Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24860194-ef31-3b3d-87dc-6dcb1ab31cca.roa
File:                     24860194-ef31-3b3d-87dc-6dcb1ab31cca.roa (raw, json)
Hash identifier:          XyXRQHCfjWoKtMdr43LckEY7eMV1rF91FqlZILtJ+HI=
Subject key identifier:   90:AF:1F:BB:FD:29:A1:9F:EF:38:39:AE:1C:5D:9E:74:6B:F4:D3:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A17263FC1B959C5F1F5124D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24860194-ef31-3b3d-87dc-6dcb1ab31cca.roa
Signing time:             Thu 05 Jun 2025 12:41:25 +0000
ROA not before:           Thu 05 Jun 2025 12:41:25 +0000
ROA not after:            Wed 03 Sep 2025 12:41:25 +0000
asID:                     396827
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:3f:c1:b9:59:c5:f1:f5:12:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:25 2025 GMT
            Not After : Sep  3 12:41:25 2025 GMT
        Subject: CN=395d4971-9141-478e-8ec9-85161b8eda9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:52:55:ed:6e:dd:39:c0:8a:4c:81:ce:bb:58:
                    be:df:a8:c4:ad:e4:5a:91:3c:e3:4f:b1:56:5e:4b:
                    fd:69:36:37:77:d0:09:78:95:28:84:c5:38:62:16:
                    c2:7a:52:9e:a2:36:64:71:6a:17:1c:3d:9a:45:38:
                    81:2e:7f:81:2f:38:87:3b:46:5b:ca:90:bb:a1:4c:
                    04:4d:ca:46:bf:b6:cb:de:43:d5:e8:9b:df:21:d3:
                    f1:9e:45:49:53:d3:10:e1:1c:66:a1:fd:27:31:28:
                    44:03:bd:0e:15:4c:68:af:a5:3c:2a:ce:31:c7:15:
                    db:0f:ed:1d:bb:1a:ef:36:0b:01:ed:74:35:aa:70:
                    73:80:68:0d:c4:a2:40:c9:e9:04:87:16:69:37:3f:
                    e0:72:d0:3f:62:86:1a:31:15:a6:da:d6:8c:2f:1e:
                    e0:f1:cc:36:0d:cf:70:c6:4c:f4:af:bb:0a:ca:75:
                    d8:b9:fb:5b:50:8f:51:1b:63:e0:ab:b5:00:c6:c2:
                    d6:04:d8:90:7a:4e:6c:93:bd:6a:ec:21:c1:34:1e:
                    48:a9:b8:e7:6b:48:e6:c4:4f:81:80:96:27:1f:64:
                    b2:0e:27:e3:e4:b1:33:ce:b1:f6:c3:3b:3b:6b:aa:
                    19:10:71:d2:24:3e:83:db:b9:7d:ea:5e:e1:57:8f:
                    de:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AF:1F:BB:FD:29:A1:9F:EF:38:39:AE:1C:5D:9E:74:6B:F4:D3:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24860194-ef31-3b3d-87dc-6dcb1ab31cca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:32:ae:d8:a8:57:df:bd:cf:17:34:ce:70:08:1b:47:9c:3b:
         f6:21:66:9c:d6:b3:01:6a:f9:b8:12:9a:77:f6:6e:c7:8a:72:
         a1:73:d3:6a:3b:b9:e1:e9:7a:44:22:3c:1f:16:bf:78:56:37:
         57:12:df:ca:0a:65:4a:00:de:18:24:c5:a2:b4:84:ae:69:83:
         45:36:69:a8:e0:07:33:82:1b:f2:a3:13:83:2d:dc:4e:71:7b:
         d1:99:95:56:e8:b3:ef:d5:9a:30:ec:5f:cc:2c:e1:4a:b3:8d:
         46:fb:53:5a:42:ae:59:87:e7:13:9c:56:8b:79:e5:f4:26:dc:
         00:f8:4a:3d:31:2c:7c:1a:89:80:95:e7:41:69:3d:93:dd:03:
         68:c2:db:00:c7:1e:e1:67:2a:71:55:54:86:4a:92:3a:39:05:
         81:45:8f:d8:ca:12:77:90:e3:97:d0:9f:7b:41:bf:90:b2:7a:
         6e:d1:96:91:5d:40:d4:fd:c7:e8:ba:e6:be:36:06:10:4a:a2:
         c3:0c:77:f2:59:52:6f:77:cb:07:bd:e4:b4:0e:e0:65:01:cc:
         1a:27:74:c9:48:da:60:b7:0f:7c:85:a9:3f:6b:44:a0:16:0f:
         cd:b2:a6:35:f2:a6:ac:c2:a1:53:d6:0a:b1:14:64:38:6d:dd:
         85:f6:ab:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXJj/BuVnF8fUSTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwNTEyNDEyNVoXDTI1MDkwMzEyNDEyNVowLzEtMCsGA1UEAxMk
Mzk1ZDQ5NzEtOTE0MS00NzhlLThlYzktODUxNjFiOGVkYTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFJV7W7dOcCKTIHOu1i+36jEreRakTzjT7FW
Xkv9aTY3d9AJeJUohMU4YhbCelKeojZkcWoXHD2aRTiBLn+BLziHO0ZbypC7oUwE
TcpGv7bL3kPV6JvfIdPxnkVJU9MQ4Rxmof0nMShEA70OFUxor6U8Ks4xxxXbD+0d
uxrvNgsB7XQ1qnBzgGgNxKJAyekEhxZpNz/gctA/YoYaMRWm2taMLx7g8cw2Dc9w
xkz0r7sKynXYuftbUI9RG2Pgq7UAxsLWBNiQek5sk71q7CHBNB5Iqbjna0jmxE+B
gJYnH2SyDifj5LEzzrH2wzs7a6oZEHHSJD6D27l96l7hV4/eiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJCvH7v9KaGf7zg5rhxdnnRr9NMaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjQ4NjAxOTQtZWYzMS0z
YjNkLTg3ZGMtNmRjYjFhYjMxY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcyrtioV9+9zxc0znAIG0ecO/YhZpzWswFq+bgSmnf2bseKcqFz02o7
ueHpekQiPB8Wv3hWN1cS38oKZUoA3hgkxaK0hK5pg0U2aajgBzOCG/KjE4Mt3E5x
e9GZlVbos+/VmjDsX8ws4UqzjUb7U1pCrlmH5xOcVot55fQm3AD4Sj0xLHwaiYCV
50FpPZPdA2jC2wDHHuFnKnFVVIZKkjo5BYFFj9jKEneQ45fQn3tBv5Cyem7RlpFd
QNT9x+i65r42BhBKosMMd/JZUm93ywe95LQO4GUBzBondMlI2mC3D3yFqT9rRKAW
D82ypjXypqzCoVPWCrEUZDht3YX2qxA=
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:54:01 2025 by rpki-client