Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8349583-d7cd-3ef6-ad88-9e6b1c2a9c54.roa
File:                     a8349583-d7cd-3ef6-ad88-9e6b1c2a9c54.roa (raw, json)
Hash identifier:          7myw49+Ww4U1FN3yUsiwD/cRwDSEZHVrU/SvLKDN+G0=
Subject key identifier:   DC:84:E6:8F:C5:AD:2F:25:6D:A0:6A:C3:B6:71:3A:FA:D7:27:3F:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847B3EDBE12B848D59C40861440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8349583-d7cd-3ef6-ad88-9e6b1c2a9c54.roa
Signing time:             Tue 29 Oct 2024 14:08:40 +0000
ROA not before:           Tue 29 Oct 2024 14:08:40 +0000
ROA not after:            Mon 27 Jan 2025 15:08:40 +0000
asID:                     396599
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:ed:be:12:b8:48:d5:9c:40:86:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 14:08:40 2024 GMT
            Not After : Jan 27 15:08:40 2025 GMT
        Subject: CN=35dbe936-fea2-475c-9305-f91be15448a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:39:d0:0c:94:49:63:7d:84:43:21:a7:d0:85:
                    1f:79:5c:0e:3f:b1:b1:1b:7a:76:a0:e9:50:0d:c2:
                    ac:25:5f:e0:ce:fd:1f:b8:8f:1e:4b:d4:11:3b:f3:
                    53:a0:7a:8a:7b:41:cd:b4:10:79:16:bc:20:28:c6:
                    6f:5a:fa:4c:46:c5:a4:20:89:92:07:17:12:84:32:
                    3e:16:9d:8d:f0:2b:3e:54:08:b4:cd:6b:ad:45:60:
                    a5:14:ec:d1:1e:f7:7d:e7:b9:35:74:2d:62:71:b1:
                    17:e2:1e:31:16:82:73:23:0f:1b:1d:05:5a:16:83:
                    f7:e1:09:69:aa:db:00:71:96:e4:b2:b3:e9:6a:1e:
                    46:ea:8a:e8:46:06:60:93:9c:e7:6a:67:db:ea:db:
                    39:38:ea:a6:e2:55:f3:81:20:e0:5d:0c:fc:59:e9:
                    8f:8c:f5:ea:a8:86:30:df:7d:09:84:8b:27:c9:b2:
                    65:7f:18:30:21:ee:d5:d9:86:fb:99:b4:93:de:ca:
                    86:33:5c:e2:7b:aa:56:2b:6b:6f:00:16:79:05:04:
                    f5:bc:15:c8:f5:b4:9f:9f:65:cc:d4:37:d2:d2:04:
                    8e:16:63:56:e3:5b:4d:40:ae:49:2e:25:14:6f:e4:
                    5a:51:dc:60:19:27:3a:0d:89:eb:ce:a0:2c:7b:d7:
                    99:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:84:E6:8F:C5:AD:2F:25:6D:A0:6A:C3:B6:71:3A:FA:D7:27:3F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8349583-d7cd-3ef6-ad88-9e6b1c2a9c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:e1:e0:35:9d:73:d1:34:9c:86:c6:07:67:9f:ee:ec:96:f7:
         5e:75:39:c7:7f:5e:35:74:32:c9:01:48:57:48:0f:c8:8f:4d:
         97:3f:a7:45:2a:10:dc:f4:79:96:78:a0:eb:d2:bc:f9:32:52:
         81:f7:37:8c:a9:d0:d6:af:c5:45:ba:28:ad:00:9c:86:c6:39:
         c2:10:1e:8e:d3:af:4d:76:9f:23:60:78:2b:86:17:cf:54:c6:
         40:40:7b:15:2e:e1:a0:24:74:01:b8:f3:eb:32:28:91:be:cf:
         b3:72:7e:72:67:8d:09:c7:2d:63:1c:ab:59:28:48:c3:04:4d:
         d2:e4:11:0b:d4:14:fd:9a:b9:dc:ea:a3:4c:78:11:20:64:f8:
         11:38:71:c9:07:db:e6:9a:aa:38:e6:f3:fd:5a:13:9b:d1:7e:
         32:2a:86:67:66:bc:76:40:76:0d:e8:b9:f8:f9:06:a2:c2:b5:
         d4:b3:79:87:3d:e4:02:b4:ca:eb:01:93:5f:05:8e:c3:75:e2:
         0e:4f:b3:34:03:dd:4b:12:87:ef:28:4a:5c:b3:b3:38:88:6f:
         01:e7:70:5d:9f:85:8f:44:7a:71:10:35:30:06:d2:42:9f:15:
         96:3a:03:d7:a1:ab:00:b4:41:af:00:b1:7f:0c:37:e0:70:9e:
         35:2e:41:40
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEez7b4SuEjVnECGFEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAyOTE0MDg0MFoXDTI1MDEyNzE1MDg0MFowLzEtMCsGA1UEAxMk
MzVkYmU5MzYtZmVhMi00NzVjLTkzMDUtZjkxYmUxNTQ0OGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjnQDJRJY32EQyGn0IUfeVwOP7GxG3p2oOlQ
DcKsJV/gzv0fuI8eS9QRO/NToHqKe0HNtBB5FrwgKMZvWvpMRsWkIImSBxcShDI+
Fp2N8Cs+VAi0zWutRWClFOzRHvd957k1dC1icbEX4h4xFoJzIw8bHQVaFoP34Qlp
qtsAcZbksrPpah5G6oroRgZgk5znamfb6ts5OOqm4lXzgSDgXQz8WemPjPXqqIYw
330JhIsnybJlfxgwIe7V2Yb7mbST3sqGM1zie6pWK2tvABZ5BQT1vBXI9bSfn2XM
1DfS0gSOFmNW41tNQK5JLiUUb+RaUdxgGSc6DYnrzqAse9eZYwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNyE5o/FrS8lbaBqw7ZxOvrXJz8jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTgzNDk1ODMtZDdjZC0z
ZWY2LWFkODgtOWU2YjFjMmE5YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC84eA1nXPRNJyGxgdnn+7slvdedTnHf141dDLJAUhXSA/Ij02XP6dF
KhDc9HmWeKDr0rz5MlKB9zeMqdDWr8VFuiitAJyGxjnCEB6O069Ndp8jYHgrhhfP
VMZAQHsVLuGgJHQBuPPrMiiRvs+zcn5yZ40Jxy1jHKtZKEjDBE3S5BEL1BT9mrnc
6qNMeBEgZPgROHHJB9vmmqo45vP9WhOb0X4yKoZnZrx2QHYN6Ln4+QaiwrXUs3mH
PeQCtMrrAZNfBY7DdeIOT7M0A91LEofvKEpcs7M4iG8B53Bdn4WPRHpxEDUwBtJC
nxWWOgPXoasAtEGvALF/DDfgcJ41LkFA
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:11 2024 by rpki-client on console-ams.rpki-client.org