Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d5819e-33aa-3570-9d6b-312e55c7891f.roa
File:                     d8d5819e-33aa-3570-9d6b-312e55c7891f.roa (raw, json)
Hash identifier:          6jPUbar0/jrYkx+9Jq5Iv+Gf9Mm0NpDmslcJ54PpGtI=
Subject key identifier:   BF:F6:B3:26:41:84:C3:6A:E7:DF:63:2B:3E:6E:56:3B:CE:76:E8:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584795168877C1A5E691FA7E83C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d5819e-33aa-3570-9d6b-312e55c7891f.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     396585
IP address blocks:        192.153.247.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:88:77:c1:a5:e6:91:fa:7e:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=3908a643-7b23-4fd4-88c8-68832518c99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fc:31:11:17:08:c9:50:9b:c4:a0:9c:7c:b3:
                    8d:17:3e:72:e1:76:3f:fb:0c:f2:65:b2:d8:a3:20:
                    78:12:75:0f:f8:a8:01:cb:42:06:5c:67:44:d7:b7:
                    99:4b:f8:33:9d:46:e4:c0:1f:77:4e:ae:68:6a:d6:
                    52:02:4e:b0:3a:87:5d:ba:10:14:e1:27:bd:4a:f8:
                    78:66:d9:66:10:ea:45:23:b6:fd:c4:b7:bd:ca:70:
                    40:99:42:94:82:22:0c:d6:30:18:46:87:51:9e:4e:
                    7a:26:ea:10:30:75:5a:b7:c5:84:dd:a8:ee:9e:92:
                    3c:0e:30:ff:5b:26:92:af:b2:ba:70:39:b4:3b:c2:
                    39:ff:2f:ab:86:7b:7e:64:ea:c7:cd:52:4e:9a:09:
                    6b:e7:a2:35:19:f2:29:78:81:f7:52:cb:81:30:24:
                    34:af:11:0c:35:3a:07:c6:54:e8:26:ed:db:d8:fd:
                    94:0c:ad:a8:72:ab:1d:6f:6a:ce:5d:03:cb:75:65:
                    b2:5f:b4:29:71:1a:eb:30:2c:7c:d0:28:ec:a8:3c:
                    0d:3f:7f:dd:e2:36:c5:dd:06:c3:ab:fd:aa:6a:a4:
                    89:e4:a4:a7:52:69:e6:e3:ac:7e:01:5c:80:7c:e1:
                    b1:d7:1c:0e:49:72:6d:b5:02:b2:37:8e:24:43:9b:
                    ef:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F6:B3:26:41:84:C3:6A:E7:DF:63:2B:3E:6E:56:3B:CE:76:E8:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d5819e-33aa-3570-9d6b-312e55c7891f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2c:04:4c:0f:53:5b:14:09:a7:31:92:7b:3c:a9:15:32:df:
         92:fd:39:1b:64:11:ab:8e:c7:f6:76:a4:69:c8:75:41:bd:0d:
         c9:2c:47:5c:03:09:9d:5e:57:28:97:a0:b9:92:30:43:be:f2:
         76:57:e4:91:4b:86:02:c5:d2:60:5c:ad:58:9c:fc:25:48:83:
         f0:ad:25:9f:8b:8e:ad:4c:e6:36:71:0c:fb:af:a9:b1:c2:12:
         de:40:86:5d:00:55:fc:2d:e9:49:38:95:be:f0:38:3a:98:c5:
         65:8e:c0:10:f8:f0:64:06:c2:49:23:84:64:e0:e6:3e:bb:68:
         c5:90:f3:6d:2f:90:7c:ae:61:55:5f:c1:54:f3:5d:5b:a9:f9:
         88:9d:70:0f:43:d6:18:c5:f1:64:e2:dd:2d:58:10:5e:89:f0:
         3c:64:73:79:d2:b5:a9:75:1b:c1:c6:aa:96:4d:2e:d1:24:6b:
         0d:7a:36:cd:2e:1f:65:6d:df:84:38:84:d6:a7:ed:81:dc:29:
         02:14:04:78:a0:c2:04:b5:36:80:40:bd:32:37:d9:e0:8f:f6:
         40:5e:56:eb:c6:92:90:4a:6e:bc:7f:9a:7d:32:ce:d8:38:af:
         ad:5a:43:9e:6e:a7:ce:4e:60:10:3e:21:5c:8c:5d:09:72:2d:
         c5:62:bb:0a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeVFoh3waXmkfp+g8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxODEzMDA0MVoXDTI1MDExNjE0MDA0MVowLzEtMCsGA1UEAxMk
MzkwOGE2NDMtN2IyMy00ZmQ0LTg4YzgtNjg4MzI1MThjOTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvwxERcIyVCbxKCcfLONFz5y4XY/+wzyZbLY
oyB4EnUP+KgBy0IGXGdE17eZS/gznUbkwB93Tq5oatZSAk6wOodduhAU4Se9Svh4
ZtlmEOpFI7b9xLe9ynBAmUKUgiIM1jAYRodRnk56JuoQMHVat8WE3ajunpI8DjD/
WyaSr7K6cDm0O8I5/y+rhnt+ZOrHzVJOmglr56I1GfIpeIH3UsuBMCQ0rxEMNToH
xlToJu3b2P2UDK2ocqsdb2rOXQPLdWWyX7QpcRrrMCx80CjsqDwNP3/d4jbF3QbD
q/2qaqSJ5KSnUmnm46x+AVyAfOGx1xwOSXJttQKyN44kQ5vvOwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL/2syZBhMNq599jKz5uVjvOdug4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDhkNTgxOWUtMzNhYS0z
NTcwLTlkNmItMzEyZTU1Yzc4OTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAWLARMD1NbFAmnMZJ7PKkVMt+S/TkbZBGrjsf2dqRpyHVBvQ3JLEdc
AwmdXlcol6C5kjBDvvJ2V+SRS4YCxdJgXK1YnPwlSIPwrSWfi46tTOY2cQz7r6mx
whLeQIZdAFX8LelJOJW+8Dg6mMVljsAQ+PBkBsJJI4Rk4OY+u2jFkPNtL5B8rmFV
X8FU811bqfmInXAPQ9YYxfFk4t0tWBBeifA8ZHN50rWpdRvBxqqWTS7RJGsNejbN
Lh9lbd+EOITWp+2B3CkCFAR4oMIEtTaAQL0yN9ngj/ZAXlbrxpKQSm68f5p9Ms7Y
OK+tWkOebqfOTmAQPiFcjF0Jci3FYrsK
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:16 2024 by rpki-client on console-ams.rpki-client.org