Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd9b3345-edf3-3cfd-b65e-dc4200e52acf.roa
File:                     cd9b3345-edf3-3cfd-b65e-dc4200e52acf.roa (raw, json)
Hash identifier:          KI1BRJPDbOfLQRtLhkQ8pzFgdIe+ZWW9ceaYmgJM2Uw=
Subject key identifier:   A8:4F:19:44:CF:A1:82:5A:2E:81:45:3F:DA:86:E8:F9:ED:FE:8B:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476170C578F61B291C71C84460
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd9b3345-edf3-3cfd-b65e-dc4200e52acf.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     397207
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:c5:78:f6:1b:29:1c:71:c8:44:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=f1f06573-476f-47f3-9763-17d59a26cb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:4a:72:46:eb:f9:76:2c:96:76:62:19:3c:
                    8a:c6:40:40:cb:cf:eb:32:68:5c:31:16:b3:ee:59:
                    2b:41:06:4d:27:f2:6e:bf:6c:f2:ba:57:88:ab:78:
                    27:31:f0:7a:45:b1:fb:5e:01:b7:cd:4a:02:b6:3e:
                    3d:d0:1d:b4:4d:78:3c:c6:60:d9:70:2a:d5:23:04:
                    93:58:9c:1e:f3:ce:4c:3b:ab:2d:7a:89:c5:89:33:
                    fd:ab:33:1f:3d:1b:9f:c8:ed:49:b7:b5:c1:0a:b0:
                    62:25:4a:fd:0b:47:db:37:4b:1c:95:0c:a6:ef:89:
                    e7:8c:b2:fd:89:c0:8c:63:cc:64:34:8f:4e:c4:c8:
                    32:63:05:42:8a:c8:02:3f:8e:e8:0b:4f:fb:7e:df:
                    83:ee:3c:cb:d6:6f:ee:a9:eb:77:55:fe:a8:90:0d:
                    c4:b9:6b:e3:8e:74:31:b8:09:60:63:7d:1e:f5:7b:
                    33:48:c7:44:13:4a:ac:a9:c2:74:d1:c3:36:7e:8f:
                    ca:cc:a6:1f:ab:e5:82:0f:18:3f:19:fd:72:09:d6:
                    fc:3a:bf:5f:85:37:4c:fd:7b:47:7c:1f:12:d2:a7:
                    69:ae:5c:36:cb:5f:47:78:10:a8:b6:9c:a7:da:c0:
                    be:94:e5:2a:75:10:63:54:1f:0e:8b:b2:64:9b:5f:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4F:19:44:CF:A1:82:5A:2E:81:45:3F:DA:86:E8:F9:ED:FE:8B:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd9b3345-edf3-3cfd-b65e-dc4200e52acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:56:fc:f0:67:96:53:10:37:63:8b:10:4f:74:ff:4c:a4:a2:
         61:4c:67:fc:3b:64:12:f0:e8:7c:38:1a:79:f7:3d:35:4b:4f:
         07:38:db:a0:20:4c:b7:23:96:4d:e9:c0:9e:61:6e:d9:9f:ab:
         51:d7:8d:e7:97:15:69:52:d6:d8:83:62:b8:ca:04:c7:77:4b:
         eb:bb:3c:21:98:19:f9:6f:87:cf:96:d1:c1:0d:bf:ad:c8:26:
         12:b3:b9:fd:7f:46:54:54:02:c8:6a:a2:17:96:31:a2:2b:c2:
         64:61:5c:bc:2e:c4:1d:34:88:26:a2:aa:bd:5d:72:fd:25:87:
         9f:65:a0:ad:82:b0:2a:32:20:2c:c3:ad:ce:15:6f:9d:fa:29:
         37:52:72:17:a2:7b:d7:ba:da:41:0e:4d:44:87:56:f1:39:0f:
         7c:26:ad:c3:28:be:df:e6:9d:c2:f4:3a:3f:96:71:84:c8:2b:
         69:ff:6f:5e:e3:61:7f:a1:c6:31:b1:11:65:a0:c0:6a:7f:f9:
         31:f0:ab:65:14:b5:5c:58:29:38:05:90:3b:be:3d:3f:88:bd:
         41:96:01:5d:c5:45:44:97:3d:75:68:00:b8:ed:f7:8f:32:ff:
         ba:b0:dd:6a:f6:fa:46:ac:ae:83:30:eb:1f:23:2b:55:c1:29:
         7e:47:f8:aa
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdhcMV49hspHHHIRGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MDkzMDAxMDAzMVoXDTI0MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
ZjFmMDY1NzMtNDc2Zi00N2YzLTk3NjMtMTdkNTlhMjZjYjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSRKckbr+XYslnZiGTyKxkBAy8/rMmhcMRaz
7lkrQQZNJ/Juv2zyuleIq3gnMfB6RbH7XgG3zUoCtj490B20TXg8xmDZcCrVIwST
WJwe885MO6steonFiTP9qzMfPRufyO1Jt7XBCrBiJUr9C0fbN0sclQym74nnjLL9
icCMY8xkNI9OxMgyYwVCisgCP47oC0/7ft+D7jzL1m/uqet3Vf6okA3EuWvjjnQx
uAlgY30e9XszSMdEE0qsqcJ00cM2fo/KzKYfq+WCDxg/Gf1yCdb8Or9fhTdM/XtH
fB8S0qdprlw2y19HeBCotpyn2sC+lOUqdRBjVB8Oi7Jkm184CwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKhPGUTPoYJaLoFFP9qG6Pnt/otTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Q5YjMzNDUtZWRmMy0z
Y2ZkLWI2NWUtZGM0MjAwZTUyYWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAgVvzwZ5ZTEDdjixBPdP9MpKJhTGf8O2QS8Oh8OBp59z01S08HONug
IEy3I5ZN6cCeYW7Zn6tR143nlxVpUtbYg2K4ygTHd0vruzwhmBn5b4fPltHBDb+t
yCYSs7n9f0ZUVALIaqIXljGiK8JkYVy8LsQdNIgmoqq9XXL9JYefZaCtgrAqMiAs
w63OFW+d+ik3UnIXonvXutpBDk1Eh1bxOQ98Jq3DKL7f5p3C9Do/lnGEyCtp/29e
42F/ocYxsRFloMBqf/kx8KtlFLVcWCk4BZA7vj0/iL1BlgFdxUVElz11aAC47feP
Mv+6sN1q9vpGrK6DMOsfIytVwSl+R/iq
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:16 2024 by rpki-client on console-ams.rpki-client.org