3:D4:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0240f69-a8a5-3522-a4fc-72891daecaac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ec:a4:7e:f2:b7:e8:77:d8:9c:65:bd:48:6d:9a:95:05:9e:
         6e:31:7e:b9:5c:ba:ca:0b:66:85:1e:9c:6d:47:9b:fe:07:26:
         8a:09:25:1a:36:3e:ad:53:74:fa:e5:4a:dd:87:02:3f:ab:2c:
         ca:c8:c2:37:4e:56:a0:26:a9:67:43:65:01:36:58:76:6f:01:
         c6:96:cd:67:b6:c2:e6:e8:71:fe:10:bc:7c:d7:76:76:9a:6a:
         80:fe:8a:25:de:c8:2e:e6:46:e1:6f:ae:de:27:b0:88:db:1c:
         c6:8f:f4:a4:0f:37:e2:78:94:97:81:26:48:e5:de:e5:2a:ca:
         4f:d7:8c:06:10:2c:19:1c:65:07:f2:bf:15:10:cc:6a:b6:21:
         31:d1:2a:37:d6:58:8d:fd:f9:5a:7c:1b:f6:fa:78:1c:45:99:
         6b:86:b0:39:20:bd:14:90:8a:8c:da:f0:d8:d7:77:79:3a:d3:
         f3:02:31:d8:d9:c9:6c:2a:7a:3c:74:bd:58:c9:a6:c2:cd:96:
         18:c9:36:32:95:9c:70:95:cd:0a:f5:46:11:08:2b:d2:d9:24:
         56:c6:fb:3a:c5:6d:34:44:f7:49:48:30:62:97:23:fc:f0:1d:
         78:82:b5:16:12:be:2d:3d:54:69:a1:71:71:78:6c:ef:66:f4:
         62:35:aa:da
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeHIRtMcB4QCYKk+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
NWMwNjRjZGQtOTIzMS00NzBiLWJhNTItMzg0NDZjZmYyNzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSsFs6gKlcurrJzbtOgill3rpiLn9/qq2RYN
yVAm6o7mYBtL4/5cN1TVSqUuJq+lx4ScYo/VNcGfTUW1Ja6TvzL52qz1jdM06T05
GudwCLCztpkKANp4iLhC+GepgffGsyVJHBabiXdRaJlgjkpQwtyArGYzHDJDGGL/
yoAgiBqhcnzG5S8zw8oD03pcsBfp4O/TIxKSXFP9ZFci3xLa46jDGTMxfSDKTjsu
emAx/7nyU0b7a1aLrjj8NIHZ3skAHMN4cDiwQ9wNG6WEctlAHQ+fgqGU7pDUn8B6
hPM7vY5dF3wqURcPiiUC3WFnzpvoDfRzzDApes1BJInqtThV5wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGfxdi7VLfdcR0kRQd34yMH4w9ThMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTAyNDBmNjktYThhNS0z
NTIyLWE0ZmMtNzI4OTFkYWVjYWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA27KR+8rfod9icZb1IbZqVBZ5uMX65XLrKC2aFHpxtR5v+ByaKCSUa
Nj6tU3T65UrdhwI/qyzKyMI3TlagJqlnQ2UBNlh2bwHGls1ntsLm6HH+ELx813Z2
mmqA/ool3sgu5kbhb67eJ7CI2xzGj/SkDzfieJSXgSZI5d7lKspP14wGECwZHGUH
8r8VEMxqtiEx0So31liN/flafBv2+ngcRZlrhrA5IL0UkIqM2vDY13d5OtPzAjHY
2clsKno8dL1YyabCzZYYyTYylZxwlc0K9UYRCCvS2SRWxvs6xW00RPdJSDBilyP8
8B14grUWEr4tPVRpoXFxeGzvZvRiNara
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:37 2024 by rpki-client on console-fra.rpki-client.org