Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2370f688-962f-378f-b250-638c1daebac6.roa
File:                     2370f688-962f-378f-b250-638c1daebac6.roa (raw, json)
Hash identifier:          Gtcp2HtO/t6wvkCqH1d8gjCMn5ESCVm9Dw9/RhuR9dE=
Subject key identifier:   35:40:31:75:B8:30:BB:1A:97:5F:AE:D6:DE:C7:54:43:D7:61:21:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849203C7BBFDD8A90BAA2ED2200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2370f688-962f-378f-b250-638c1daebac6.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     396591
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:7b:bf:dd:8a:90:ba:a2:ed:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=1d338892-1077-406e-abf9-fdb950504f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:63:c5:c7:20:0a:4d:fe:75:8e:39:81:53:ac:
                    2b:4e:60:87:0d:f4:50:9e:3f:48:43:47:5f:03:76:
                    81:6f:65:ed:e0:a6:93:1a:27:3b:73:6e:bd:7e:8c:
                    ef:a4:c1:36:82:c2:38:e3:df:09:35:2f:01:63:8d:
                    9b:92:03:d4:f5:c5:3f:8f:77:6d:11:2e:f4:50:73:
                    e8:ff:3a:6e:d8:14:71:e3:c6:d3:8f:96:27:bf:b5:
                    90:8d:a3:49:19:b5:97:7e:6f:fd:3e:3b:93:2d:0a:
                    03:49:02:e9:c3:83:cf:02:36:6a:63:5a:fe:48:f6:
                    9c:de:18:ef:4e:a7:9b:ae:1e:a8:93:7e:51:26:88:
                    82:73:4c:8c:8d:9b:24:0c:26:21:14:88:25:80:47:
                    9f:a4:98:62:47:ed:35:d8:2e:e5:da:7b:b2:ef:ec:
                    8f:68:0b:c6:7e:6f:73:d4:39:82:93:a9:e6:5a:4f:
                    ab:0e:5e:5e:c1:be:97:a7:bd:cf:56:c2:f8:26:ce:
                    f2:ae:5b:be:c7:30:54:b1:03:5c:6f:96:24:f1:fd:
                    fe:20:75:8f:27:97:94:44:33:92:b6:34:8b:d1:a3:
                    2b:e2:ef:1d:f1:ea:10:22:23:47:7b:2e:70:c7:8f:
                    d9:2f:98:32:6b:1f:41:a0:8f:25:21:35:c7:75:63:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:40:31:75:B8:30:BB:1A:97:5F:AE:D6:DE:C7:54:43:D7:61:21:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2370f688-962f-378f-b250-638c1daebac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6a:3e:30:2f:96:69:e3:be:0a:81:29:c8:e9:22:3a:01:7c:
         4d:7f:34:59:eb:03:15:46:5e:8d:03:a5:f0:6f:3d:c7:08:30:
         6f:8b:5f:75:ff:c3:eb:4e:89:eb:a4:a9:03:1f:b3:76:a5:e7:
         85:b8:e3:59:f2:d6:15:3d:d1:8c:c0:51:17:00:84:03:9e:af:
         54:2f:5e:71:2c:c5:4e:66:31:b1:1b:4e:fb:a7:6b:76:78:fa:
         49:a8:aa:5b:7b:bf:d7:33:46:00:2e:9b:c2:03:04:5e:e2:4f:
         e0:e8:cf:94:66:fb:29:d7:5f:d1:75:49:1f:71:47:58:1b:a9:
         1c:da:c1:a9:d3:4b:af:f5:d2:56:ac:5d:e5:20:2f:5e:ac:09:
         73:25:b6:c3:0a:0b:da:9c:27:bf:30:77:97:29:0a:b5:2d:65:
         42:5d:85:de:8d:88:41:41:71:2b:47:36:16:29:e9:24:02:8d:
         5d:e7:6e:e8:57:39:95:02:66:a5:f4:9f:47:b0:72:56:2b:8c:
         c1:df:4c:e7:66:c5:b0:7a:54:0e:cf:7d:d0:3f:4f:7d:08:ca:
         9e:59:2e:50:c8:4c:b1:4a:92:f7:05:9d:2e:5c:81:96:0c:a1:
         16:37:36:e4:24:73:de:23:33:8c:20:fb:ed:b7:9c:23:1d:e5:
         40:a6:1a:53
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkgPHu/3YqQuqLtIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
MWQzMzg4OTItMTA3Ny00MDZlLWFiZjktZmRiOTUwNTA0ZjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmPFxyAKTf51jjmBU6wrTmCHDfRQnj9IQ0df
A3aBb2Xt4KaTGic7c269fozvpME2gsI4498JNS8BY42bkgPU9cU/j3dtES70UHPo
/zpu2BRx48bTj5Ynv7WQjaNJGbWXfm/9PjuTLQoDSQLpw4PPAjZqY1r+SPac3hjv
Tqebrh6ok35RJoiCc0yMjZskDCYhFIglgEefpJhiR+012C7l2nuy7+yPaAvGfm9z
1DmCk6nmWk+rDl5ewb6Xp73PVsL4Js7yrlu+xzBUsQNcb5Yk8f3+IHWPJ5eURDOS
tjSL0aMr4u8d8eoQIiNHey5wx4/ZL5gyax9BoI8lITXHdWP3RQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDVAMXW4MLsal1+u1t7HVEPXYSGAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjM3MGY2ODgtOTYyZi0z
NzhmLWIyNTAtNjM4YzFkYWViYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQASaj4wL5Zp474KgSnI6SI6AXxNfzRZ6wMVRl6NA6Xwbz3HCDBvi191
/8PrTonrpKkDH7N2peeFuONZ8tYVPdGMwFEXAIQDnq9UL15xLMVOZjGxG077p2t2
ePpJqKpbe7/XM0YALpvCAwRe4k/g6M+UZvsp11/RdUkfcUdYG6kc2sGp00uv9dJW
rF3lIC9erAlzJbbDCgvanCe/MHeXKQq1LWVCXYXejYhBQXErRzYWKekkAo1d527o
VzmVAmal9J9HsHJWK4zB30znZsWwelQOz33QP099CMqeWS5QyEyxSpL3BZ0uXIGW
DKEWNzbkJHPeIzOMIPvtt5wjHeVAphpT
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:24 2025 by rpki-client