Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b442620e-ac18-3e7d-9341-fc1e63a6d528.roa
File:                     b442620e-ac18-3e7d-9341-fc1e63a6d528.roa (raw, json)
Hash identifier:          TWbDaaacyILZXnY3f5gjEmSiT3/B49LNCi5gXGv60zc=
Subject key identifier:   88:CD:41:1D:EC:DD:13:E1:90:34:37:B0:53:E9:C3:C8:12:23:2D:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847872118E869C1E4FCDE93AD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b442620e-ac18-3e7d-9341-fc1e63a6d528.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     396606
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:18:e8:69:c1:e4:fc:de:93:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=3e4a04b6-8e31-4655-a402-c102ea27b5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:18:19:c5:2d:85:70:53:38:10:cf:5f:7b:
                    eb:22:f0:d4:a9:56:27:d2:05:27:4b:8b:03:21:d6:
                    e0:16:74:99:31:e8:f2:47:92:1d:63:e3:2c:0e:10:
                    ca:55:e8:0f:55:db:d2:a7:8a:57:87:82:ae:5e:2d:
                    11:de:df:a8:13:0e:b8:03:25:4e:ad:e0:7a:fc:17:
                    1b:c8:9c:d2:87:19:f5:bb:32:2c:2a:57:8a:01:ca:
                    f3:47:06:1b:5d:99:69:08:6b:06:6b:7f:c9:fb:0c:
                    ab:6c:a2:23:73:e9:e3:39:94:13:1b:23:1d:6f:38:
                    6e:7e:e0:37:91:d0:7e:5b:3a:b2:86:49:97:99:d4:
                    0f:e5:f3:d5:ed:d5:de:89:1b:69:99:de:2f:bc:ae:
                    58:6d:1e:0e:10:8f:6e:1d:5d:78:02:af:21:4f:07:
                    c2:f6:59:56:1b:46:81:4d:44:04:03:de:f4:08:cd:
                    d0:f5:b3:1a:01:83:fd:a1:6a:1f:13:65:70:77:64:
                    80:d7:25:d2:b6:a5:fd:1a:75:47:3b:14:ce:e2:ef:
                    94:55:8c:c1:77:90:c9:4f:6b:50:38:d8:3d:c4:d8:
                    17:36:bf:64:2b:4a:da:d5:87:05:a2:93:c2:10:06:
                    58:0c:fa:37:3c:75:6d:7b:b5:a2:f6:25:67:fa:be:
                    dd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CD:41:1D:EC:DD:13:E1:90:34:37:B0:53:E9:C3:C8:12:23:2D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b442620e-ac18-3e7d-9341-fc1e63a6d528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e9:24:54:06:f2:0a:f6:f3:1e:44:2a:37:99:aa:05:6c:29:
         88:f0:76:c2:f1:20:42:5b:90:af:86:30:d3:ea:92:02:be:fc:
         07:70:1e:ed:47:60:a4:bd:44:08:56:f6:89:53:dc:db:21:01:
         c2:18:33:28:d7:ca:cf:bc:bd:df:21:15:95:b3:09:97:db:84:
         09:95:6d:9c:b2:09:44:e4:b1:b0:09:cc:74:d8:52:1e:ca:06:
         8d:49:b3:89:29:a5:02:0c:d0:31:3f:c1:49:2f:23:f2:98:00:
         68:39:bb:5b:62:71:89:96:f4:61:b9:87:44:5a:c3:8c:72:39:
         ff:d7:8f:8b:f8:60:8c:af:18:b7:91:19:eb:f8:3c:3b:52:6c:
         7d:b0:59:55:27:57:74:1a:6e:81:16:a7:45:6c:ce:a9:72:39:
         85:0f:71:04:3b:a9:10:ec:65:e3:35:22:92:81:9a:ff:43:34:
         38:91:0c:d4:45:5f:51:87:9a:41:fb:d2:e3:5f:76:09:a4:01:
         15:71:87:df:91:29:8f:19:ab:a4:14:6f:3b:1c:d4:c4:76:1b:
         09:1e:5f:91:dc:8f:0b:ba:22:d8:2a:ff:7b:2a:83:87:e1:51:
         27:b4:35:ea:bf:8d:ce:f9:49:f3:e2:99:31:a1:63:01:ca:08:
         51:45:46:b4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeHIRjoacHk/N6TrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
M2U0YTA0YjYtOGUzMS00NjU1LWE0MDItYzEwMmVhMjdiNWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4UYGcUthXBTOBDPX3vrIvDUqVYn0gUnS4sD
IdbgFnSZMejyR5IdY+MsDhDKVegPVdvSp4pXh4KuXi0R3t+oEw64AyVOreB6/Bcb
yJzShxn1uzIsKleKAcrzRwYbXZlpCGsGa3/J+wyrbKIjc+njOZQTGyMdbzhufuA3
kdB+WzqyhkmXmdQP5fPV7dXeiRtpmd4vvK5YbR4OEI9uHV14Aq8hTwfC9llWG0aB
TUQEA970CM3Q9bMaAYP9oWofE2Vwd2SA1yXStqX9GnVHOxTO4u+UVYzBd5DJT2tQ
ONg9xNgXNr9kK0ra1YcFopPCEAZYDPo3PHVte7Wi9iVn+r7dAQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIjNQR3s3RPhkDQ3sFPpw8gSIy2uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjQ0MjYyMGUtYWMxOC0z
ZTdkLTkzNDEtZmMxZTYzYTZkNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAW6SRUBvIK9vMeRCo3maoFbCmI8HbC8SBCW5CvhjDT6pICvvwHcB7t
R2CkvUQIVvaJU9zbIQHCGDMo18rPvL3fIRWVswmX24QJlW2csglE5LGwCcx02FIe
ygaNSbOJKaUCDNAxP8FJLyPymABoObtbYnGJlvRhuYdEWsOMcjn/14+L+GCMrxi3
kRnr+Dw7Umx9sFlVJ1d0Gm6BFqdFbM6pcjmFD3EEO6kQ7GXjNSKSgZr/QzQ4kQzU
RV9Rh5pB+9LjX3YJpAEVcYffkSmPGaukFG87HNTEdhsJHl+R3I8LuiLYKv97KoOH
4VEntDXqv43O+Unz4pkxoWMByghRRUa0
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:42 2024 by rpki-client on console-fra.rpki-client.org