Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b6a9365-cfe1-37f3-bf32-2092a32ccf51.roa
File:                     1b6a9365-cfe1-37f3-bf32-2092a32ccf51.roa (raw, json)
Hash identifier:          6S4k7opTqvd+zvgiuvep4ED6Ag1j4m3bD8pfC3GdnSs=
Subject key identifier:   59:64:70:79:FB:94:09:41:36:F6:81:9D:E3:44:D5:EB:5B:97:36:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A17263AB078DC9C5627FCDD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b6a9365-cfe1-37f3-bf32-2092a32ccf51.roa
Signing time:             Thu 05 Jun 2025 12:41:23 +0000
ROA not before:           Thu 05 Jun 2025 12:41:23 +0000
ROA not after:            Wed 03 Sep 2025 12:41:23 +0000
asID:                     397200
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:3a:b0:78:dc:9c:56:27:fc:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:23 2025 GMT
            Not After : Sep  3 12:41:23 2025 GMT
        Subject: CN=67abf9b7-91d0-4263-9c98-a5512a513460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:a7:e0:44:fe:58:10:42:54:1e:93:ca:e8:
                    01:f2:12:42:c4:6f:32:86:0e:17:8b:67:31:95:2e:
                    9a:38:b8:13:a6:d9:a0:e1:fa:18:c6:00:49:c0:c9:
                    44:f1:66:03:52:13:79:15:04:87:3f:0f:39:cd:d3:
                    28:19:1b:1e:4f:ea:aa:02:34:2d:2a:36:53:37:e5:
                    c4:0f:a9:44:24:18:67:5d:23:ee:55:de:e3:0d:0d:
                    7a:3b:14:2a:e9:ef:1c:fa:ad:94:68:e6:f3:57:f9:
                    ad:ef:d5:8b:c0:26:01:fc:fe:fd:00:d0:0b:ee:68:
                    ce:05:63:7f:9a:c4:24:05:cc:02:79:b8:21:e9:e8:
                    f5:16:1e:88:95:d3:1a:1c:31:0d:86:dc:3f:5b:72:
                    df:bf:21:ac:bd:81:12:24:00:d7:b7:37:1e:c7:1b:
                    49:f0:6a:bd:04:47:d4:40:39:55:29:88:7d:a3:81:
                    b4:05:5f:83:af:2c:ec:4b:ed:b5:8a:9e:39:7a:ab:
                    a2:aa:9e:a3:20:76:91:d2:c9:b2:eb:47:26:eb:00:
                    84:5f:38:1f:26:23:6d:cd:41:b7:47:63:0e:0c:08:
                    7f:dd:cb:75:5b:0b:e7:48:ab:ab:82:98:db:ab:0e:
                    79:ee:cc:1f:29:af:51:25:15:dd:6e:8d:cb:0a:12:
                    8c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:64:70:79:FB:94:09:41:36:F6:81:9D:E3:44:D5:EB:5B:97:36:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b6a9365-cfe1-37f3-bf32-2092a32ccf51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f9:c7:9a:de:2d:2d:cd:2a:30:6b:b4:6b:c0:8d:ad:2f:27:
         d2:7a:38:49:de:b8:99:ce:45:66:22:fe:79:79:cf:36:a0:e2:
         2d:95:68:4d:59:da:ba:66:95:d2:5b:fb:3b:a9:82:95:2a:fe:
         65:92:b6:9d:ca:58:5b:de:83:e8:1a:68:53:31:41:2c:6b:e7:
         4d:01:25:79:fb:8f:76:00:61:aa:4f:7f:f1:e7:8e:01:4b:0b:
         ac:8f:68:ee:44:62:f5:20:6d:91:ec:af:29:52:86:90:85:82:
         9a:03:10:78:06:85:1b:cd:d3:74:c1:7a:72:d0:c7:f5:95:c6:
         c7:f7:79:bc:6f:d7:8a:32:12:3c:71:01:57:18:b4:f2:cd:d1:
         d9:ec:2b:a2:48:ca:ea:98:2e:94:df:47:49:c5:fa:01:f7:5e:
         cd:bd:e6:28:c8:25:e9:37:7d:70:31:01:93:a6:d2:52:17:ed:
         2c:c2:90:99:59:3e:5b:57:4c:92:f9:79:1b:11:4e:93:1e:f8:
         8c:c2:08:04:1d:21:c2:9d:8d:7f:b1:3c:34:aa:73:a1:12:c5:
         86:73:a3:46:e6:4a:cd:09:0f:16:57:c6:c2:67:82:ff:3b:b9:
         5e:ac:6e:86:ef:89:27:99:d8:cf:94:86:62:84:ab:4f:b2:49:
         a8:c9:07:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXJjqweNycVif83QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwNTEyNDEyM1oXDTI1MDkwMzEyNDEyM1owLzEtMCsGA1UEAxMk
NjdhYmY5YjctOTFkMC00MjYzLTljOTgtYTU1MTJhNTEzNDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxyn4ET+WBBCVB6TyugB8hJCxG8yhg4Xi2cx
lS6aOLgTptmg4foYxgBJwMlE8WYDUhN5FQSHPw85zdMoGRseT+qqAjQtKjZTN+XE
D6lEJBhnXSPuVd7jDQ16OxQq6e8c+q2UaObzV/mt79WLwCYB/P79ANAL7mjOBWN/
msQkBcwCebgh6ej1Fh6IldMaHDENhtw/W3LfvyGsvYESJADXtzcexxtJ8Gq9BEfU
QDlVKYh9o4G0BV+DryzsS+21ip45equiqp6jIHaR0smy60cm6wCEXzgfJiNtzUG3
R2MODAh/3ct1WwvnSKurgpjbqw557swfKa9RJRXdbo3LChKMRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFlkcHn7lAlBNvaBneNE1etblzb3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWI2YTkzNjUtY2ZlMS0z
N2YzLWJmMzItMjA5MmEzMmNjZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFL5x5reLS3NKjBrtGvAja0vJ9J6OEneuJnORWYi/nl5zzag4i2VaE1Z
2rpmldJb+zupgpUq/mWStp3KWFveg+gaaFMxQSxr500BJXn7j3YAYapPf/HnjgFL
C6yPaO5EYvUgbZHsrylShpCFgpoDEHgGhRvN03TBenLQx/WVxsf3ebxv14oyEjxx
AVcYtPLN0dnsK6JIyuqYLpTfR0nF+gH3Xs295ijIJek3fXAxAZOm0lIX7SzCkJlZ
PltXTJL5eRsRTpMe+IzCCAQdIcKdjX+xPDSqc6ESxYZzo0bmSs0JDxZXxsJngv87
uV6sbobviSeZ2M+UhmKEq0+ySajJB3M=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:17:11 2025 by rpki-client