Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de6b2284-8a31-3af9-9fb9-1d1c5173a208.roa
File:                     de6b2284-8a31-3af9-9fb9-1d1c5173a208.roa (raw, json)
Hash identifier:          vJ3865j6TO9j6e5S3FLmrtO406+GsqOUdmYzVZ/6hUg=
Subject key identifier:   37:2E:73:83:12:5B:AE:BC:29:1C:0F:FA:87:00:03:F7:DA:CC:ED:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584787211B6E9B6FF36222400FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de6b2284-8a31-3af9-9fb9-1d1c5173a208.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     20362
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:1b:6e:9b:6f:f3:62:22:40:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=622e7032-5ee5-40d6-8d06-7fb57d3a640a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:5d:77:9c:c0:2a:eb:d9:c1:9e:25:d6:df:
                    14:70:ab:53:98:5d:bb:6e:3f:c3:cf:f8:eb:ac:b5:
                    d7:54:6a:b5:19:ff:1b:d4:09:2a:e9:48:90:c3:9f:
                    7c:b2:10:98:e1:74:b0:b0:1d:18:8b:0d:52:68:e9:
                    bb:1a:9d:57:7a:29:5e:92:30:d8:dd:24:dc:34:59:
                    98:cb:2d:50:13:ed:8f:86:23:09:3a:50:c5:d0:bc:
                    86:1e:9e:04:a0:eb:d0:fa:05:6d:f3:11:fe:3c:09:
                    40:59:e1:d8:37:19:e4:00:0c:c5:80:7e:ca:87:f2:
                    a4:4a:d0:d5:79:b2:a6:bf:bf:ae:d6:e3:a5:ea:40:
                    ab:9e:2c:5b:df:6e:4e:a3:30:cb:41:6c:9b:09:e0:
                    31:b0:80:cd:57:fa:8b:ee:ee:31:ba:4d:e9:84:06:
                    17:72:26:37:a5:ae:c6:49:4a:90:aa:05:c3:0f:c1:
                    e3:7e:b4:6d:d3:14:34:10:1c:67:9b:f9:cb:eb:80:
                    a9:be:db:e2:0d:f9:e0:d8:24:4b:6f:9d:3c:b9:51:
                    56:26:64:a6:61:55:6e:bb:01:70:61:9e:67:a7:93:
                    27:45:f7:25:7e:8d:84:fa:89:46:7a:88:4a:f3:18:
                    a6:ed:4d:4e:cd:ac:6e:75:03:f2:e4:fe:36:6f:82:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2E:73:83:12:5B:AE:BC:29:1C:0F:FA:87:00:03:F7:DA:CC:ED:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de6b2284-8a31-3af9-9fb9-1d1c5173a208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:fa:43:ae:65:82:de:b5:fe:bc:97:d2:24:34:d2:bf:fd:22:
         89:e4:ad:12:16:44:be:a3:40:b9:88:78:fc:5b:61:39:59:d9:
         c2:f9:ab:dc:d5:18:b2:b9:7a:0f:0b:d2:a7:bb:07:15:48:08:
         30:23:c1:29:94:42:05:5e:60:31:a1:b0:5b:08:e5:ae:ee:cf:
         48:5b:29:50:50:f9:64:85:41:f7:80:8a:1a:30:44:85:d3:44:
         ed:6c:01:70:02:dc:67:b9:55:08:17:5b:57:e0:f7:b5:17:9a:
         80:07:93:9d:87:63:91:07:e7:5c:df:d3:35:8b:93:ff:aa:bd:
         b7:c2:88:4e:3a:fe:4e:77:47:a8:35:42:b8:34:7d:c8:05:e8:
         92:aa:6d:c8:11:46:61:31:a8:86:d2:e8:a9:0f:27:de:c3:66:
         4e:5b:51:11:9b:54:8a:a6:30:4a:fe:92:e8:bf:ae:8d:8d:0e:
         f0:3e:7a:87:0f:a3:b9:06:58:2a:c8:93:14:43:a7:22:4c:3f:
         e9:da:31:88:95:30:8b:a1:99:bd:61:2a:93:81:2f:ec:41:87:
         5a:dd:a9:1f:cc:c1:aa:f0:ef:48:d1:a6:51:17:a8:25:c9:34:
         30:11:40:12:50:39:d9:c3:24:d2:5a:37:75:24:74:15:06:e1:
         b8:b6:87:22
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeHIRtum2/zYiJAD8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
NjIyZTcwMzItNWVlNS00MGQ2LThkMDYtN2ZiNTdkM2E2NDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KFdd5zAKuvZwZ4l1t8UcKtTmF27bj/Dz/jr
rLXXVGq1Gf8b1Akq6UiQw598shCY4XSwsB0Yiw1SaOm7Gp1XeilekjDY3STcNFmY
yy1QE+2PhiMJOlDF0LyGHp4EoOvQ+gVt8xH+PAlAWeHYNxnkAAzFgH7Kh/KkStDV
ebKmv7+u1uOl6kCrnixb325OozDLQWybCeAxsIDNV/qL7u4xuk3phAYXciY3pa7G
SUqQqgXDD8HjfrRt0xQ0EBxnm/nL64CpvtviDfng2CRLb508uVFWJmSmYVVuuwFw
YZ5np5MnRfclfo2E+olGeohK8xim7U1OzaxudQPy5P42b4KUMwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDcuc4MSW668KRwP+ocAA/fazO3AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGU2YjIyODQtOGEzMS0z
YWY5LTlmYjktMWQxYzUxNzNhMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAK+kOuZYLetf68l9IkNNK//SKJ5K0SFkS+o0C5iHj8W2E5WdnC+avc
1RiyuXoPC9KnuwcVSAgwI8EplEIFXmAxobBbCOWu7s9IWylQUPlkhUH3gIoaMESF
00TtbAFwAtxnuVUIF1tX4Pe1F5qAB5Odh2ORB+dc39M1i5P/qr23wohOOv5Od0eo
NUK4NH3IBeiSqm3IEUZhMaiG0uipDyfew2ZOW1ERm1SKpjBK/pLov66NjQ7wPnqH
D6O5BlgqyJMUQ6ciTD/p2jGIlTCLoZm9YSqTgS/sQYda3akfzMGq8O9I0aZRF6gl
yTQwEUASUDnZwyTSWjd1JHQVBuG4toci
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:49 2024 by rpki-client on console-fra.rpki-client.org