Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea374711-4076-325b-ad5e-8add964e4d5a.roa
File:                     ea374711-4076-325b-ad5e-8add964e4d5a.roa (raw, json)
Hash identifier:          28zKqvVkFz4H+kbJi1pA5G2RM9FEFXMooRKDGHAhmro=
Subject key identifier:   06:7A:49:A7:89:80:79:11:5B:8E:2B:E8:E7:28:BB:03:5D:6E:6E:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847872117FD2352494E19F925B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea374711-4076-325b-ad5e-8add964e4d5a.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     396559
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:17:fd:23:52:49:4e:19:f9:25:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=6cda8c09-0759-4493-ae37-f8da97cc2662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:0b:a8:0c:e0:51:d2:92:48:48:d9:43:8a:
                    b0:96:63:9b:e9:2d:26:01:ca:6e:31:eb:83:2b:1c:
                    f1:f6:2c:4f:21:26:14:4d:31:39:61:98:4b:58:e1:
                    27:53:0a:5a:07:64:bd:63:12:94:69:81:65:f6:e8:
                    b3:cb:9e:88:62:55:10:0b:1c:0d:5b:58:2e:12:31:
                    8c:af:ee:a2:67:1e:4a:7d:95:fd:ef:ce:a3:17:ee:
                    a1:a9:34:67:50:40:73:4e:00:3a:af:18:5b:22:49:
                    e7:53:14:93:91:25:d4:aa:09:ab:70:ed:24:7d:43:
                    d2:2f:a8:87:eb:ef:8e:83:11:d4:27:f2:f1:ea:0c:
                    da:45:51:44:88:ba:ba:ac:80:00:c2:c9:76:84:62:
                    7b:43:8f:87:e0:d8:9c:ef:43:09:87:ff:04:77:97:
                    cd:d7:a5:e4:9d:5f:0f:3d:93:a2:d4:c1:00:49:56:
                    ed:8d:b6:ea:6c:e0:8b:7b:6a:4f:0c:3a:1b:16:3e:
                    ba:57:aa:09:b2:44:e5:33:cc:dc:22:a8:bc:12:47:
                    ce:eb:8d:69:2f:af:46:47:cd:d8:d2:1b:5a:dc:bb:
                    66:7c:52:dd:b4:4c:7b:57:d7:b2:16:17:60:fc:c8:
                    d8:2e:50:4e:83:49:62:29:71:ed:fa:d3:a5:51:75:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7A:49:A7:89:80:79:11:5B:8E:2B:E8:E7:28:BB:03:5D:6E:6E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea374711-4076-325b-ad5e-8add964e4d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:42:b8:11:62:38:57:31:7f:a9:a7:d7:c2:07:88:82:07:cb:
         75:ac:a3:54:cc:4b:5d:1f:e0:de:c3:a6:39:d6:8c:59:88:00:
         39:99:78:0c:89:05:9b:47:29:e1:13:0b:8c:a4:78:15:51:b2:
         60:f8:76:01:ae:4f:d8:f4:0d:60:9d:80:13:24:8d:c5:95:b2:
         53:7c:d4:ca:d7:70:4f:53:e6:2b:a2:aa:f2:47:a3:36:8b:f2:
         af:95:7a:ab:82:e1:41:37:af:08:b2:02:72:ff:da:bd:87:c3:
         16:0d:10:b8:ce:e7:7d:65:14:c2:29:4b:26:8c:b3:cd:1f:fd:
         61:7f:5b:ed:44:fb:6c:4b:ad:bf:63:7c:c9:07:22:6d:4f:38:
         49:60:3e:1b:4e:ce:4e:cb:33:47:22:37:fa:92:1f:ab:02:51:
         be:af:7b:90:44:f6:75:e2:9d:88:c1:dd:97:e1:82:f8:50:7a:
         9e:58:5a:08:17:a1:01:17:4e:95:a0:3e:63:50:7f:61:bd:51:
         73:6d:f5:58:b5:b7:45:87:d9:8b:ab:48:4f:46:d6:5d:9d:35:
         6b:e2:96:da:d4:ac:7e:95:03:1b:df:2a:de:98:3e:46:cb:2b:
         56:29:5a:01:c8:e5:90:9a:99:86:81:16:4d:1e:fb:aa:14:10:
         13:1c:1f:c2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeHIRf9I1JJThn5JbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
NmNkYThjMDktMDc1OS00NDkzLWFlMzctZjhkYTk3Y2MyNjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAQLqAzgUdKSSEjZQ4qwlmOb6S0mAcpuMeuD
Kxzx9ixPISYUTTE5YZhLWOEnUwpaB2S9YxKUaYFl9uizy56IYlUQCxwNW1guEjGM
r+6iZx5KfZX9786jF+6hqTRnUEBzTgA6rxhbIknnUxSTkSXUqgmrcO0kfUPSL6iH
6++OgxHUJ/Lx6gzaRVFEiLq6rIAAwsl2hGJ7Q4+H4Nic70MJh/8Ed5fN16XknV8P
PZOi1MEASVbtjbbqbOCLe2pPDDobFj66V6oJskTlM8zcIqi8EkfO641pL69GR83Y
0hta3LtmfFLdtEx7V9eyFhdg/MjYLlBOg0liKXHt+tOlUXWb9QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAZ6SaeJgHkRW44r6OcouwNdbm5TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWEzNzQ3MTEtNDA3Ni0z
MjViLWFkNWUtOGFkZDk2NGU0ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBCQrgRYjhXMX+pp9fCB4iCB8t1rKNUzEtdH+Dew6Y51oxZiAA5mXgM
iQWbRynhEwuMpHgVUbJg+HYBrk/Y9A1gnYATJI3FlbJTfNTK13BPU+YroqryR6M2
i/KvlXqrguFBN68IsgJy/9q9h8MWDRC4zud9ZRTCKUsmjLPNH/1hf1vtRPtsS62/
Y3zJByJtTzhJYD4bTs5OyzNHIjf6kh+rAlG+r3uQRPZ14p2Iwd2X4YL4UHqeWFoI
F6EBF06VoD5jUH9hvVFzbfVYtbdFh9mLq0hPRtZdnTVr4pba1Kx+lQMb3yremD5G
yytWKVoByOWQmpmGgRZNHvuqFBATHB/C
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:18 2024 by rpki-client on console-ams.rpki-client.org