Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa
File:                     a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa (raw, json)
Hash identifier:          WtpeLTB3bCWl/ekUw1uUTeftXlUXvnoSi2rhah2iAfc=
Subject key identifier:   6D:B2:5C:36:0C:BF:F3:8E:1F:45:DD:B7:C0:CB:C0:F7:BA:92:09:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B987149CC737B8CFBE72C4D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa
Signing time:             Thu 31 Oct 2024 14:16:40 +0000
ROA not before:           Thu 31 Oct 2024 14:16:40 +0000
ROA not after:            Wed 29 Jan 2025 15:16:40 +0000
asID:                     396603
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:87:14:9c:c7:37:b8:cf:be:72:c4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 31 14:16:40 2024 GMT
            Not After : Jan 29 15:16:40 2025 GMT
        Subject: CN=507cd840-9e27-49d0-a028-0c89345fbac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:36:54:c9:8b:6c:9a:36:60:7e:39:35:50:7e:
                    15:33:b6:49:0e:d6:d2:7d:aa:a2:c4:fc:b7:ab:25:
                    ad:3a:4c:27:cd:20:78:75:f1:64:b4:93:2b:ed:ec:
                    e6:55:ce:1d:02:e1:fa:5c:49:58:23:18:0e:4b:6f:
                    f0:13:c8:bd:45:5d:49:28:f2:fa:96:24:da:86:ea:
                    1b:b6:cc:d2:7d:56:85:8a:5c:97:f8:7f:d1:26:c5:
                    d7:0b:a3:cd:b6:1b:f9:b9:c1:e5:ca:7f:7b:8f:a8:
                    61:0b:b3:75:5c:d2:dc:7f:d8:38:6a:07:fe:22:11:
                    48:88:43:25:bb:c4:ec:5f:32:1d:54:a6:2f:ba:b1:
                    51:8a:25:67:96:a0:ac:e8:31:b8:d2:56:28:11:e3:
                    13:5a:ff:10:5d:7c:29:2c:43:7d:fc:db:b8:88:af:
                    a3:3f:83:41:50:b5:8d:e4:78:fe:42:5f:98:e0:52:
                    c9:a4:9d:65:de:eb:e5:69:f6:5d:ab:99:17:7c:69:
                    93:25:3a:d9:8c:dc:d1:51:3f:d7:2a:53:f0:aa:c3:
                    a0:45:2e:dd:0d:6e:33:19:02:91:b3:48:e2:f3:5f:
                    f2:52:61:e7:36:77:f8:f8:a4:73:9b:a1:2c:0a:79:
                    e4:a2:3f:46:0f:4c:20:47:37:92:4a:1f:0f:c0:25:
                    47:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B2:5C:36:0C:BF:F3:8E:1F:45:DD:B7:C0:CB:C0:F7:BA:92:09:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:9e:d9:2a:61:f9:f8:73:75:b4:ba:ab:04:03:75:2c:a5:ca:
         38:5f:71:38:2a:f9:fd:81:80:75:9e:73:38:81:1a:30:bd:32:
         96:f2:56:b5:bb:66:b7:3c:85:17:48:a5:9d:d6:0a:2e:28:9a:
         85:31:aa:29:ca:c0:e7:5a:bc:55:b5:28:96:39:77:7c:97:ff:
         b2:1b:40:98:79:c9:3d:b1:ca:28:96:5c:4c:4c:f1:6e:cd:0d:
         b4:bb:46:f6:03:20:b2:13:a1:96:26:f7:4c:de:98:44:38:a5:
         66:72:a7:09:cc:39:58:c9:f2:73:c4:4a:ca:60:b7:9e:20:bd:
         a2:f4:d1:a6:74:d5:a2:88:d0:b5:6c:d1:f9:02:61:d9:96:84:
         ee:b4:b5:0b:28:2e:3c:1d:19:a5:03:3c:a4:bd:5e:0e:7e:e8:
         85:d4:f6:d4:08:6c:ae:6a:d2:3d:fd:14:2e:63:3f:6f:cf:95:
         e3:15:ea:9a:5a:8d:e8:fb:b2:a6:4e:96:db:30:f5:96:0b:34:
         d8:e7:ac:bf:e0:d5:c1:3d:79:c3:69:dc:10:da:b2:b5:fb:b1:
         82:a6:83:55:b2:d1:9c:46:c4:3e:02:c1:ed:d3:78:67:93:cb:
         62:85:ff:b2:30:e6:f5:b2:ac:72:4d:11:ab:f4:9e:7d:2c:eb:
         86:12:d0:3b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEe5hxScxze4z75yxNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAzMTE0MTY0MFoXDTI1MDEyOTE1MTY0MFowLzEtMCsGA1UEAxMk
NTA3Y2Q4NDAtOWUyNy00OWQwLWEwMjgtMGM4OTM0NWZiYWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTZUyYtsmjZgfjk1UH4VM7ZJDtbSfaqixPy3
qyWtOkwnzSB4dfFktJMr7ezmVc4dAuH6XElYIxgOS2/wE8i9RV1JKPL6liTahuob
tszSfVaFilyX+H/RJsXXC6PNthv5ucHlyn97j6hhC7N1XNLcf9g4agf+IhFIiEMl
u8TsXzIdVKYvurFRiiVnlqCs6DG40lYoEeMTWv8QXXwpLEN9/Nu4iK+jP4NBULWN
5Hj+Ql+Y4FLJpJ1l3uvlafZdq5kXfGmTJTrZjNzRUT/XKlPwqsOgRS7dDW4zGQKR
s0ji81/yUmHnNnf4+KRzm6EsCnnkoj9GD0wgRzeSSh8PwCVHOQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFG2yXDYMv/OOH0Xdt8DLwPe6kgnqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTMwM2IxYjktYmM1YS0z
ZDBhLWI0ZmUtNmIzODJkNjMzOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCvntkqYfn4c3W0uqsEA3Uspco4X3E4Kvn9gYB1nnM4gRowvTKW8la1
u2a3PIUXSKWd1gouKJqFMaopysDnWrxVtSiWOXd8l/+yG0CYeck9scoollxMTPFu
zQ20u0b2AyCyE6GWJvdM3phEOKVmcqcJzDlYyfJzxErKYLeeIL2i9NGmdNWiiNC1
bNH5AmHZloTutLULKC48HRmlAzykvV4OfuiF1PbUCGyuatI9/RQuYz9vz5XjFeqa
Wo3o+7KmTpbbMPWWCzTY56y/4NXBPXnDadwQ2rK1+7GCpoNVstGcRsQ+AsHt03hn
k8tihf+yMOb1sqxyTRGr9J59LOuGEtA7
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:40 2024 by rpki-client on console-fra.rpki-client.org