Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efa52874-1e5f-39cf-97d8-397f8562ffe3.roa
File:                     efa52874-1e5f-39cf-97d8-397f8562ffe3.roa (raw, json)
Hash identifier:          J1YRaZXxKkdc7ICjBR4BBijdXG7ctpoA6ctUvTVi10c=
Subject key identifier:   98:89:0F:51:E0:57:07:1E:17:9A:14:A3:73:34:FF:86:60:1C:31:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858478721195E9DD3D884DB2B1380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efa52874-1e5f-39cf-97d8-397f8562ffe3.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     396604
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:19:5e:9d:d3:d8:84:db:2b:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=d3a62171-571f-4a01-b0dc-98f04af28fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:c1:d3:4f:18:4c:4d:64:59:4a:ef:2a:f4:
                    f4:5b:61:ee:14:cf:c1:56:2b:e5:17:71:ff:0a:a5:
                    2a:b6:4f:d8:0b:a7:1d:dd:bb:b0:4e:35:9c:39:4d:
                    1b:64:c7:45:2c:ca:47:78:0a:e9:62:6a:a8:4f:a8:
                    cc:30:63:3d:6d:3d:94:9f:7b:7b:79:eb:1a:4b:eb:
                    79:4d:df:1a:97:04:36:cf:6c:4d:11:56:67:fe:50:
                    20:fe:82:65:06:e6:9f:44:1b:6b:68:62:03:53:27:
                    23:f4:f1:22:08:6c:34:06:2c:d9:ea:82:bc:08:33:
                    37:f3:6d:f3:f0:b6:b2:39:2a:81:37:05:c8:d5:9e:
                    0a:52:11:98:99:7f:88:44:72:b9:6f:96:47:1a:2f:
                    3e:74:b1:9e:02:c1:78:08:e1:bf:c6:9c:a3:d8:7e:
                    0d:a9:6f:2b:02:a4:a1:aa:77:39:39:03:01:20:ad:
                    5e:a8:b8:49:09:b7:43:6d:26:52:5a:f2:92:be:11:
                    86:92:13:ef:83:e8:c5:b1:7f:a6:57:02:d9:c2:2d:
                    51:30:6d:b3:49:69:ec:16:83:44:56:5d:61:3b:3d:
                    e1:92:e6:15:04:fa:ef:57:ea:f4:09:c9:b5:af:3e:
                    3e:91:78:d8:0f:a5:fa:f4:25:83:8a:b6:77:64:8c:
                    50:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:89:0F:51:E0:57:07:1E:17:9A:14:A3:73:34:FF:86:60:1C:31:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efa52874-1e5f-39cf-97d8-397f8562ffe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c6:83:b6:b1:cc:94:8b:bb:fc:1b:f5:1b:95:fe:61:46:e3:
         0e:f8:10:de:4e:1d:33:fe:8c:1c:22:d8:ae:0b:a9:d2:94:e1:
         ec:2c:da:d1:df:68:ea:ca:cb:ce:2a:0c:2c:7a:e7:c0:cc:48:
         e6:4e:a2:7a:ae:9f:8d:2a:41:dc:77:74:4d:48:68:27:81:21:
         76:44:21:36:88:1c:c3:9f:2b:a1:3c:ad:13:33:92:37:74:e8:
         ed:82:d2:47:bc:8e:cd:77:66:a0:b6:c3:8a:66:81:40:4e:a8:
         73:67:0b:3f:60:2c:c0:d0:4b:75:9e:bb:92:ea:74:3a:44:cc:
         2c:61:95:0f:97:43:a7:97:1b:1b:e0:9b:d1:2e:74:4d:55:ef:
         2e:99:5f:ca:3d:cc:63:d8:f4:86:05:5a:62:62:fd:10:0f:a9:
         00:c0:7e:ab:b1:57:8e:3b:bc:2b:f0:59:cd:8f:14:cf:60:23:
         84:06:1d:b5:cf:65:f3:e3:c6:fe:80:d3:ea:f0:1f:ca:f2:9f:
         d7:4d:1b:7f:1a:f9:49:b4:29:d3:31:92:8c:c1:5c:a2:9f:94:
         db:20:df:b3:d2:84:f1:54:f1:26:54:cc:d3:c0:6f:8b:1f:4c:
         e0:42:aa:54:3b:3c:5c:98:e4:90:ee:72:24:54:48:de:44:48:
         25:b1:0b:10
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeHIRlendPYhNsrE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZDNhNjIxNzEtNTcxZi00YTAxLWIwZGMtOThmMDRhZjI4ZmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhXB008YTE1kWUrvKvT0W2HuFM/BVivlF3H/
CqUqtk/YC6cd3buwTjWcOU0bZMdFLMpHeArpYmqoT6jMMGM9bT2Un3t7eesaS+t5
Td8alwQ2z2xNEVZn/lAg/oJlBuafRBtraGIDUycj9PEiCGw0BizZ6oK8CDM3823z
8LayOSqBNwXI1Z4KUhGYmX+IRHK5b5ZHGi8+dLGeAsF4COG/xpyj2H4NqW8rAqSh
qnc5OQMBIK1eqLhJCbdDbSZSWvKSvhGGkhPvg+jFsX+mVwLZwi1RMG2zSWnsFoNE
Vl1hOz3hkuYVBPrvV+r0Ccm1rz4+kXjYD6X69CWDirZ3ZIxQBwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJiJD1HgVwceF5oUo3M0/4ZgHDFzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWZhNTI4NzQtMWU1Zi0z
OWNmLTk3ZDgtMzk3Zjg1NjJmZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAlxoO2scyUi7v8G/Ublf5hRuMO+BDeTh0z/owcItiuC6nSlOHsLNrR
32jqysvOKgwseufAzEjmTqJ6rp+NKkHcd3RNSGgngSF2RCE2iBzDnyuhPK0TM5I3
dOjtgtJHvI7Nd2agtsOKZoFATqhzZws/YCzA0Et1nruS6nQ6RMwsYZUPl0Onlxsb
4JvRLnRNVe8umV/KPcxj2PSGBVpiYv0QD6kAwH6rsVeOO7wr8FnNjxTPYCOEBh21
z2Xz48b+gNPq8B/K8p/XTRt/GvlJtCnTMZKMwVyin5TbIN+z0oTxVPEmVMzTwG+L
H0zgQqpUOzxcmOSQ7nIkVEjeREglsQsQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:52 2024 by rpki-client on console-fra.rpki-client.org