Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc0aeb4c-5f5c-336b-93c6-f5a9234f0bf3.roa
File:                     fc0aeb4c-5f5c-336b-93c6-f5a9234f0bf3.roa (raw, json)
Hash identifier:          RUugA3OQMa4hYR8DpUrzKuaaK25OpYbIPY/TmS0HLnA=
Subject key identifier:   38:68:47:9D:F3:1C:C9:A2:D8:A4:DD:4A:6A:E4:73:1C:EE:8A:4D:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584787211DB8A143F7C71F1CE440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc0aeb4c-5f5c-336b-93c6-f5a9234f0bf3.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     397212
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:1d:b8:a1:43:f7:c7:1f:1c:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=22326304-9983-4b69-a713-034fdc4037f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:02:3a:3e:dc:c3:e7:28:e0:fe:49:ba:c9:68:
                    2c:7f:40:50:3b:8f:84:e9:72:a4:02:0e:9c:10:f4:
                    26:8b:b0:7e:8c:83:8c:19:cb:b4:13:92:35:35:7d:
                    b7:56:0f:55:da:c9:b5:4e:05:c0:d2:38:c0:70:86:
                    55:b5:68:ba:d2:54:a0:89:5f:89:d0:16:ab:06:c9:
                    68:51:4c:1b:29:67:8f:45:75:41:3d:c1:67:83:c0:
                    ec:8e:72:66:64:a8:59:8b:81:64:ed:38:c7:6a:ac:
                    36:1f:8d:30:7e:5f:75:7d:d5:a7:9d:60:02:99:32:
                    86:e4:f9:d5:75:cb:45:c1:fe:8e:c5:11:78:64:8f:
                    17:59:18:77:5e:c3:f4:06:02:a9:22:c7:00:5f:a2:
                    39:ce:8b:71:d9:0f:6b:a4:eb:47:50:9a:bc:52:1f:
                    bd:bb:bd:e9:bd:27:cb:92:91:a5:4f:9d:2a:e4:6e:
                    b0:ed:09:0b:4f:6c:5a:72:90:27:ac:c6:09:52:db:
                    20:b5:41:8a:f5:a3:b6:f8:92:f2:bd:ec:8b:51:a4:
                    13:98:8f:65:3a:94:14:8f:88:03:11:e5:5e:7d:a8:
                    23:5e:cc:56:79:80:35:9d:b8:86:e6:e0:41:25:cb:
                    83:4b:53:1b:3c:af:a7:35:44:d9:fc:59:94:96:5f:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:68:47:9D:F3:1C:C9:A2:D8:A4:DD:4A:6A:E4:73:1C:EE:8A:4D:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc0aeb4c-5f5c-336b-93c6-f5a9234f0bf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:63:09:d3:77:04:d4:45:89:f2:45:b5:f3:44:21:38:7d:14:
         0b:71:9a:83:3a:72:86:45:6d:73:96:3c:68:37:da:90:20:95:
         54:a2:30:44:b4:d7:d5:ee:61:8a:d3:bb:d8:94:a6:1a:04:6a:
         85:a4:7c:29:78:55:01:b2:3b:5d:fb:ed:01:17:b6:ad:8b:1b:
         94:94:80:91:3d:1e:27:b8:c2:06:7f:80:36:ff:53:11:25:fb:
         e1:95:65:cf:96:bf:59:90:e3:df:18:fc:e0:81:e1:68:59:4e:
         1a:01:03:80:b6:bc:35:9e:f0:71:fe:d0:c8:7d:7c:55:5e:7d:
         e5:c8:3d:39:07:bd:bb:d8:f4:75:ea:08:c4:c3:bd:d6:9b:e8:
         c3:fb:d0:b4:93:68:32:c9:a0:2f:65:47:c5:69:0e:f3:e6:b1:
         15:e3:b3:f6:06:95:29:07:c9:9d:d0:11:4a:9b:13:63:a1:bd:
         0f:4a:57:70:0f:39:5c:fa:7d:b4:a7:fb:52:ae:28:c3:19:75:
         83:66:38:b6:2f:5b:c2:b5:87:c1:4f:ec:45:48:89:67:4a:2e:
         04:eb:68:68:d6:0c:97:4a:69:b9:eb:35:53:9d:0e:b5:18:54:
         ab:8f:16:bc:c7:43:b9:11:31:e8:3b:f5:3d:0a:ef:f6:5f:9c:
         0f:49:d3:06
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeHIR24oUP3xx8c5EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
MjIzMjYzMDQtOTk4My00YjY5LWE3MTMtMDM0ZmRjNDAzN2Y3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQI6PtzD5yjg/km6yWgsf0BQO4+E6XKkAg6c
EPQmi7B+jIOMGcu0E5I1NX23Vg9V2sm1TgXA0jjAcIZVtWi60lSgiV+J0BarBslo
UUwbKWePRXVBPcFng8DsjnJmZKhZi4Fk7TjHaqw2H40wfl91fdWnnWACmTKG5PnV
dctFwf6OxRF4ZI8XWRh3XsP0BgKpIscAX6I5zotx2Q9rpOtHUJq8Uh+9u73pvSfL
kpGlT50q5G6w7QkLT2xacpAnrMYJUtsgtUGK9aO2+JLyveyLUaQTmI9lOpQUj4gD
EeVefagjXsxWeYA1nbiG5uBBJcuDS1MbPK+nNUTZ/FmUll9DwQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDhoR53zHMmi2KTdSmrkcxzuik0aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmMwYWViNGMtNWY1Yy0z
MzZiLTkzYzYtZjVhOTIzNGYwYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBVYwnTdwTURYnyRbXzRCE4fRQLcZqDOnKGRW1zljxoN9qQIJVUojBE
tNfV7mGK07vYlKYaBGqFpHwpeFUBsjtd++0BF7atixuUlICRPR4nuMIGf4A2/1MR
JfvhlWXPlr9ZkOPfGPzggeFoWU4aAQOAtrw1nvBx/tDIfXxVXn3lyD05B7272PR1
6gjEw73Wm+jD+9C0k2gyyaAvZUfFaQ7z5rEV47P2BpUpB8md0BFKmxNjob0PSldw
Dzlc+n20p/tSrijDGXWDZji2L1vCtYfBT+xFSIlnSi4E62ho1gyXSmm56zVTnQ61
GFSrjxa8x0O5ETHoO/U9Cu/2X5wPSdMG
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:20 2024 by rpki-client on console-ams.rpki-client.org